Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Jo9_8piUxg2wee4-7hJARk5rotE.roa
File: Jo9_8piUxg2wee4-7hJARk5rotE.roa (raw, json)
Hash identifier: vqLLjwPcKVEzxJ3q8XfOQ/ryqpCfo/jKRQDYOnt6bJ4=
Subject key identifier: 26:8F:7F:F2:98:94:C6:0D:B0:79:EE:3E:EE:12:40:46:4E:6B:A2:D1
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019427B55420A9C81A882A3B80CAD476F62A
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Jo9_8piUxg2wee4-7hJARk5rotE.roa
Signing time: Thu 02 Jan 2025 15:49:42 +0000
ROA not before: Thu 02 Jan 2025 15:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47479
IP address blocks: 194.28.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:54:20:a9:c8:1a:88:2a:3b:80:ca:d4:76:f6:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 2 15:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=268f7ff29894c60db079ee3eee1240464e6ba2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5e:32:f8:9f:ad:d9:94:d9:07:51:5a:e4:8f:
7a:37:be:ba:7e:53:56:ae:1e:f6:0f:5a:34:60:23:
b7:83:b5:72:09:b9:86:12:9e:2d:e3:1c:98:9e:98:
67:35:4d:fc:f3:45:8c:7c:f8:20:de:2d:f7:de:79:
0a:cf:58:a1:35:d9:c4:9d:17:b4:dc:b3:aa:14:37:
15:c9:40:8e:88:4f:9e:38:d7:e2:bc:dd:67:61:49:
4b:c9:d0:16:1a:9c:68:76:64:d4:ea:e4:f7:cb:8d:
84:46:fd:ac:71:f1:e6:cf:c9:96:cb:5a:9a:e5:b2:
d3:30:6b:9b:63:f2:f8:f4:9f:57:84:f9:ee:16:f9:
39:89:aa:ad:87:f1:c7:11:14:19:11:de:c7:39:5e:
13:f5:2b:60:e4:ee:6f:15:e3:ea:1b:e2:a1:0e:c2:
05:2a:af:b3:0d:44:fb:31:7f:68:3f:de:a9:7f:90:
79:47:33:a6:bd:28:b6:2f:13:7c:29:5f:d7:22:16:
8d:83:5f:d1:8d:4b:c8:b9:73:6b:3f:74:b9:46:0e:
f5:a8:9b:b2:fa:7d:7c:7a:a0:be:82:bb:60:98:29:
0a:43:52:df:37:20:c2:c9:ab:2d:2f:f4:9e:ea:57:
54:2d:5e:be:83:51:ad:be:32:da:2b:ca:1c:34:d4:
e2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8F:7F:F2:98:94:C6:0D:B0:79:EE:3E:EE:12:40:46:4E:6B:A2:D1
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Jo9_8piUxg2wee4-7hJARk5rotE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.128.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:dc:27:e6:3b:c0:ad:fc:d5:77:52:73:bf:0a:6f:93:b2:aa:
af:d8:2a:bd:59:0e:41:51:d9:f2:ed:d8:b2:2b:93:87:5b:8a:
41:d7:b5:b2:46:ed:12:4e:b0:73:d8:3f:2a:d6:9b:96:27:c8:
8d:62:33:91:67:03:d5:26:2e:dd:b8:e8:ba:fa:e5:d8:54:2b:
62:d3:c0:b7:fa:ac:aa:0a:03:fc:f0:a1:00:52:12:67:3c:5d:
aa:98:db:ce:f8:2c:14:c3:be:7e:b9:b0:06:90:1c:30:7d:1e:
8b:a3:56:8f:b3:c3:80:d4:1f:86:4e:b1:65:15:dc:de:ba:9c:
fe:c8:3a:2c:0d:cb:d7:26:05:d5:5d:7d:6b:31:e0:cd:16:c2:
eb:e0:b7:d0:15:9b:da:b3:84:f1:b7:17:0e:c7:80:c7:1c:4e:
b4:39:da:58:a2:8a:22:cc:b4:57:0e:1b:ca:8d:5c:24:08:d9:
e4:87:ff:f8:0c:53:58:cc:03:7b:04:71:12:2f:e7:48:1e:a5:
f2:f2:78:f1:50:2d:60:55:1d:22:3b:a2:17:b1:92:29:69:cb:
ff:83:46:dd:e5:a7:47:06:d7:f2:ac:32:7b:70:6d:79:35:db:
57:28:e6:48:b2:32:10:0f:95:ba:e3:cc:65:8d:0f:a5:45:b5:
95:6b:d3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:04 2025 by rpki-client