Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c01f5b-6d28-441d-8c15-1fcdac6f0183/1/JeNHjCrj9pOS1mQ97Har70CJVLc.roa
File: JeNHjCrj9pOS1mQ97Har70CJVLc.roa (raw, json)
Hash identifier: IisQxnK/9f+DzHL1B7FnQ/RujY+uUjYq7FRlGGWxLTg=
Subject key identifier: 25:E3:47:8C:2A:E3:F6:93:92:D6:64:3D:EC:76:AB:EF:40:89:54:B7
Certificate issuer: /CN=b32f015f6a2345345cb3daf230c25c8fae02305a
Certificate serial: 018485B245D20AAADEAB56EE91CDFD543CE3
Authority key identifier: B3:2F:01:5F:6A:23:45:34:5C:B3:DA:F2:30:C2:5C:8F:AE:02:30:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sy8BX2ojRTRcs9ryMMJcj64CMFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c01f5b-6d28-441d-8c15-1fcdac6f0183/1/JeNHjCrj9pOS1mQ97Har70CJVLc.roa
Signing time: Thu 17 Nov 2022 13:06:03 +0000
ROA not before: Thu 17 Nov 2022 13:06:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8866
IP address blocks: 195.177.248.0/23 maxlen: 23
193.22.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:85:b2:45:d2:0a:aa:de:ab:56:ee:91:cd:fd:54:3c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32f015f6a2345345cb3daf230c25c8fae02305a
Validity
Not Before: Nov 17 13:06:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=25e3478c2ae3f69392d6643dec76abef408954b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c6:69:90:47:71:43:37:86:4e:d8:f7:bd:c1:
92:65:fe:a5:6c:a7:77:e9:0e:4d:67:ea:80:a2:6b:
de:8d:14:7b:6f:a1:e2:62:e9:b6:c1:f5:88:ca:f1:
dc:be:a7:5d:ed:0f:ab:bc:ca:6e:6b:5a:92:aa:b0:
ae:5a:5e:d1:ca:45:ef:18:3b:22:1a:09:83:1b:65:
05:68:61:e5:0a:da:75:2f:e3:1b:ca:07:b0:c4:d4:
a8:ee:eb:1e:40:01:3b:9b:87:77:8c:a1:b8:1e:2f:
71:16:23:ac:91:d2:ec:95:17:a6:e4:5d:ab:86:95:
af:35:4d:9f:0d:43:15:26:89:a5:4e:93:33:0e:b8:
81:b2:e5:b8:87:dd:a3:4a:96:c1:ad:2a:f8:d6:66:
53:19:67:cc:63:e1:26:d0:4d:be:52:46:23:3e:14:
b7:b7:ed:7e:92:58:81:e3:3f:e3:38:db:99:ea:5d:
67:5d:52:cf:84:d2:d0:0f:f4:8e:73:3a:f4:56:b1:
72:77:4e:9a:26:55:e3:0d:69:5f:69:34:0d:c0:ff:
b3:be:39:1b:e5:c5:85:83:3e:25:70:28:11:af:c8:
54:5f:23:dd:a9:bb:81:93:a1:92:21:64:c7:4c:2d:
10:e8:0a:e1:92:ab:f0:6d:da:4f:5b:e9:76:df:35:
a7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E3:47:8C:2A:E3:F6:93:92:D6:64:3D:EC:76:AB:EF:40:89:54:B7
X509v3 Authority Key Identifier:
keyid:B3:2F:01:5F:6A:23:45:34:5C:B3:DA:F2:30:C2:5C:8F:AE:02:30:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sy8BX2ojRTRcs9ryMMJcj64CMFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c01f5b-6d28-441d-8c15-1fcdac6f0183/1/JeNHjCrj9pOS1mQ97Har70CJVLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c01f5b-6d28-441d-8c15-1fcdac6f0183/1/sy8BX2ojRTRcs9ryMMJcj64CMFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.103.0/24
195.177.248.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:4d:b9:3e:f5:10:1c:4f:82:90:dd:7e:16:ac:5f:a2:a1:ad:
26:56:63:7e:5d:c9:2e:2a:5a:99:d7:c8:32:0e:83:24:2f:31:
99:c7:e8:f9:64:f2:e3:dd:fa:97:d4:12:ee:97:2d:67:13:79:
c7:b7:da:b4:b5:29:23:7d:cc:93:36:6d:fc:8c:f6:38:e4:11:
62:7a:11:75:e1:30:0b:37:4e:71:ca:94:ed:29:a2:8f:0c:af:
70:a8:4a:1b:ed:57:6e:86:f4:6b:b9:a6:fc:ac:27:15:99:64:
4a:1b:20:ad:17:76:0f:79:cc:64:cd:e1:7f:4b:3f:2b:d3:a4:
17:c2:10:3f:5a:25:35:f8:ae:bb:a8:ac:5d:04:09:43:c8:36:
b2:85:98:10:d7:d5:63:d8:cf:bf:ae:51:b5:07:9f:de:bb:7e:
14:cb:16:37:93:77:50:a5:88:2d:c3:cd:cb:d4:9e:9b:42:88:
50:8b:29:b7:bb:0a:bd:b6:ef:3c:40:5b:1a:78:2a:fa:91:f1:
8e:91:03:0c:f9:38:dc:4e:85:6a:26:20:ea:0a:16:1e:a8:3a:
0f:59:b7:57:85:67:05:01:bf:f9:f1:dc:79:fe:d9:21:bf:b5:
d1:34:b1:8c:a9:4a:96:1e:92:c6:a4:6b:b3:8c:9d:29:9b:99:
96:15:d2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:12:37 2025 by rpki-client