Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/JwYuKPl1wygYhq0B_aeKhSpprkI.roa
File: JwYuKPl1wygYhq0B_aeKhSpprkI.roa (raw, json)
Hash identifier: x+EmbxhZ/1B1J3mowEUpwNLS5gb+Jmq3cLooiic2JRI=
Subject key identifier: 27:06:2E:28:F9:75:C3:28:18:86:AD:01:FD:A7:8A:85:2A:69:AE:42
Certificate issuer: /CN=de01c443831cf930b7478708d76a3cf44d89a162
Certificate serial: 0192DEBFC0C486E7F2D9E51414C91580857B
Authority key identifier: DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/JwYuKPl1wygYhq0B_aeKhSpprkI.roa
Signing time: Wed 30 Oct 2024 18:46:01 +0000
ROA not before: Wed 30 Oct 2024 18:46:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59504
IP address blocks: 185.42.24.0/24 maxlen: 24
185.42.25.0/24 maxlen: 24
185.42.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:de:bf:c0:c4:86:e7:f2:d9:e5:14:14:c9:15:80:85:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de01c443831cf930b7478708d76a3cf44d89a162
Validity
Not Before: Oct 30 18:46:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27062e28f975c3281886ad01fda78a852a69ae42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:68:9c:90:c7:db:a2:70:40:04:6b:bc:59:75:
e8:10:94:77:94:7c:e2:6b:50:71:c0:ae:ed:a8:b9:
c8:e0:c8:bf:55:cd:5c:7a:47:29:f4:da:44:b6:49:
4d:2c:30:29:9a:5b:8b:36:9a:12:9e:98:e9:af:a4:
0c:ec:df:6f:98:32:a4:2a:41:23:a0:1d:e8:d6:1c:
8f:20:ef:ee:ce:45:3c:d9:f5:3c:e9:b5:ea:de:33:
26:b3:7a:93:36:52:b9:b4:16:9d:e6:b5:45:40:0b:
fa:29:63:d9:ac:a2:b9:52:a8:12:b2:af:e5:d0:f8:
0c:30:62:d5:fd:5d:53:c0:e4:9e:8e:41:20:37:bc:
ee:c6:de:20:c9:e1:28:ea:48:3b:81:62:f5:1d:75:
90:2f:3b:15:28:75:19:b7:0d:8a:db:77:f5:80:9b:
20:ad:f1:63:4e:a1:96:a7:c9:61:52:0a:26:be:bb:
43:24:f4:e6:f7:61:de:2d:eb:b9:c5:01:52:37:78:
8e:de:43:16:b5:6b:b5:2b:f9:cf:dd:c2:02:bc:11:
e8:2a:ff:69:2b:8a:56:89:cd:22:92:7d:44:36:cf:
2e:13:c1:18:80:88:79:55:ae:e5:92:28:6f:ae:56:
ba:6d:4b:e6:6b:a5:ca:38:76:c3:f0:b9:06:0d:fa:
2e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:06:2E:28:F9:75:C3:28:18:86:AD:01:FD:A7:8A:85:2A:69:AE:42
X509v3 Authority Key Identifier:
keyid:DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/JwYuKPl1wygYhq0B_aeKhSpprkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/3gHEQ4Mc-TC3R4cI12o89E2JoWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.24.0-185.42.26.255
Signature Algorithm: sha256WithRSAEncryption
1d:b7:12:df:e7:97:71:64:a6:ca:6a:12:d3:1a:18:61:4d:74:
a0:b8:f6:7c:ee:73:b1:59:08:ef:56:7d:85:76:97:22:96:a2:
c8:b8:1c:f5:37:cd:6c:75:c6:8b:6d:20:56:ba:d9:89:5e:8c:
4d:e7:67:f2:3b:03:ff:85:e4:3f:57:d8:fb:1c:02:f8:15:0d:
95:32:47:7e:c1:8b:ae:09:26:e8:e4:b4:43:df:71:9d:09:ac:
b1:f3:db:76:be:5a:6d:52:20:ed:7d:49:57:5b:2f:01:ac:3f:
08:21:ce:07:6c:11:0b:57:e1:f8:19:f5:8f:72:09:9b:15:a5:
6a:fe:8d:9c:f1:72:00:4b:2f:63:b5:95:f7:02:d8:9b:21:7f:
9d:b0:02:8d:83:9d:a0:18:32:47:d3:92:a1:80:9b:eb:04:10:
70:4f:8f:f1:45:3a:0a:c3:c3:a7:a6:5a:b3:f3:9f:56:91:74:
95:7f:e5:bc:08:c1:22:20:85:8c:d7:7b:24:2b:66:89:f9:a2:
87:42:9d:2f:a3:0d:0e:a9:f8:3f:97:22:11:50:ca:35:26:b7:
cb:50:62:93:3a:b8:de:f2:c0:dc:d1:bc:2c:93:25:bb:ba:6f:
d8:39:14:bb:b8:e9:7c:84:b5:d8:f6:63:81:90:cc:0b:4a:41:
f1:45:fd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:27:25 2025 by rpki-client