Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/rj-L1Ht9KU4SpqytVvSZ8FykJs0.roa
File: rj-L1Ht9KU4SpqytVvSZ8FykJs0.roa (raw, json)
Hash identifier: o5/pUFEbXRLCOB5XslmeCnU9+6JRYi7PIpvUyWlOL2M=
Subject key identifier: AE:3F:8B:D4:7B:7D:29:4E:12:A6:AC:AD:56:F4:99:F0:5C:A4:26:CD
Certificate issuer: /CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b
Certificate serial: 019427B5CBF34C0A75E860A33B2C427C80E6
Authority key identifier: E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/rj-L1Ht9KU4SpqytVvSZ8FykJs0.roa
Signing time: Thu 02 Jan 2025 15:50:13 +0000
ROA not before: Thu 02 Jan 2025 15:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199424
IP address blocks: 195.2.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:cb:f3:4c:0a:75:e8:60:a3:3b:2c:42:7c:80:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b
Validity
Not Before: Jan 2 15:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae3f8bd47b7d294e12a6acad56f499f05ca426cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0c:a1:44:16:ab:3d:8f:28:cc:9c:dd:22:17:
50:46:5c:97:4d:1f:1d:d6:f9:83:71:35:66:77:92:
99:55:8c:bf:88:d7:28:91:c7:f1:eb:ad:69:9c:d2:
6a:f8:32:6e:78:bf:4e:7e:82:f3:a5:de:a9:16:22:
d9:09:2b:c7:b8:d0:51:d4:00:75:e3:7f:83:87:ad:
a9:69:e6:2b:71:5f:25:37:0a:bc:9a:57:93:88:6d:
f5:a4:eb:5c:53:10:8c:f4:fc:15:32:af:20:d6:78:
4d:1c:8b:be:79:92:f2:c1:d7:c7:a1:39:2c:ae:0b:
c9:60:90:cd:ef:b0:31:ca:d0:a8:3c:04:69:56:0e:
67:e9:51:63:a3:47:41:53:44:f5:4b:b9:85:6f:30:
ec:6f:83:12:ed:d5:e4:bd:55:74:11:dc:79:74:f5:
e2:94:0f:d7:d9:75:3e:7a:c8:5f:ae:57:f7:d6:c1:
6e:70:1d:cc:f7:5f:5d:d3:e4:71:20:71:8d:8c:cc:
9a:01:03:72:a0:be:fb:37:0c:6f:63:b3:a6:00:8a:
5d:64:5a:a4:e1:a6:d3:2d:ee:76:da:f4:0d:86:47:
60:2e:81:58:36:af:e4:f6:69:db:63:bc:96:ed:87:
97:57:a4:ed:3a:39:b6:ef:fe:ec:39:25:79:b9:3a:
7b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3F:8B:D4:7B:7D:29:4E:12:A6:AC:AD:56:F4:99:F0:5C:A4:26:CD
X509v3 Authority Key Identifier:
keyid:E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/rj-L1Ht9KU4SpqytVvSZ8FykJs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.2.226.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:e1:91:c9:d3:31:5b:d8:56:91:65:fe:85:18:06:f0:cb:c0:
89:48:69:38:da:60:89:ae:18:9d:8a:9a:6f:41:c2:fe:db:4b:
21:4a:9c:f5:33:d7:e1:dd:4f:c8:b5:12:80:a2:98:42:ec:5c:
9b:1a:5f:19:0b:02:5b:16:8c:d0:63:e0:5c:97:af:a7:d3:59:
fa:f0:cb:e0:43:28:22:de:ff:8f:5d:53:91:da:df:60:14:a6:
98:dc:20:b3:46:de:dd:0e:fc:ae:9b:80:8c:be:6d:f6:db:9a:
50:97:da:d6:ef:6f:b5:b4:5c:b5:c8:42:54:1c:03:6c:8e:f0:
89:bf:74:e4:26:77:ab:93:57:87:9f:07:ad:53:e8:93:11:0f:
34:b7:78:2a:fc:61:13:c2:bf:1d:0f:eb:34:25:a4:74:57:51:
b5:6e:28:0d:5c:09:49:44:00:a2:80:55:97:51:f9:13:2a:f6:
84:01:eb:82:ca:83:93:3a:48:33:46:11:46:b3:42:37:4c:2a:
98:76:e7:89:a2:5d:99:47:bd:28:0e:d2:73:77:c7:e1:37:ba:
e5:d6:f3:53:e1:5f:d4:4e:ad:ec:2b:33:46:71:1b:e5:91:33:
a9:2a:b1:a4:2a:ed:9e:f2:01:74:09:89:b5:7c:ea:8a:5b:51:
1a:2b:71:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:00 2025 by rpki-client