Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/JJLEui4261ZXJVAJCMhhZuF8jH8.roa
File: JJLEui4261ZXJVAJCMhhZuF8jH8.roa (raw, json)
Hash identifier: /ixKOls/TcJQuO85TTUBz1567wbeYHBB+Wz+IfsDjR8=
Subject key identifier: 24:92:C4:BA:2E:36:EB:56:57:25:50:09:08:C8:61:66:E1:7C:8C:7F
Certificate issuer: /CN=6cc7585ab7a83ec80b55ab957bf37b791e765016
Certificate serial: 01942521988DABFC9B47843D03163F1FAFB6
Authority key identifier: 6C:C7:58:5A:B7:A8:3E:C8:0B:55:AB:95:7B:F3:7B:79:1E:76:50:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/JJLEui4261ZXJVAJCMhhZuF8jH8.roa
Signing time: Thu 02 Jan 2025 03:49:06 +0000
ROA not before: Thu 02 Jan 2025 03:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212813
IP address blocks: 185.76.158.0/24 maxlen: 24
2a10:2680::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:98:8d:ab:fc:9b:47:84:3d:03:16:3f:1f:af:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc7585ab7a83ec80b55ab957bf37b791e765016
Validity
Not Before: Jan 2 03:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2492c4ba2e36eb565725500908c86166e17c8c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2a:72:b7:8e:09:69:d5:65:09:13:3a:ed:c7:
02:b4:ef:0a:8c:cc:9d:91:a5:db:58:69:38:fb:04:
f1:18:7f:3a:90:b6:bd:9c:cc:c0:4a:bc:ec:b4:1c:
19:a2:6f:d7:8d:1c:95:4d:f1:1a:ee:4b:02:7e:8b:
d6:42:9d:d9:71:52:52:e4:43:9f:be:ea:cb:f7:fc:
79:ca:f3:5a:54:6b:4a:49:cd:9a:79:30:ee:b4:93:
6c:a9:20:d6:1e:e5:e3:88:a5:a5:a8:05:ae:22:a6:
55:ae:6c:2d:75:78:68:cc:41:af:31:fd:70:07:2f:
60:c0:b6:a3:9d:48:41:1d:e8:5d:c1:10:f4:24:79:
c5:a2:9b:44:5a:fd:b3:58:f4:ff:34:4b:74:c3:74:
37:93:ee:72:77:6b:c2:f3:3d:2b:40:f2:52:04:a4:
4b:df:23:27:a6:ef:58:e3:f1:54:13:55:1c:31:24:
fb:c9:f0:32:3d:bf:96:40:44:7f:60:3b:80:aa:7c:
6e:f9:56:18:96:08:6c:30:54:3c:80:c9:09:70:2c:
58:db:f5:53:b9:dd:d6:26:7e:79:d3:e2:73:54:26:
2d:98:50:17:57:1f:94:25:83:2a:91:e9:13:6d:7d:
f8:72:f3:4b:22:67:40:5a:d0:6f:34:04:d2:51:fa:
02:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:92:C4:BA:2E:36:EB:56:57:25:50:09:08:C8:61:66:E1:7C:8C:7F
X509v3 Authority Key Identifier:
keyid:6C:C7:58:5A:B7:A8:3E:C8:0B:55:AB:95:7B:F3:7B:79:1E:76:50:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/JJLEui4261ZXJVAJCMhhZuF8jH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.158.0/24
IPv6:
2a10:2680::/29
Signature Algorithm: sha256WithRSAEncryption
56:cb:34:c8:9d:7d:62:73:eb:3a:80:d1:37:78:ba:77:eb:2d:
c8:3a:69:6f:19:5c:9e:57:ce:f9:1b:93:78:ba:be:2f:03:d2:
74:a8:23:52:c0:55:5a:0e:c8:24:81:2b:d6:7b:cc:0b:49:87:
f2:af:8e:13:4e:d2:fb:c1:3d:2a:04:ae:90:b5:7c:ba:4b:f8:
fa:6d:8f:da:6b:a7:66:bd:e4:21:12:b5:d1:8b:1d:e9:5b:9a:
33:e2:83:e8:b5:7a:c0:ae:a6:8c:14:05:1a:4a:70:08:86:3a:
1f:a2:a7:df:28:82:f7:56:b8:fc:7b:02:d1:26:36:42:83:c2:
8a:3a:5d:b2:81:13:a8:fb:72:74:29:bc:8c:34:04:6e:17:28:
a8:dc:6e:68:88:1f:b4:9f:20:02:6b:2a:71:0d:66:e2:bd:88:
dc:19:7b:ab:c9:2b:91:6b:b5:f6:d3:32:f4:cf:bf:d4:6d:05:
ad:c9:d3:a5:59:48:a4:ea:19:bc:ef:bd:3e:6b:1f:f0:19:b3:
bd:df:2a:0f:5c:3a:92:74:4b:56:74:34:a5:f3:09:c9:d1:e2:
d8:92:41:31:50:30:19:55:26:03:e7:54:2b:66:69:97:39:aa:
d4:67:ea:25:4f:52:fb:60:8d:42:ec:45:62:db:ee:e9:78:e0:
5a:26:a3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:27:59 2025 by rpki-client