Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/JF8EogIlY61SeMfqDNhSSWneB9w.roa
File: JF8EogIlY61SeMfqDNhSSWneB9w.roa (raw, json)
Hash identifier: ehFXWJl/FaQe39IltfqDFlDhY54k9o37m7Ll4Cz1loQ=
Subject key identifier: 24:5F:04:A2:02:25:63:AD:52:78:C7:EA:0C:D8:52:49:69:DE:07:DC
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01942746A530236309679B670F07AAB4F319
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/JF8EogIlY61SeMfqDNhSSWneB9w.roa
Signing time: Thu 02 Jan 2025 13:48:48 +0000
ROA not before: Thu 02 Jan 2025 13:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200075
IP address blocks: 188.132.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:a5:30:23:63:09:67:9b:67:0f:07:aa:b4:f3:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 13:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=245f04a2022563ad5278c7ea0cd8524969de07dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8f:4e:77:b3:19:01:79:de:5b:3b:bc:b5:0b:
16:a9:0a:35:bc:34:a8:01:52:1c:b2:b4:de:f1:56:
38:df:c0:15:59:1a:c2:d0:d7:85:e7:8e:9e:5e:10:
76:a5:9b:72:7f:99:52:5c:d0:2a:c2:da:ca:ba:4a:
4c:5f:a3:d4:72:a4:7b:19:03:7a:f4:6f:39:4d:f9:
84:7d:5f:c7:1e:59:0e:e2:08:ad:1a:2c:66:d1:6e:
b4:3d:8c:a4:74:17:29:f1:41:60:e1:a7:57:e6:78:
bc:8d:3d:81:16:7e:28:02:56:16:af:e0:0a:a9:87:
ac:ea:48:57:b3:3d:9f:20:6e:64:0e:9d:be:d8:1e:
70:e7:05:9e:56:b6:cc:2d:2f:29:ed:c8:c8:10:a7:
2d:53:e6:dd:8b:5c:1f:af:b2:21:11:52:8b:81:c8:
dc:b2:08:d4:f9:d7:4e:1b:2d:bd:a1:5c:71:1f:b3:
09:3f:19:fb:f1:60:43:1e:db:15:f1:3a:eb:34:43:
45:33:92:5f:82:64:0f:38:3c:78:0c:78:9e:db:a5:
47:2c:6b:56:50:dd:e2:32:57:c4:bc:cf:f5:16:d3:
eb:e3:15:9c:79:eb:a8:2c:86:5f:09:eb:ff:e0:f9:
7a:1b:30:5c:e4:3e:f8:8f:fe:aa:8e:43:96:ee:33:
ad:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5F:04:A2:02:25:63:AD:52:78:C7:EA:0C:D8:52:49:69:DE:07:DC
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/JF8EogIlY61SeMfqDNhSSWneB9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.155.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:ad:59:a9:ff:4a:5b:dd:9c:36:96:42:e9:e2:74:03:5e:dd:
b8:44:54:89:e4:5e:88:d4:e3:16:3f:23:8e:c1:74:d2:24:ec:
00:1c:21:5c:8f:ad:06:e8:86:5a:6c:99:d6:02:08:ba:b2:39:
0b:5c:40:55:0d:b6:05:7d:10:e6:6f:c4:f0:80:91:91:0d:30:
d1:5a:a5:9f:b8:38:9d:70:6f:4e:14:38:5a:36:a8:09:7e:04:
e9:26:f5:a7:09:9b:44:25:e5:65:be:d3:db:37:1e:03:b8:cd:
cd:98:33:c1:0f:e1:c6:52:80:1f:ef:76:e6:8a:f6:3a:7b:e9:
9b:15:5e:a0:46:a6:e5:90:5f:54:ec:2b:a3:4b:83:4f:94:40:
52:bf:71:c7:e8:48:5e:a6:bf:19:a8:b9:0b:1c:9b:92:44:6f:
ae:e8:e2:c8:4f:0e:5a:0f:e4:f5:49:c1:21:54:b3:30:be:1b:
3d:7c:2a:1d:76:65:b6:a1:3e:0e:39:a2:cb:80:0b:c5:db:04:
69:d6:af:e9:f2:0f:08:34:fe:b6:16:af:b0:02:4c:12:9e:dc:
5e:a8:6e:83:90:a2:ba:b2:76:4f:22:8d:ee:13:76:4a:6c:e6:
ce:3b:c4:c0:2d:ca:b3:ee:04:f7:b1:9d:52:16:74:c1:04:2c:
8a:23:18:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:31:58 2025 by rpki-client