Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/JsFuF67j5QQhkERyLc9f-ELIcO4.roa
File: JsFuF67j5QQhkERyLc9f-ELIcO4.roa (raw, json)
Hash identifier: Jr+i8Pi7L5/o/8dCQ8fKEW/EXyo8XR/bahrVO/hjd9g=
Subject key identifier: 26:C1:6E:17:AE:E3:E5:04:21:90:44:72:2D:CF:5F:F8:42:C8:70:EE
Certificate issuer: /CN=26bab8c6915851f4efd40274f742509b7ac7e22e
Certificate serial: 019421444A1795B55BE87DC2360A4F7FDBF5
Authority key identifier: 26:BA:B8:C6:91:58:51:F4:EF:D4:02:74:F7:42:50:9B:7A:C7:E2:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jrq4xpFYUfTv1AJ090JQm3rH4i4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/JsFuF67j5QQhkERyLc9f-ELIcO4.roa
Signing time: Wed 01 Jan 2025 09:48:30 +0000
ROA not before: Wed 01 Jan 2025 09:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1213
IP address blocks: 157.190.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:4a:17:95:b5:5b:e8:7d:c2:36:0a:4f:7f:db:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bab8c6915851f4efd40274f742509b7ac7e22e
Validity
Not Before: Jan 1 09:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26c16e17aee3e504219044722dcf5ff842c870ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:55:d8:98:bb:8a:cf:e0:aa:4b:b4:43:6c:9c:
fa:90:c4:d3:4c:ee:58:91:c7:b7:97:a6:57:ca:f6:
d2:34:b3:49:c5:18:93:33:ac:c9:50:44:b7:ee:f6:
f2:d6:e1:3f:89:b5:6e:57:d3:5c:50:32:63:20:60:
6c:44:31:e9:50:00:b2:d6:d1:51:04:5c:c1:71:71:
ff:66:9f:22:e4:c2:e2:cb:60:16:7b:18:ce:49:5d:
84:a9:d6:e3:41:41:b4:12:28:a3:e6:bd:81:83:e1:
7a:82:d8:cc:24:19:28:31:78:15:fd:f0:d6:e9:f6:
bf:b3:f3:89:bc:f0:9a:30:ff:a5:cc:58:5a:b2:70:
e1:14:82:34:c6:84:09:f4:a4:13:51:73:f2:9b:e1:
d4:60:5a:a6:0c:87:fc:7b:5c:82:ed:56:76:33:d7:
e6:fe:48:8a:6a:cd:b8:a8:db:90:60:fd:18:70:34:
ed:85:e5:6f:68:58:0c:65:81:e4:f8:cf:6c:23:07:
9f:98:c0:60:94:00:e3:3d:1a:2c:ec:86:be:98:33:
f4:be:95:db:5e:ac:d6:94:75:35:90:4d:5f:25:83:
24:39:3f:2d:28:34:7e:31:12:af:74:93:06:f0:e7:
99:b6:b2:f4:8b:0c:b2:f5:9d:7d:77:69:8a:b6:48:
10:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C1:6E:17:AE:E3:E5:04:21:90:44:72:2D:CF:5F:F8:42:C8:70:EE
X509v3 Authority Key Identifier:
keyid:26:BA:B8:C6:91:58:51:F4:EF:D4:02:74:F7:42:50:9B:7A:C7:E2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jrq4xpFYUfTv1AJ090JQm3rH4i4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/JsFuF67j5QQhkERyLc9f-ELIcO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.190.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1a:30:40:bc:e3:18:d9:fb:41:35:b8:d9:b9:05:a2:6c:9e:7b:
93:80:cc:58:c4:59:1d:ab:a9:77:92:6a:c4:c3:da:bb:4d:02:
00:fd:a6:bb:05:4b:3d:91:e0:b6:79:49:76:8c:8a:25:5a:8d:
d3:fd:ef:c1:69:a9:a9:53:5b:56:3a:94:13:13:c0:e9:54:43:
3c:30:ec:80:24:92:43:9a:48:a1:0e:9c:53:01:c2:a1:44:32:
37:f2:97:d7:6b:1c:9b:41:8a:61:7b:56:37:40:ac:51:49:58:
d8:fa:a0:63:b2:d4:ba:f8:b7:06:e6:22:37:b4:c9:94:30:1e:
82:db:b1:a8:5b:54:43:55:ec:1a:03:fe:69:df:70:8d:44:7d:
c2:65:4b:20:bd:0e:5f:eb:d5:fc:16:1b:c8:24:3f:a7:05:1c:
b4:0a:a0:83:07:aa:e3:51:95:18:2e:cd:6b:f0:70:4f:81:c6:
60:bb:7d:79:29:c4:80:59:6f:ff:2c:66:cc:df:42:e2:17:fb:
97:d5:de:01:17:9c:f7:82:a8:87:c9:8b:8f:52:d0:ca:aa:d5:
b2:89:3b:38:44:8a:f5:12:98:d5:95:57:8a:0b:bb:21:6d:4d:
5f:59:3b:61:4d:31:81:f8:b8:a0:da:35:bc:f9:67:30:f9:45:
4f:0a:ae:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:53:53 2025 by rpki-client