Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/JC586knHAJCWuyAHAdSdP6vCZvc.roa
File: JC586knHAJCWuyAHAdSdP6vCZvc.roa (raw, json)
Hash identifier: 5tWj8kAF7Tk8U+7sz2E535dJcNrZC7NIfrQwoPJI7rw=
Subject key identifier: 24:2E:7C:EA:49:C7:00:90:96:BB:20:07:01:D4:9D:3F:AB:C2:66:F7
Certificate issuer: /CN=d23c59255919bdd9ab03bde1c5c788062c4b99f3
Certificate serial: 0194228E3DD6212C622810D0551F05AE8D95
Authority key identifier: D2:3C:59:25:59:19:BD:D9:AB:03:BD:E1:C5:C7:88:06:2C:4B:99:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jxZJVkZvdmrA73hxceIBixLmfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/JC586knHAJCWuyAHAdSdP6vCZvc.roa
Signing time: Wed 01 Jan 2025 15:48:54 +0000
ROA not before: Wed 01 Jan 2025 15:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57236
IP address blocks: 193.42.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:3d:d6:21:2c:62:28:10:d0:55:1f:05:ae:8d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23c59255919bdd9ab03bde1c5c788062c4b99f3
Validity
Not Before: Jan 1 15:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=242e7cea49c7009096bb200701d49d3fabc266f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:74:51:e0:b9:4d:40:75:51:bc:42:c6:c1:04:
44:a9:01:70:03:6c:87:7c:2a:eb:7b:27:6b:7b:ed:
e1:2b:e7:05:26:b9:8d:fe:80:5b:ff:93:1f:02:f6:
45:76:ab:a0:21:33:88:5d:a5:2a:d2:2a:78:eb:f2:
c1:d9:cc:6e:3e:55:22:03:fc:58:96:e7:28:6a:58:
4d:00:04:88:1f:e0:8c:f8:e0:89:9b:79:7e:7f:a1:
e4:7c:48:e5:04:a8:05:1c:ab:e4:67:03:96:23:a7:
ea:6c:3b:b6:da:3c:10:bf:7c:72:a2:8c:7e:d8:46:
3b:95:6f:70:d9:88:73:bb:b4:44:31:f7:db:10:e6:
32:bd:f6:40:42:5b:45:fa:97:b4:f8:5e:7f:2d:cf:
e8:2b:0f:ec:3a:dd:17:a1:4c:d2:77:a8:17:cd:05:
78:96:05:72:e7:d3:ed:8c:57:bd:d4:ab:27:94:18:
46:0b:ba:6e:63:c0:69:0a:e2:4e:fc:8c:52:82:05:
1a:f7:d7:14:e2:a3:38:bf:10:3d:7b:96:a9:68:11:
92:dc:51:90:8d:85:8a:d4:56:cc:c6:c0:f8:17:67:
0e:c2:9b:39:bf:65:1a:b0:d1:e0:53:5e:d8:cc:8f:
77:b7:9b:25:c3:00:8c:c8:b5:a3:8d:d8:f1:19:69:
c7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2E:7C:EA:49:C7:00:90:96:BB:20:07:01:D4:9D:3F:AB:C2:66:F7
X509v3 Authority Key Identifier:
keyid:D2:3C:59:25:59:19:BD:D9:AB:03:BD:E1:C5:C7:88:06:2C:4B:99:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jxZJVkZvdmrA73hxceIBixLmfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/JC586knHAJCWuyAHAdSdP6vCZvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.4.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:43:4e:46:38:c2:5c:b7:a6:19:29:8d:b3:fd:1c:1a:18:85:
72:38:bc:94:a9:43:c3:51:38:34:4a:a1:ea:ae:7a:ca:98:8b:
cd:09:dc:3d:ed:b8:d0:d8:b6:82:3f:a4:e1:26:55:50:26:a6:
fb:c8:ce:6a:0b:73:1f:20:6f:10:fe:38:57:72:17:33:7d:4c:
2e:8f:7b:86:8b:92:01:ce:e6:d9:25:98:bb:72:2b:9e:c2:9a:
dd:c3:8d:c2:26:b9:f7:2d:51:bd:34:6a:84:af:b7:07:b6:c6:
81:9b:aa:a1:f2:70:76:8a:53:5b:cb:f5:5c:13:17:d2:67:43:
33:3c:78:50:1e:ab:25:0a:4f:56:38:cb:a1:d9:9a:10:c6:13:
d7:80:9e:9f:fe:df:52:e8:07:10:8b:56:0d:53:18:b1:0e:31:
fe:07:e6:6b:99:c3:5c:4b:ca:b2:8e:40:69:fe:39:4a:48:66:
2f:88:68:d4:fe:65:3e:13:0f:91:f8:d5:2a:96:10:5b:d1:8d:
49:ef:7b:cc:e8:11:95:62:fd:de:7c:22:b6:cd:2d:80:dc:73:
66:c2:c5:fd:df:c4:82:22:35:7b:64:06:8c:10:da:cb:dc:87:
d4:6e:47:db:bb:bf:09:f5:f3:b6:05:23:b8:53:ca:23:82:f9:
63:02:a7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:53:33 2025 by rpki-client