Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/JxRCYR0Z4gJ-3zZ_2BT2UO3C0gw.roa
File: JxRCYR0Z4gJ-3zZ_2BT2UO3C0gw.roa (raw, json)
Hash identifier: SfF8u5BnNVUyzP2I30AJRQ1ekMOAnsp6BQMzeIKSxk8=
Subject key identifier: 27:14:42:61:1D:19:E2:02:7E:DF:36:7F:D8:14:F6:50:ED:C2:D2:0C
Certificate issuer: /CN=013c74132597162cdb2dd63760abd9971e30bf63
Certificate serial: 0185BA1428F7DBB7FC3F847F260D8EAAE319
Authority key identifier: 01:3C:74:13:25:97:16:2C:DB:2D:D6:37:60:AB:D9:97:1E:30:BF:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/JxRCYR0Z4gJ-3zZ_2BT2UO3C0gw.roa
Signing time: Mon 16 Jan 2023 10:16:01 +0000
ROA not before: Mon 16 Jan 2023 10:16:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212805
IP address blocks: 185.19.203.0/24 maxlen: 24
2a12:4740::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ba:14:28:f7:db:b7:fc:3f:84:7f:26:0d:8e:aa:e3:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=013c74132597162cdb2dd63760abd9971e30bf63
Validity
Not Before: Jan 16 10:16:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=271442611d19e2027edf367fd814f650edc2d20c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:36:0f:43:4d:49:07:02:a0:6d:99:f6:1c:79:
5b:0e:24:a6:05:82:bd:41:6f:68:9b:1a:3f:ff:40:
4a:66:d4:ef:94:29:25:bd:a2:dc:95:3f:bc:30:77:
b4:cb:b7:94:f7:5b:9c:b4:62:81:60:98:9f:d8:3a:
e8:c7:96:8d:61:3d:19:36:13:ef:eb:f4:66:81:60:
1d:89:bf:46:79:5e:ee:6b:74:fc:1e:57:0c:f9:bf:
7e:2d:89:2f:1f:88:89:86:d1:2a:b3:d0:18:2f:d0:
2d:bf:a0:e7:de:65:4c:60:c8:e8:09:9b:92:34:92:
2d:48:45:c8:b0:08:83:b1:25:11:0c:f1:c1:1c:53:
49:91:ec:f6:fc:e7:00:bb:df:b6:ab:a1:b2:6e:0f:
bf:f8:e9:bf:19:aa:a2:e7:a7:a0:84:ce:52:69:00:
24:50:af:9e:59:44:4d:bb:00:a0:44:d2:43:c0:23:
f2:1c:ce:78:bf:a7:1a:13:59:a9:91:d1:2e:91:11:
c1:6d:5f:13:04:50:a4:d4:c7:04:98:6a:f2:83:8c:
30:3b:9d:aa:cf:78:71:23:30:2f:84:90:c2:f9:0d:
50:98:1b:00:11:b4:9b:f6:f8:e9:78:25:01:b0:7c:
75:b8:77:06:5b:24:86:62:2d:43:30:f2:88:ed:09:
e1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:14:42:61:1D:19:E2:02:7E:DF:36:7F:D8:14:F6:50:ED:C2:D2:0C
X509v3 Authority Key Identifier:
keyid:01:3C:74:13:25:97:16:2C:DB:2D:D6:37:60:AB:D9:97:1E:30:BF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/JxRCYR0Z4gJ-3zZ_2BT2UO3C0gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.203.0/24
IPv6:
2a12:4740::/29
Signature Algorithm: sha256WithRSAEncryption
28:75:33:1b:0b:96:ee:25:5f:fb:14:2e:cd:22:25:3b:d4:0d:
c2:4d:99:cb:dc:e0:07:4f:39:b8:90:ad:89:1d:9b:7b:ec:d5:
64:7c:38:ce:94:c2:c0:a1:f0:6a:25:f7:8c:d4:db:d0:d4:ba:
eb:95:b1:e3:3e:e6:8a:06:6f:b5:13:94:3c:86:ae:00:d6:6f:
28:76:92:b7:72:37:70:34:8b:c0:cb:47:98:0c:6f:dc:d1:61:
0a:ed:f9:ce:80:ba:97:23:7a:ef:fd:e3:69:d8:84:69:bd:3c:
2a:38:de:4a:6c:46:9f:c3:a6:1e:d5:10:c4:da:64:08:47:81:
3d:81:1d:47:a1:e8:30:db:19:14:e8:3b:f7:ad:a2:b4:83:d0:
5b:e4:b8:47:f2:4e:76:8e:8d:43:cc:a2:06:19:bd:dc:ed:57:
b8:8a:b3:b9:3e:7e:7e:4c:40:dc:12:26:dd:12:22:5e:f7:4f:
f1:b3:4f:35:d7:e6:3a:95:84:04:f6:67:af:e3:52:40:83:b5:
09:54:f4:45:a2:53:3b:44:c2:8a:fd:4e:d0:3e:2d:bd:52:3f:
34:6f:50:c1:c2:50:b5:a5:0c:7b:ec:ae:a5:86:8c:3c:8d:fc:
01:f2:88:9a:67:65:e5:28:40:a0:7b:a6:d6:c6:ee:23:30:8e:
5c:97:54:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:44:11 2025 by rpki-client