Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jB4WQ6B4XrA368tea0qgs2Go5MI.roa
File: jB4WQ6B4XrA368tea0qgs2Go5MI.roa (raw, json)
Hash identifier: tIwiJIO3AHkJJRMY7BUqvbKPcRTcHFM3jU8pR4UzSgU=
Subject key identifier: 8C:1E:16:43:A0:78:5E:B0:37:EB:CB:5E:6B:4A:A0:B3:61:A8:E4:C2
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 0194282609B9A5FC7BA902EBC15CC127722A
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jB4WQ6B4XrA368tea0qgs2Go5MI.roa
Signing time: Thu 02 Jan 2025 17:52:48 +0000
ROA not before: Thu 02 Jan 2025 17:52:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 188.191.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:09:b9:a5:fc:7b:a9:02:eb:c1:5c:c1:27:72:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Jan 2 17:52:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c1e1643a0785eb037ebcb5e6b4aa0b361a8e4c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:62:8e:5a:46:66:02:0d:aa:00:8b:fe:f3:97:
43:21:1a:1e:6d:17:d8:66:29:1d:d1:38:c1:79:d4:
39:f5:6f:0b:01:7b:07:e8:dc:c3:69:87:b1:94:70:
3a:4b:29:65:31:be:6f:8a:a3:c1:a9:fd:f4:a7:0e:
ad:e6:c3:64:fb:34:4a:44:9d:14:a9:cd:87:75:5e:
8a:6b:a4:ee:60:f7:5d:8b:cf:93:d6:8d:d7:e3:bb:
1f:8b:95:cd:32:66:fd:00:41:fa:a0:7f:89:fa:85:
b9:e1:55:26:6f:00:52:42:8f:0b:60:22:1c:e3:7c:
6b:2e:97:7f:4b:00:71:e6:60:42:30:b5:8c:bb:b4:
e3:7f:32:11:1c:35:b0:94:02:ef:ac:b0:ee:b4:c5:
20:8e:5b:b1:45:e6:fd:84:76:9a:f2:68:dc:e7:79:
9c:c0:75:36:6c:a4:51:33:6f:32:10:ca:fe:89:c1:
f7:a8:7a:a1:26:a9:26:74:55:72:1a:bf:45:70:71:
6b:73:c4:78:c5:65:00:70:9d:eb:e0:0f:b8:50:5a:
cb:c9:81:42:fb:f1:e7:89:57:cc:fb:94:9b:80:2c:
72:76:c5:b4:b4:87:37:ce:e6:86:9d:40:59:37:0e:
00:f3:6d:9e:4e:cc:09:15:db:5e:50:2e:12:8a:21:
de:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:1E:16:43:A0:78:5E:B0:37:EB:CB:5E:6B:4A:A0:B3:61:A8:E4:C2
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jB4WQ6B4XrA368tea0qgs2Go5MI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.97.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:0b:0f:97:4f:f9:8b:5c:a5:40:df:86:8c:fc:26:79:d0:ee:
f0:b0:bb:f2:d1:4a:ed:0d:fe:fd:6a:0f:7b:9f:dd:50:a1:29:
9e:b7:69:10:7c:e1:56:e0:a4:83:56:e6:2b:31:e3:b0:00:08:
86:47:bc:b7:b4:b5:64:09:8e:f0:ad:bc:d1:ee:44:7a:90:e2:
45:44:27:c1:d8:d2:9d:58:9e:18:2f:1f:6e:0e:9d:0d:37:57:
01:a0:ae:13:ea:f3:58:76:f5:9f:25:19:92:63:cb:5a:00:2f:
5f:8c:04:27:c2:09:e6:76:39:7e:f8:37:8c:51:14:e0:b9:b1:
37:e4:06:32:35:c1:cb:20:46:fe:0b:1c:b5:55:67:67:dc:30:
0c:31:a3:07:d1:56:cc:40:66:77:28:33:83:43:ce:c5:f8:5d:
fa:ba:8a:f5:25:45:bb:1d:0b:57:96:9a:5c:01:b0:51:ad:11:
85:91:39:70:db:67:8f:1a:e9:2b:58:d7:ef:22:bd:a0:50:8e:
ac:aa:e6:0f:17:1e:9d:62:40:3d:04:97:d7:84:6e:57:a2:10:
d1:35:f4:cb:5a:1f:33:2b:4a:2f:09:e2:6f:9a:c6:69:a7:23:
40:e0:19:bd:a9:d2:e6:e9:76:52:07:6f:b7:25:ea:af:26:a2:
95:b2:67:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:55:15 2025 by rpki-client