Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/JsCAp1aFhoIjld1wkH8voBbNhr8.roa
File: JsCAp1aFhoIjld1wkH8voBbNhr8.roa (raw, json)
Hash identifier: f9bEOIQTZBMNpm1Gt9qzl/E0E0zUfedi/SkPs4DZ8I8=
Subject key identifier: 26:C0:80:A7:56:85:86:82:23:95:DD:70:90:7F:2F:A0:16:CD:86:BF
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 01941FFA7771CA8E919E424302BC5AD5539D
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/JsCAp1aFhoIjld1wkH8voBbNhr8.roa
Signing time: Wed 01 Jan 2025 03:48:15 +0000
ROA not before: Wed 01 Jan 2025 03:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200574
IP address blocks: 88.199.101.0/24 maxlen: 24
88.199.102.0/24 maxlen: 24
88.199.103.0/24 maxlen: 24
94.40.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:77:71:ca:8e:91:9e:42:43:02:bc:5a:d5:53:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 03:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26c080a7568586822395dd70907f2fa016cd86bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:27:5a:0b:2c:16:28:d4:10:00:31:ab:f5:0b:
0d:d9:bd:8a:6d:50:e9:96:c0:53:49:7d:c8:e0:7a:
9d:8f:fc:df:1e:c8:f3:8c:61:f3:7f:d2:b0:fb:fe:
1b:30:80:69:e5:6c:2a:f4:85:b0:81:d0:0c:e3:f4:
85:8b:91:6d:8d:9a:cd:30:7b:4a:08:5e:b2:04:5c:
0d:1d:6f:ee:e6:8c:48:01:5a:3f:0b:4c:bf:10:a7:
a0:eb:71:1e:7e:31:82:62:7b:3a:93:e5:e1:4d:cb:
b2:e0:49:56:af:66:c3:d2:87:07:6c:59:ad:9c:35:
c6:da:3a:96:6c:0b:90:1d:5b:98:44:2f:de:ca:47:
af:47:78:dd:d2:1d:c7:2a:ba:7f:4b:0a:de:38:1a:
a0:bf:99:78:53:43:f5:e5:ab:b4:c6:f1:ce:72:24:
6b:f3:18:45:47:fe:a1:ab:cb:f9:6f:9e:ed:6d:b1:
bc:fe:03:95:ef:e1:6c:0e:35:9d:93:9f:56:e9:10:
ae:94:ff:c6:09:ba:36:05:44:19:d7:ac:7e:b9:24:
ea:f9:fa:64:89:61:79:95:1d:d7:37:12:6a:da:1c:
73:7b:c1:3c:b6:ed:b0:be:68:91:85:58:7c:90:4c:
b6:ab:2d:b8:8c:e0:7c:b3:40:04:7b:80:4c:f7:8b:
ea:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C0:80:A7:56:85:86:82:23:95:DD:70:90:7F:2F:A0:16:CD:86:BF
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/JsCAp1aFhoIjld1wkH8voBbNhr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.199.101.0-88.199.103.255
94.40.61.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:0f:7d:cb:a2:6f:10:ed:89:1f:e6:55:fc:d3:f3:bf:cd:0b:
b6:4d:53:b0:0b:91:c3:4e:57:41:dd:bc:49:6d:90:3a:5b:bc:
10:26:00:94:ae:c5:22:81:3a:70:1c:0a:be:b5:5b:30:4b:31:
6c:56:ba:44:f4:e8:7e:3f:c5:7f:e8:0a:26:bd:04:de:c6:52:
b2:74:5a:e8:bc:96:c1:d4:49:73:0e:7f:3c:d3:9a:ef:06:26:
6d:51:92:41:06:23:fd:5d:4b:9f:d8:51:91:3f:0e:e5:90:c3:
8d:be:7d:db:91:d8:09:db:6c:ad:84:ec:c6:69:c2:54:35:18:
5b:7b:b4:af:07:93:ca:bc:9a:7c:b9:7e:43:39:b1:91:80:8a:
e7:e7:f0:3b:a4:5a:40:b4:22:ee:b6:f1:98:51:66:c0:e9:2d:
c7:21:0c:55:06:43:b3:52:9c:31:9c:3e:57:f1:95:f9:81:cb:
eb:d3:27:26:ca:11:9e:ba:47:64:61:f3:d1:62:8f:50:e7:aa:
47:46:7b:de:93:23:e7:38:cf:0e:b8:d7:c7:91:32:3f:19:69:
b8:95:87:20:f9:dc:a8:57:a9:58:62:da:60:32:3d:e2:12:5b:
9b:4b:be:ce:34:33:1f:56:6e:94:b4:a8:15:8a:cc:b6:5a:43:
3e:84:00:66
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:03 2025 by rpki-client