Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/jkSSRPU4JPxOSwOB57TOt8DRyAA.roa
File: jkSSRPU4JPxOSwOB57TOt8DRyAA.roa (raw, json)
Hash identifier: DRa5vWVrjfSc16+rMUPQGnsr0B1cQl2qk8lFzZI4/lA=
Subject key identifier: 8E:44:92:44:F5:38:24:FC:4E:4B:03:81:E7:B4:CE:B7:C0:D1:C8:00
Certificate issuer: /CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Certificate serial: 018D2D6E2EFBB06F1A3BE554C42B19BBC374
Authority key identifier: 2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/jkSSRPU4JPxOSwOB57TOt8DRyAA.roa
Signing time: Sun 21 Jan 2024 19:10:12 +0000
ROA not before: Sun 21 Jan 2024 19:10:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212667
IP address blocks: 193.201.114.0/24 maxlen: 24
195.225.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:2d:6e:2e:fb:b0:6f:1a:3b:e5:54:c4:2b:19:bb:c3:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Validity
Not Before: Jan 21 19:10:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e449244f53824fc4e4b0381e7b4ceb7c0d1c800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:49:63:d4:e4:67:8e:a6:cc:07:d5:98:3d:72:
19:6a:e1:9e:9c:0e:ec:3e:3d:34:3e:85:d0:b0:66:
09:ba:48:c5:dd:de:6c:b1:25:2e:22:98:57:5e:8d:
e9:5d:82:70:4d:c8:1e:18:62:3c:ea:87:e4:c6:c1:
4e:f0:a5:b1:3d:8f:d5:89:1d:84:96:a4:94:c8:bb:
71:b6:6d:07:5b:94:2f:39:c8:a8:f3:ba:9c:b8:0a:
fb:ca:3f:43:cb:66:fa:c2:0c:da:2b:2c:8f:4e:10:
2b:7f:6a:e7:c4:5a:5c:64:f8:c8:d9:e0:ca:52:b0:
10:61:c9:e9:9f:b7:06:59:5a:72:24:d5:c5:4c:5b:
04:84:dd:44:d3:a1:7d:7a:e4:12:39:14:4a:7a:c6:
c4:5e:19:8b:b4:ce:c4:c7:0a:68:6a:16:1f:12:6a:
55:aa:37:e9:7e:3f:01:1e:44:46:bb:d6:c8:5f:22:
b8:2a:8b:ad:c2:1b:98:4b:21:1c:50:10:60:f4:cb:
ac:84:ec:d6:37:d2:56:cc:52:85:ee:3b:1b:b3:9d:
74:2a:e7:b7:d8:0f:80:f9:c6:4c:77:95:4a:74:1d:
4c:f1:9d:d7:2d:51:a8:24:45:a3:88:01:a4:f3:37:
b7:39:15:38:20:1a:e9:ae:a0:61:df:3d:6e:2f:38:
cd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:44:92:44:F5:38:24:FC:4E:4B:03:81:E7:B4:CE:B7:C0:D1:C8:00
X509v3 Authority Key Identifier:
keyid:2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/jkSSRPU4JPxOSwOB57TOt8DRyAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.114.0/24
195.225.96.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:88:45:ac:0f:26:60:60:cf:21:9b:fd:d5:e7:a8:b1:89:4e:
c4:ae:cc:51:c7:19:2d:8e:92:7d:de:19:91:c0:dc:0e:06:57:
ee:2e:cb:92:fe:69:b8:32:7d:37:f0:a0:d4:4f:fb:e8:bc:b4:
1e:8a:26:e2:4e:7d:77:3d:3d:25:08:b3:f5:3d:e5:4f:6a:86:
e6:59:8a:55:7b:2d:89:21:50:f7:6c:3b:6a:48:d1:ae:9c:7a:
27:aa:d8:88:07:2a:73:34:c1:ec:b2:f7:50:b8:2d:f9:2a:df:
6d:c6:d6:7d:d0:18:47:49:59:8a:59:40:ac:b9:23:92:b2:b5:
d6:4d:1b:f1:15:9f:ff:62:32:2b:f7:09:2e:1f:9c:4c:fa:4e:
0b:49:51:06:ea:6b:db:d4:c4:7c:01:9c:ef:1c:a8:d1:0f:4b:
dc:91:f8:8b:e8:d2:73:a2:05:80:e2:fd:90:85:c5:46:6a:82:
60:88:f2:a5:d5:df:7b:24:21:34:49:1c:e8:d5:23:c1:fc:65:
1d:24:25:b4:15:97:1c:7c:45:88:b5:c7:18:a0:23:55:a0:d4:
ac:0b:a9:97:1e:e1:8c:57:7d:d3:06:d1:18:4f:36:27:4f:e6:
70:b5:0e:e5:51:2a:ec:34:90:d9:d2:75:10:b6:7a:0d:6c:5f:
69:c5:68:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:05:14 2025 by rpki-client