Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/jmKQUYSEuZIWnZkjgKqeurLJKlA.roa
File: jmKQUYSEuZIWnZkjgKqeurLJKlA.roa (raw, json)
Hash identifier: ubeUqXL5MrFy3GKLg6YblSSTGgynKbrvwUY5fbq4vzw=
Subject key identifier: 8E:62:90:51:84:84:B9:92:16:9D:99:23:80:AA:9E:BA:B2:C9:2A:50
Certificate issuer: /CN=16ea37a8e73e7679a933d70f7b9c872081024455
Certificate serial: 0194214392853FD292FA859411B00D4932A7
Authority key identifier: 16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/jmKQUYSEuZIWnZkjgKqeurLJKlA.roa
Signing time: Wed 01 Jan 2025 09:47:43 +0000
ROA not before: Wed 01 Jan 2025 09:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216383
IP address blocks: 185.81.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:92:85:3f:d2:92:fa:85:94:11:b0:0d:49:32:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16ea37a8e73e7679a933d70f7b9c872081024455
Validity
Not Before: Jan 1 09:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e6290518484b992169d992380aa9ebab2c92a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c3:54:f7:9f:b0:32:1a:fd:6a:ad:f7:68:c1:
32:fe:d9:37:55:63:37:88:53:a4:cd:a1:37:52:53:
d5:f4:aa:b0:cc:15:c7:0d:de:ec:34:e7:42:10:fc:
fc:95:5a:39:cb:bb:6a:23:16:98:01:56:fd:81:b4:
35:cb:2e:ac:47:02:97:9f:94:aa:c4:81:98:99:fc:
a3:73:de:24:79:22:4d:af:9d:ba:69:18:3f:5c:a6:
6f:c3:dc:71:39:67:1e:64:c2:f2:7f:94:ca:6a:ca:
2c:f4:07:5b:51:13:74:40:f6:18:f7:12:a3:7d:9b:
5b:67:02:c6:58:ee:86:f7:81:06:89:74:57:c9:e0:
13:f7:b0:17:2f:3e:03:b5:09:8b:57:eb:31:18:5e:
97:71:c3:58:09:7b:9c:d9:bd:8a:6c:05:67:04:99:
70:34:38:58:fb:99:77:e9:8d:8f:0d:0c:84:07:0f:
04:49:c1:b3:f2:fe:b9:87:16:f2:78:ee:0f:c1:11:
fb:50:6d:57:0c:28:35:0d:a5:64:9c:a8:b9:19:b3:
35:6b:70:7e:c7:ab:75:88:b0:e3:96:82:a8:c1:bc:
f5:ea:80:b7:96:80:cd:c1:64:16:30:d4:02:67:8f:
df:4f:d3:79:e6:2e:82:be:b0:66:ad:87:66:12:09:
39:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:62:90:51:84:84:B9:92:16:9D:99:23:80:AA:9E:BA:B2:C9:2A:50
X509v3 Authority Key Identifier:
keyid:16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/jmKQUYSEuZIWnZkjgKqeurLJKlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.98.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:97:b7:76:4e:b4:fd:8b:c8:a7:ec:f4:26:fe:92:97:c4:47:
2b:df:57:bd:23:62:32:90:7f:38:f1:c0:69:4c:e1:e4:ca:c5:
dc:51:22:80:f8:36:1c:2e:a9:2e:c7:fe:1a:a9:78:34:81:09:
63:de:6e:e6:d5:46:dc:5d:c6:6b:56:2f:60:6d:26:68:aa:61:
15:e6:ed:2d:28:82:a1:89:01:fc:92:73:62:b3:c4:85:29:29:
19:7c:ec:12:7e:e5:b0:4e:15:5f:be:be:c8:7e:43:18:f0:b0:
f0:b4:dc:11:98:3c:a8:7a:8a:94:7c:d8:b7:25:5b:e7:dd:b8:
c4:75:c8:e0:14:b7:cb:fc:67:24:d3:7c:02:71:a3:bd:1c:15:
e2:74:7e:f6:61:35:da:97:99:c5:be:50:34:2e:03:0a:f7:33:
26:8a:1a:ad:c1:d9:85:bc:75:62:18:91:59:60:a8:8c:f8:51:
d9:bb:61:75:27:da:83:24:08:11:f1:ad:40:db:61:05:ff:b9:
8f:f2:2c:74:06:8f:71:b9:03:e4:be:b0:fb:ce:ec:8d:9a:0b:
f8:70:e1:a5:43:f2:58:5f:13:48:07:19:c5:00:18:8f:5f:18:
dc:7e:2e:0f:65:19:de:e8:37:0c:28:99:03:c1:31:bb:d9:04:
9d:31:8f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:48 2025 by rpki-client