Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/JeBncY6ChKBRQOUTYTSFHZE1uH8.roa
File: JeBncY6ChKBRQOUTYTSFHZE1uH8.roa (raw, json)
Hash identifier: xgTh9uFZcGgpjhz25blPwKqXY1Nn7zce/RhA70u2mJQ=
Subject key identifier: 25:E0:67:71:8E:82:84:A0:51:40:E5:13:61:34:85:1D:91:35:B8:7F
Certificate issuer: /CN=9c1cd1b3c8772956fa85535a8464b4ca19663ade
Certificate serial: 0194258F2C0964BB3CD0D2E81206312D81DD
Authority key identifier: 9C:1C:D1:B3:C8:77:29:56:FA:85:53:5A:84:64:B4:CA:19:66:3A:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBzRs8h3KVb6hVNahGS0yhlmOt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/JeBncY6ChKBRQOUTYTSFHZE1uH8.roa
Signing time: Thu 02 Jan 2025 05:48:47 +0000
ROA not before: Thu 02 Jan 2025 05:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203374
IP address blocks: 185.136.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:2c:09:64:bb:3c:d0:d2:e8:12:06:31:2d:81:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1cd1b3c8772956fa85535a8464b4ca19663ade
Validity
Not Before: Jan 2 05:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25e067718e8284a05140e5136134851d9135b87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4e:22:b3:32:47:82:6f:bc:e8:33:d4:f1:0a:
47:c9:cb:1b:d9:a1:50:ec:b0:92:63:f8:c2:8b:1b:
ee:90:0e:4d:da:10:5c:59:cf:0a:9c:6f:37:f3:ba:
d7:86:a9:79:8c:be:0b:71:3c:97:8d:2c:5b:45:c7:
9d:1a:47:74:7e:3a:cd:75:83:03:41:d9:32:1c:59:
45:d2:e1:4d:1a:4b:47:81:a2:b1:57:22:ac:dd:1a:
8b:60:44:84:0e:29:0d:17:e1:69:fe:55:e0:bd:f7:
34:8d:6b:2a:df:75:34:99:3b:aa:ec:5c:c1:38:d3:
8e:39:6f:5f:4a:94:b0:6e:f0:74:72:ea:9d:6b:63:
f2:fc:a1:ac:e2:12:d9:56:91:6b:1c:e9:22:bd:7f:
cd:a8:39:2e:03:57:c3:77:a1:b2:fc:08:40:82:e3:
af:db:1b:eb:40:07:fc:e1:35:3c:97:76:8f:ce:2a:
69:94:92:ed:66:83:5a:89:37:05:df:af:1c:c2:7c:
3d:e8:a6:45:d8:f5:9e:32:3d:98:31:7a:5f:51:82:
dc:4a:81:2d:32:94:89:ef:56:05:1c:43:76:0a:6a:
e4:cd:05:2b:a2:6b:00:b1:19:fe:63:8c:ff:16:18:
d3:c7:6f:98:df:95:75:d6:f9:8b:bb:b3:4e:4b:1c:
71:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E0:67:71:8E:82:84:A0:51:40:E5:13:61:34:85:1D:91:35:B8:7F
X509v3 Authority Key Identifier:
keyid:9C:1C:D1:B3:C8:77:29:56:FA:85:53:5A:84:64:B4:CA:19:66:3A:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBzRs8h3KVb6hVNahGS0yhlmOt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/JeBncY6ChKBRQOUTYTSFHZE1uH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/nBzRs8h3KVb6hVNahGS0yhlmOt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.243.0/24
Signature Algorithm: sha256WithRSAEncryption
95:86:39:cb:96:d1:d5:90:e3:58:6d:16:ed:40:84:a3:95:e0:
a7:3d:b5:61:93:90:4a:d9:fa:88:0d:b5:ad:9e:0d:1e:e0:3a:
a2:69:1b:93:71:5b:ae:79:50:28:e1:5e:41:34:11:5c:25:b2:
b7:5b:a0:92:60:34:16:ea:95:07:9f:fa:e8:c2:ea:f7:0e:15:
8a:a1:cc:c2:fc:a8:56:d7:22:ae:36:07:89:21:6a:74:0d:bc:
ed:a8:99:82:0c:c3:48:8a:3c:c4:54:29:67:f4:5b:e3:68:00:
0b:03:75:1a:cb:42:fd:09:b9:0c:d3:4a:47:9a:1d:91:d2:1f:
48:97:16:4f:17:34:fa:09:39:11:c7:27:11:09:a7:91:ab:f0:
94:4f:f1:56:fd:24:6f:90:e7:15:96:4f:49:ab:eb:86:07:8d:
27:27:21:b9:70:04:68:ba:6b:ea:32:fa:fb:9c:dc:d2:af:ff:
e9:b2:2c:1b:10:1b:6d:54:57:31:03:63:7a:b7:dc:f7:65:68:
c3:c7:89:96:23:fc:0d:73:ec:ff:37:80:e2:52:78:95:e7:f6:
80:df:2b:8b:a7:0d:0a:6e:0c:0c:7f:01:e9:9a:c4:53:05:a7:
4f:73:5c:a6:a9:2c:50:f1:e1:aa:a1:6d:55:3b:96:42:0d:18:
06:8f:41:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:39:15 2025 by rpki-client