Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/JS20272zzOd7lsvAhAy2fEVjeyI.roa
File: JS20272zzOd7lsvAhAy2fEVjeyI.roa (raw, json)
Hash identifier: cOcrvgmIxE66W+f+FGaVHK7zq1S4gdeOGb2xk9gX0lg=
Subject key identifier: 25:2D:B4:DB:BD:B3:CC:E7:7B:96:CB:C0:84:0C:B6:7C:45:63:7B:22
Certificate issuer: /CN=777c49d3f627335190e3c2ec3654e154cfd45398
Certificate serial: 01942521C17C9994DE349B9F290EC1F8A185
Authority key identifier: 77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/JS20272zzOd7lsvAhAy2fEVjeyI.roa
Signing time: Thu 02 Jan 2025 03:49:16 +0000
ROA not before: Thu 02 Jan 2025 03:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3303
IP address blocks: 193.246.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c1:7c:99:94:de:34:9b:9f:29:0e:c1:f8:a1:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=777c49d3f627335190e3c2ec3654e154cfd45398
Validity
Not Before: Jan 2 03:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=252db4dbbdb3cce77b96cbc0840cb67c45637b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1d:e6:8d:64:1f:20:15:6e:10:99:6a:49:73:
f2:43:d3:c5:ed:ed:4e:bd:de:20:93:c2:ed:92:14:
5f:63:e1:8e:8f:b8:ec:18:72:49:4f:c3:53:ca:42:
58:79:cd:79:fa:32:55:43:1d:03:f5:d9:7e:ce:6b:
b9:15:5a:ee:ef:84:78:59:70:ff:06:c4:55:ab:21:
f3:c8:00:e5:7f:28:0d:21:e3:75:d6:42:c1:95:56:
36:d0:0f:65:12:ea:f5:28:bd:a7:c6:ac:f7:ed:af:
58:f8:8d:44:45:6f:e6:54:6a:c7:ec:0c:60:87:54:
82:85:b2:e0:a4:c1:55:7b:ad:aa:8f:ba:21:0c:77:
99:02:43:53:f6:9e:9c:a6:4f:25:13:95:67:b0:9d:
d6:4e:f6:a3:94:ef:77:9b:a2:76:57:98:6d:9a:85:
88:7e:21:62:91:1e:ef:50:28:6e:ce:1b:91:9d:2e:
b2:3d:76:b6:65:f1:77:e3:37:3f:75:94:87:1b:9b:
c5:cd:48:c1:2a:b5:25:bb:8b:89:d4:02:3d:c3:ef:
06:60:8e:36:40:e2:8a:5d:16:02:c0:72:43:c5:f5:
64:36:31:2c:5e:30:69:ba:42:30:03:55:bc:c9:4d:
de:c3:a0:93:8e:a9:71:6c:40:37:73:a7:33:c6:70:
a7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2D:B4:DB:BD:B3:CC:E7:7B:96:CB:C0:84:0C:B6:7C:45:63:7B:22
X509v3 Authority Key Identifier:
keyid:77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/JS20272zzOd7lsvAhAy2fEVjeyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.122.0/24
Signature Algorithm: sha256WithRSAEncryption
21:97:26:6b:b0:c6:ba:83:7e:03:63:e9:b7:17:c9:62:08:32:
b0:65:ca:16:22:c8:9f:8c:09:6b:b9:0b:26:8f:f8:96:4e:f8:
c9:b7:09:dd:ad:9e:28:16:9f:21:20:98:25:11:9d:ed:19:22:
fd:ed:3e:9e:2b:9f:a3:be:56:8b:28:e3:64:9e:67:2c:64:91:
d6:d5:59:d7:5f:5a:52:61:59:e3:42:11:cf:df:87:f1:2c:7b:
67:ad:c4:f4:83:eb:2b:bd:3f:73:23:8d:e6:23:50:c4:0f:60:
db:4f:44:40:1a:6e:ba:e6:95:82:fc:10:6a:f8:b3:27:a2:3e:
77:64:ed:8a:49:61:af:b0:dc:43:10:16:30:65:91:da:23:a7:
60:d6:75:90:2d:4c:9f:d0:ee:04:3f:03:0e:b3:4d:3a:0a:bb:
f4:b9:f4:67:b1:a7:51:7c:06:c3:02:60:03:74:f8:3b:9d:37:
89:1c:aa:92:3a:c7:a0:8d:5e:56:25:33:16:a2:ac:72:e5:c6:
3a:26:69:9e:8c:2a:9f:5c:96:93:e8:3a:49:39:dc:4f:d1:a9:
00:22:9a:7c:d7:1d:b8:14:0e:66:e3:d1:07:38:6a:8c:77:de:
f3:b0:05:36:84:76:5a:bc:ad:a6:9c:55:da:54:5a:76:96:ba:
1b:15:85:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:33 2025 by rpki-client