Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/jgF2CfkLgJ6QhMF-SdjdJSTJwMg.roa
File: jgF2CfkLgJ6QhMF-SdjdJSTJwMg.roa (raw, json)
Hash identifier: mvV2l5CpWyu6M49qXSrw0SVIhjTViniokzpN0H6YY+0=
Subject key identifier: 8E:01:76:09:F9:0B:80:9E:90:84:C1:7E:49:D8:DD:25:24:C9:C0:C8
Certificate issuer: /CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Certificate serial: 019427B5BF92849A4E96E759D839E8B61D38
Authority key identifier: F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/jgF2CfkLgJ6QhMF-SdjdJSTJwMg.roa
Signing time: Thu 02 Jan 2025 15:50:09 +0000
ROA not before: Thu 02 Jan 2025 15:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206394
IP address blocks: 195.150.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:bf:92:84:9a:4e:96:e7:59:d8:39:e8:b6:1d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Validity
Not Before: Jan 2 15:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e017609f90b809e9084c17e49d8dd2524c9c0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0d:db:3c:96:fd:fb:4c:f7:c6:9f:91:51:8d:
37:2f:8c:1d:d4:d9:b9:b2:3a:60:2f:d0:1b:2c:af:
52:f1:65:44:5d:b2:fb:ae:bb:f6:d6:cf:84:a9:da:
a2:7b:17:66:3e:a9:e3:6e:75:5c:20:51:4d:cc:62:
69:0f:4f:24:38:60:cf:15:41:9f:38:3f:9a:55:8b:
0f:a7:4b:b8:c9:a8:6b:e7:59:0b:bd:3b:aa:a2:f1:
a2:c4:aa:9d:86:b3:3e:7a:41:a5:42:58:10:74:32:
e2:93:4d:9a:82:7a:42:42:a1:2b:e1:77:86:b0:84:
86:8f:12:fe:aa:20:e1:01:55:4d:93:0d:92:79:bb:
ab:eb:44:1e:69:32:0e:0d:3a:8f:49:a5:57:37:42:
62:52:fb:da:27:3f:ef:2a:a9:d8:f0:ac:2e:e0:d0:
18:80:2c:c9:89:b5:46:de:19:9e:a2:b4:a5:55:ab:
9f:51:83:ad:54:32:18:63:36:7a:df:8e:cf:60:35:
76:1f:d7:b5:b1:81:e6:ae:93:c8:27:d8:f2:9f:5e:
c6:d1:98:d8:ca:df:c1:3e:6f:c5:2b:9f:ef:f2:7b:
4b:d3:d6:9d:36:e1:4a:0d:f8:35:37:1e:52:5f:83:
3c:20:bf:46:48:f1:82:3b:50:0e:45:55:5d:46:49:
7b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:01:76:09:F9:0B:80:9E:90:84:C1:7E:49:D8:DD:25:24:C9:C0:C8
X509v3 Authority Key Identifier:
keyid:F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/jgF2CfkLgJ6QhMF-SdjdJSTJwMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.150.200.0/24
Signature Algorithm: sha256WithRSAEncryption
20:bc:ee:bf:56:a4:77:bb:3b:90:19:12:ee:23:5e:9a:bc:6e:
9d:a3:91:a2:6a:94:5b:5a:c7:b9:40:0c:32:12:02:2e:6a:4f:
94:f9:fb:17:e7:fc:22:40:cf:5b:0f:06:b7:a6:28:45:b9:81:
55:8c:b8:a3:12:5a:60:b6:ec:3c:78:52:e4:e8:2e:bd:60:8d:
5a:9c:ec:56:1d:93:a0:53:cb:56:c9:fb:be:64:23:1a:32:31:
53:10:f3:0a:78:1a:0d:0f:12:45:45:4d:43:9e:63:67:ed:71:
11:b2:c3:f7:b7:75:0f:e2:2f:09:3f:e4:af:33:86:ae:7a:74:
80:9b:75:de:46:a3:9a:23:28:3f:64:c4:60:36:c9:61:8b:7a:
07:de:26:01:bc:29:59:83:fc:26:e8:0e:a9:8a:92:ad:3d:3e:
04:f2:71:ca:4f:e1:c0:a8:25:b2:a5:ef:f7:9e:86:6d:91:10:
69:e0:bc:b4:04:f7:3b:ce:71:a8:90:57:b6:ea:6f:32:1f:f6:
56:3f:67:7c:a5:25:74:80:c9:4c:12:27:57:4e:c1:b8:e3:dc:
ef:c7:fd:ee:49:22:bd:b3:26:7b:d2:6d:d3:7d:95:3f:95:ce:
49:6c:52:a8:ac:c6:8b:0d:76:8f:89:a6:7e:e9:95:bc:0b:7e:
c3:c4:1a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:26:17 2025 by rpki-client