Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/JNXkfS8Gevyb4Dt3MskQFKOQyBE.roa
File: JNXkfS8Gevyb4Dt3MskQFKOQyBE.roa (raw, json)
Hash identifier: xyI4i/7FZY7J0bkn5v2Hrfk5UEeVMBFfBsSKz6DAPY0=
Subject key identifier: 24:D5:E4:7D:2F:06:7A:FC:9B:E0:3B:77:32:C9:10:14:A3:90:C8:11
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 0195912C89355484792F26440B7BF73A9256
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/JNXkfS8Gevyb4Dt3MskQFKOQyBE.roa
Signing time: Thu 13 Mar 2025 20:22:49 +0000
ROA not before: Thu 13 Mar 2025 20:22:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64267
IP address blocks: 89.187.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:91:2c:89:35:54:84:79:2f:26:44:0b:7b:f7:3a:92:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Mar 13 20:22:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24d5e47d2f067afc9be03b7732c91014a390c811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c0:e3:f6:d0:7d:fe:5e:79:84:f9:61:a1:ee:
8b:b3:3a:27:75:0b:ac:b7:b3:5a:92:71:ba:f6:cd:
d6:c8:a5:75:0a:ea:5e:52:de:11:00:ee:7a:4b:ad:
d9:f2:21:db:42:64:44:60:e8:5e:1a:03:3c:c2:1a:
66:0f:ed:4c:f4:84:45:9c:f4:92:8b:72:fb:fd:77:
86:de:4b:b9:37:71:c3:29:35:e2:77:95:6c:da:24:
05:73:1f:17:6e:7f:e6:e7:cd:b7:ee:a9:a0:91:cc:
60:27:21:02:cb:e8:35:81:b7:cd:d8:43:6f:fe:60:
e1:b8:a4:a5:b9:24:06:4c:2e:d1:b8:96:1d:23:0c:
b4:77:3d:be:3d:55:cb:d7:12:36:42:c9:a2:4b:d5:
c8:f4:74:05:9a:8d:c2:f8:1a:7d:b7:7c:c1:e6:2d:
84:df:74:2b:32:01:16:62:e9:a5:09:a6:eb:59:51:
5a:eb:99:f3:1d:b9:9d:48:10:63:33:57:1e:6f:bc:
d5:b7:78:9a:ed:4f:a7:1c:87:39:b0:d4:bf:c2:a5:
65:5b:61:fb:65:e8:28:0f:ed:aa:c5:59:59:28:07:
3f:86:d2:d7:e5:fd:6f:b9:94:37:bc:8c:b7:d8:2b:
7e:bf:f7:ff:06:00:20:11:e5:6c:02:b4:cc:cd:13:
01:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D5:E4:7D:2F:06:7A:FC:9B:E0:3B:77:32:C9:10:14:A3:90:C8:11
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/JNXkfS8Gevyb4Dt3MskQFKOQyBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.20.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:d6:c1:5a:0e:f6:b0:62:ad:50:b8:95:eb:b2:81:80:b5:40:
18:dc:c5:ca:dc:63:46:6b:9f:37:3d:fc:62:74:82:e9:3f:98:
ac:35:5c:e9:32:6d:12:62:51:aa:58:3b:d3:f0:61:30:48:9e:
e0:45:9f:2e:db:a9:75:bb:e5:c0:ee:36:0f:09:d8:90:ef:d0:
05:ec:26:0d:ca:d3:e1:83:d0:47:c1:10:11:33:c9:b9:60:19:
a5:0b:29:5a:8d:f0:6a:82:42:aa:9c:08:f4:b5:1b:05:36:af:
cc:13:a0:c6:76:33:ef:ab:e1:32:17:cf:c3:ac:d9:12:79:d9:
fb:1a:7a:6b:0e:a4:69:f5:99:90:ae:82:fe:b8:47:a2:f9:56:
12:63:d3:5d:93:77:a4:d3:c7:42:b2:60:c7:d0:0e:4e:b7:f4:
c8:5c:f5:cc:97:3a:d4:0f:1b:c2:68:a6:5d:8b:10:4b:28:1a:
dc:aa:02:39:18:77:c7:b7:4f:b6:0b:ed:22:1a:29:07:60:0e:
6f:4c:09:39:00:01:d5:b8:70:2e:70:f8:65:bd:a1:ab:57:b7:
8c:8a:e1:7b:92:0d:4a:d5:1d:1b:b2:22:bf:05:a0:c6:02:b9:
f2:e2:f3:9b:ec:b9:3f:aa:c5:08:98:5e:8d:b8:aa:c7:6c:eb:
60:4a:a6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:38 2025 by rpki-client