Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/JHsea8ldAse1CeGI2SumLCiOnDc.roa
File: JHsea8ldAse1CeGI2SumLCiOnDc.roa (raw, json)
Hash identifier: VKEuoq4G9HXNJupJnEjoPZw8yd6ADu3vGNugbT7oOUM=
Subject key identifier: 24:7B:1E:6B:C9:5D:02:C7:B5:09:E1:88:D9:2B:A6:2C:28:8E:9C:37
Certificate issuer: /CN=89e21a2b8a25b971bdb741a0aae325992304194e
Certificate serial: 01941FFA0B08119E11D5ED3E0639D45F9015
Authority key identifier: 89:E2:1A:2B:8A:25:B9:71:BD:B7:41:A0:AA:E3:25:99:23:04:19:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/JHsea8ldAse1CeGI2SumLCiOnDc.roa
Signing time: Wed 01 Jan 2025 03:47:48 +0000
ROA not before: Wed 01 Jan 2025 03:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397966
IP address blocks: 193.25.214.0/24 maxlen: 24
193.25.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:0b:08:11:9e:11:d5:ed:3e:06:39:d4:5f:90:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e21a2b8a25b971bdb741a0aae325992304194e
Validity
Not Before: Jan 1 03:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=247b1e6bc95d02c7b509e188d92ba62c288e9c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fb:3c:81:9e:90:a8:1c:85:e6:9c:9a:c6:fb:
a9:76:a6:d2:25:d6:aa:8e:25:8a:5f:08:45:23:2c:
03:9c:b4:bc:75:db:51:ea:6e:89:ce:c1:42:89:b7:
de:dd:8d:4c:0b:73:81:37:cb:60:e3:04:b9:0e:de:
fd:82:52:c1:4c:9f:93:5b:2c:80:b4:95:d3:da:41:
4a:0d:35:43:84:9a:82:bd:e1:2e:cc:bc:d8:1a:45:
e0:88:9c:4a:6d:f9:d2:38:44:b6:ee:89:5d:8f:ae:
70:9e:dc:5d:b2:fe:56:84:d3:6c:91:21:d4:ad:18:
7a:cf:15:fd:81:17:7c:95:d0:d3:7b:24:42:6d:08:
77:cd:51:a8:c3:75:d9:3b:d2:16:1e:fc:13:1c:c4:
dd:bb:9c:d0:a6:5a:df:31:ea:75:43:c2:4f:12:a2:
aa:4a:ac:ac:9c:de:e4:0d:de:77:84:34:e2:a8:28:
41:24:73:28:ac:6c:5d:ad:94:67:2d:bd:50:64:19:
bb:3f:39:78:57:35:a7:4d:49:a9:8e:15:d1:44:f1:
10:4f:31:95:ba:38:b7:d4:9d:a7:fe:50:76:94:12:
51:e3:14:30:3d:1a:2a:93:48:a3:33:c9:67:f9:b2:
5a:96:c2:fe:d7:4f:36:65:cc:2d:ba:ae:89:86:2c:
f9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7B:1E:6B:C9:5D:02:C7:B5:09:E1:88:D9:2B:A6:2C:28:8E:9C:37
X509v3 Authority Key Identifier:
keyid:89:E2:1A:2B:8A:25:B9:71:BD:B7:41:A0:AA:E3:25:99:23:04:19:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/JHsea8ldAse1CeGI2SumLCiOnDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.214.0/23
Signature Algorithm: sha256WithRSAEncryption
82:cf:da:60:46:7f:bd:9b:1a:bd:4c:0c:69:6f:17:4a:55:6f:
f6:b2:e1:74:59:44:d2:30:b5:f8:fc:f3:fd:77:3c:fe:f8:15:
77:4f:f3:4f:01:53:51:8c:e8:08:f0:91:0c:1d:28:e2:92:48:
72:28:94:15:52:d9:a5:86:f7:13:73:97:ac:10:61:d6:21:3f:
23:32:d0:52:07:bc:fe:f6:55:f7:0a:72:bf:6d:25:20:61:1e:
93:80:c8:ec:9f:38:b6:36:10:7c:73:aa:4f:b6:45:24:8b:de:
0c:dc:e2:4f:97:d8:17:2c:ae:36:49:a1:3c:80:31:e2:3d:f7:
53:eb:e5:3e:6f:3d:9b:b3:f0:4b:bc:08:66:36:bc:b3:a7:de:
57:bd:fb:15:a7:ae:64:48:46:af:08:4c:bf:de:99:ce:52:f4:
a8:0c:0b:aa:aa:0f:39:6d:b5:45:5d:5d:7e:53:7a:cb:7d:ff:
16:d6:8d:22:31:ad:db:8d:b9:27:3d:02:69:26:be:dc:48:5a:
ed:19:00:1c:93:26:29:f9:f2:da:17:b9:81:05:10:13:94:f0:
ea:49:74:93:af:2f:61:75:ad:9c:9a:f7:5e:23:06:22:d5:22:
22:8c:bd:8e:c0:fc:2c:3d:1d:ac:29:a4:27:b1:26:25:23:b0:
71:08:93:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:13:20 2025 by rpki-client