Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2fbbf5-b0b5-4ca5-9327-6c4f2e027911/1/jclrermT_d-juRp_9EFKLRCOofg.roa
File: jclrermT_d-juRp_9EFKLRCOofg.roa (raw, json)
Hash identifier: Ov/IdmhAKHrnWWq6JcB7iyQwo1r3xclYQewyNl3O8bo=
Subject key identifier: 8D:C9:6B:7A:B9:93:FD:DF:A3:B9:1A:7F:F4:41:4A:2D:10:8E:A1:F8
Certificate issuer: /CN=e3025c689a52c898fd7279329f36b406cc8fbc17
Certificate serial: 018570F09C2BF88FD64D86C5D8B1D9284B4B
Authority key identifier: E3:02:5C:68:9A:52:C8:98:FD:72:79:32:9F:36:B4:06:CC:8F:BC:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wJcaJpSyJj9cnkynza0BsyPvBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/2fbbf5-b0b5-4ca5-9327-6c4f2e027911/1/jclrermT_d-juRp_9EFKLRCOofg.roa
Signing time: Mon 02 Jan 2023 05:24:54 +0000
ROA not before: Mon 02 Jan 2023 05:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49022
IP address blocks: 91.243.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:9c:2b:f8:8f:d6:4d:86:c5:d8:b1:d9:28:4b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3025c689a52c898fd7279329f36b406cc8fbc17
Validity
Not Before: Jan 2 05:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8dc96b7ab993fddfa3b91a7ff4414a2d108ea1f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b0:64:db:7f:88:a9:ff:ba:75:af:12:1f:85:
f5:a2:09:77:8a:94:b3:3f:ce:c5:89:2e:6d:ea:ff:
f0:aa:4c:ea:bf:06:0d:ce:9f:f2:5b:20:33:a9:9c:
e8:35:73:0a:8a:1e:b7:f6:0e:41:00:3f:ae:27:87:
8c:e4:37:d3:f2:87:31:32:18:93:37:ef:31:5c:96:
54:3b:2c:9b:94:3a:3c:40:69:da:3d:b9:76:a0:dc:
bf:02:31:05:e0:18:9f:49:dc:c7:96:9a:9f:4b:ee:
e1:e2:17:a6:6d:cf:0a:a2:a4:1b:47:7e:eb:9f:30:
16:26:51:17:8a:30:88:6c:85:da:63:f2:88:4b:87:
06:86:8d:b7:3e:90:ea:b7:13:b9:2e:08:00:4c:24:
e7:00:55:5e:9c:5e:00:82:73:bc:c7:c1:c2:5e:d2:
6a:02:0d:ae:c4:b4:bf:85:e9:84:48:54:68:08:7b:
20:5c:84:8b:24:da:28:f4:3f:73:11:d4:61:75:d4:
94:e4:1e:51:9a:d5:6a:65:42:91:93:20:e2:0b:fa:
7c:bf:5e:6a:c7:3c:af:c9:18:7e:ad:31:7f:d1:93:
33:05:3b:24:0e:c9:f1:c9:16:76:b3:5b:17:c7:82:
1b:18:7d:ab:77:f7:22:dc:50:0a:91:66:29:7f:48:
40:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C9:6B:7A:B9:93:FD:DF:A3:B9:1A:7F:F4:41:4A:2D:10:8E:A1:F8
X509v3 Authority Key Identifier:
keyid:E3:02:5C:68:9A:52:C8:98:FD:72:79:32:9F:36:B4:06:CC:8F:BC:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wJcaJpSyJj9cnkynza0BsyPvBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2fbbf5-b0b5-4ca5-9327-6c4f2e027911/1/jclrermT_d-juRp_9EFKLRCOofg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2fbbf5-b0b5-4ca5-9327-6c4f2e027911/1/4wJcaJpSyJj9cnkynza0BsyPvBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.119.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:48:95:f9:5a:18:45:6a:14:a5:41:a0:3b:7f:a0:0f:00:88:
1c:25:c6:31:7b:0f:88:0e:bb:ea:97:4e:05:0c:45:86:ff:9c:
cc:80:18:67:8c:b4:95:f0:b5:81:91:cb:05:09:22:6d:3a:49:
4c:ac:e2:34:4e:2d:da:d2:fd:4a:83:69:c6:a1:57:99:b9:0c:
d7:d1:0e:bd:89:96:8e:0e:b2:b5:ab:70:10:1a:d7:2b:26:0c:
21:90:1c:32:e7:7c:1b:45:18:d0:8a:4b:a5:08:22:2e:ed:30:
57:fe:7a:9a:58:88:4e:35:99:0b:4f:cc:a8:b6:f9:ce:39:45:
06:5d:ef:1a:16:dc:99:72:0d:b1:93:6d:69:e3:0f:af:d3:8e:
cf:77:ea:f5:3b:c5:0a:dc:aa:04:1c:db:c7:10:a7:c0:39:d5:
45:1c:19:b0:bc:69:7e:dd:64:19:2a:47:90:29:fd:ce:2d:f5:
c9:ed:b0:94:4d:10:88:35:7b:48:04:e4:2c:11:3f:e7:09:a1:
13:92:90:36:5d:78:02:00:70:b3:b1:f0:ca:fa:3f:0c:a9:b6:
56:15:40:fe:e7:ae:d7:e9:93:5e:07:bf:91:7f:ea:d0:cb:28:
42:0d:4a:ef:ae:ce:8e:af:e7:16:95:5f:f4:96:40:a7:5f:ba:
fe:67:92:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:10:06 2025 by rpki-client