Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/34dab0-985f-4376-99ce-2616ce59f021/1/jGvMJBlderh0ncRki7ERzzvv0Zk.roa
File: jGvMJBlderh0ncRki7ERzzvv0Zk.roa (raw, json)
Hash identifier: 1m4zdRbBS539XuY3IMgCHUcWXBQXJDU5mTrmqd3WQsU=
Subject key identifier: 8C:6B:CC:24:19:5D:7A:B8:74:9D:C4:64:8B:B1:11:CF:3B:EF:D1:99
Certificate issuer: /CN=3f9df02aaab83a418861fd459d8f5e8153a3296f
Certificate serial: 018CC9BCB0D33829A4B241CD20D5177ADE47
Authority key identifier: 3F:9D:F0:2A:AA:B8:3A:41:88:61:FD:45:9D:8F:5E:81:53:A3:29:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P53wKqq4OkGIYf1FnY9egVOjKW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/34dab0-985f-4376-99ce-2616ce59f021/1/jGvMJBlderh0ncRki7ERzzvv0Zk.roa
Signing time: Tue 02 Jan 2024 10:33:55 +0000
ROA not before: Tue 02 Jan 2024 10:33:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201138
IP address blocks: 185.145.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:b0:d3:38:29:a4:b2:41:cd:20:d5:17:7a:de:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f9df02aaab83a418861fd459d8f5e8153a3296f
Validity
Not Before: Jan 2 10:33:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c6bcc24195d7ab8749dc4648bb111cf3befd199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:86:38:70:7e:7e:c6:cf:ef:6e:7b:e4:be:a1:
80:62:bc:b0:13:28:94:5b:b7:49:a5:99:48:5b:6e:
58:f0:a3:c6:81:a3:88:3a:70:6a:1c:4f:8e:10:51:
4e:20:08:c7:75:cc:ba:6b:d1:8d:0a:18:29:af:c8:
a3:00:0d:0e:58:02:99:aa:4e:4e:97:70:12:0f:b1:
13:1c:28:ab:3e:9e:a1:96:51:cc:7b:7c:a8:a3:bb:
fb:f1:c9:65:73:a7:6e:22:da:0b:07:11:a6:a2:5f:
ac:a2:9c:2c:1d:3c:2d:d9:02:dd:29:6d:b6:5c:42:
ce:99:14:24:db:37:8a:78:d9:46:94:12:66:61:5a:
1b:93:5d:0d:33:e2:62:82:8b:a6:7b:cd:27:07:39:
0c:aa:af:b4:29:16:d0:fc:17:8a:bd:ae:24:25:02:
a8:5b:ac:21:1e:20:16:b5:44:cc:fc:d4:cb:86:49:
d1:a7:c7:33:4c:57:e9:ff:8b:27:eb:7e:d6:2c:f5:
4a:5f:d1:14:74:eb:41:91:40:fc:cc:82:1c:d4:2a:
b5:74:b3:07:72:e7:f8:c5:d0:e3:80:f8:90:03:3f:
ed:06:ae:2a:66:40:48:8b:a0:90:64:6a:17:e0:17:
2b:2a:b9:b5:ff:2d:2b:99:b6:47:72:18:0e:42:9b:
68:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6B:CC:24:19:5D:7A:B8:74:9D:C4:64:8B:B1:11:CF:3B:EF:D1:99
X509v3 Authority Key Identifier:
keyid:3F:9D:F0:2A:AA:B8:3A:41:88:61:FD:45:9D:8F:5E:81:53:A3:29:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P53wKqq4OkGIYf1FnY9egVOjKW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/34dab0-985f-4376-99ce-2616ce59f021/1/jGvMJBlderh0ncRki7ERzzvv0Zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/34dab0-985f-4376-99ce-2616ce59f021/1/P53wKqq4OkGIYf1FnY9egVOjKW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.55.0/24
Signature Algorithm: sha256WithRSAEncryption
90:ba:0f:93:4a:01:d0:10:ea:8d:22:d7:c0:fe:82:45:db:40:
b2:ac:56:6d:75:bc:27:74:dd:23:a9:b1:f6:b3:81:b4:dd:1c:
e3:79:75:91:25:98:e7:56:b6:72:c6:e3:85:07:71:8d:20:93:
4a:66:a1:41:5c:da:bc:78:e0:ea:c6:5d:70:63:30:69:11:40:
b5:0d:85:5d:ec:8c:c3:0d:45:23:3b:41:e5:c8:2a:1a:d1:fa:
da:73:2a:bc:bf:64:d7:6d:9c:14:99:65:1d:6f:0c:47:67:5e:
11:bf:d0:b7:19:9e:c1:cb:84:ee:61:aa:cc:43:7b:b0:60:54:
b1:35:9a:0c:be:af:5d:7d:28:2d:9d:2b:de:30:12:1c:65:d2:
b6:86:4f:70:d5:6b:f3:e1:35:a7:b0:6c:34:17:37:e7:8b:d7:
bc:f5:62:b0:82:50:c5:6c:19:2a:fb:31:39:63:6e:e8:a6:e1:
85:2b:47:ea:a6:95:2b:29:29:5a:3e:80:1f:f8:7d:33:c0:47:
13:8f:20:c3:f6:3f:74:6a:dc:31:29:65:85:7c:bd:b1:8f:92:
08:8f:7e:ad:ca:c2:c7:43:50:0b:aa:76:76:a1:b5:ce:05:77:
f5:af:58:54:fb:39:1f:a7:5f:49:ae:d6:ec:ee:2a:fd:e4:7e:
4b:c0:04:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:22:10 2025 by rpki-client