Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/jGoTTL_48yWV-ohs_hgmOjEwT4E.roa
File: jGoTTL_48yWV-ohs_hgmOjEwT4E.roa (raw, json)
Hash identifier: Q0KSsruo9YLV5d/ARziN3CSGqP5OR6gQhOox+XP9FnI=
Subject key identifier: 8C:6A:13:4C:BF:F8:F3:25:95:FA:88:6C:FE:18:26:3A:31:30:4F:81
Certificate issuer: /CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Certificate serial: 0194221FC6528D875E58C644BFAC91982CBB
Authority key identifier: DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/jGoTTL_48yWV-ohs_hgmOjEwT4E.roa
Signing time: Wed 01 Jan 2025 13:48:15 +0000
ROA not before: Wed 01 Jan 2025 13:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 32613
IP address blocks: 185.248.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c6:52:8d:87:5e:58:c6:44:bf:ac:91:98:2c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Validity
Not Before: Jan 1 13:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c6a134cbff8f32595fa886cfe18263a31304f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b4:33:99:0f:e5:9e:28:c9:6a:12:23:91:2a:
64:d7:75:df:32:f2:91:d0:1a:53:4e:9c:df:ec:2c:
bf:b3:d1:17:ee:fe:a5:ed:54:12:38:d9:fb:96:76:
dc:6f:22:bc:85:ed:02:c8:bb:0e:5b:65:d7:08:d9:
46:7a:63:66:b4:3e:fc:e2:de:83:07:72:ca:78:8d:
cd:ac:78:8f:ed:7f:ea:3f:7e:dd:84:f3:ab:c6:11:
e6:c8:3e:59:86:b3:37:70:24:64:ba:e0:5b:33:5a:
20:e5:33:9b:ac:d8:ac:18:e5:be:2f:a1:fa:2f:11:
c0:7c:3c:48:7f:ae:84:8e:75:4e:e9:91:c7:c2:ab:
7e:d6:df:75:9d:93:46:9f:eb:fa:4a:ad:ce:6c:75:
a8:82:85:3c:86:0b:12:17:6d:b2:b5:fd:34:fe:a4:
c8:2c:d2:30:0e:79:a7:b9:38:f0:13:65:86:08:39:
5e:d9:ee:e7:dc:49:39:00:7a:8a:09:9a:05:9c:9c:
06:8f:73:a5:f4:9d:e6:33:a3:c8:b9:0a:cd:71:96:
92:56:2f:b0:e4:7f:f2:72:da:52:41:99:fa:ba:39:
d3:aa:82:f3:09:31:fb:d2:ba:c0:f6:8f:ce:cf:23:
98:04:37:07:4c:77:f4:0a:6c:a6:f6:18:96:ab:f2:
a6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6A:13:4C:BF:F8:F3:25:95:FA:88:6C:FE:18:26:3A:31:30:4F:81
X509v3 Authority Key Identifier:
keyid:DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/jGoTTL_48yWV-ohs_hgmOjEwT4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.51.0/24
Signature Algorithm: sha256WithRSAEncryption
13:c6:8f:22:87:92:ef:e5:a2:7f:d9:32:7d:ab:78:a3:1f:eb:
ad:b5:14:c4:f8:e9:0a:8b:57:5a:c2:40:ca:12:20:e0:b4:0f:
2d:09:14:23:a3:e5:48:b0:bd:e1:f2:5f:f0:6e:79:c3:87:6b:
40:d7:67:96:b6:2f:d1:da:13:f8:b4:31:41:b0:1b:d3:19:93:
ad:4a:d4:cd:45:0e:22:f2:7e:a1:49:da:f2:35:9f:e7:82:f4:
a9:39:72:a9:cd:f4:d6:ec:b2:44:bf:8d:47:4a:17:d3:8f:7d:
50:4c:84:42:af:1a:d9:31:a1:de:24:02:f6:7a:98:47:03:88:
4b:7a:f6:24:6d:54:2a:ab:87:8e:ac:e9:a4:3a:4b:bf:9b:51:
06:e2:d3:d0:0c:68:aa:0b:d7:c8:62:2a:9b:fa:bd:cb:2c:ea:
0b:76:bc:34:a6:44:68:2c:36:e6:e8:92:c0:11:34:0c:16:c9:
03:25:26:7e:e5:dd:4b:37:ca:d7:f0:b4:7b:5a:98:58:81:d9:
6b:98:e3:dc:a3:60:aa:d8:19:23:0f:cc:e4:2a:8f:3c:df:c2:
2c:96:dd:22:20:86:d8:18:5c:23:37:ee:d3:72:d1:0a:52:7b:
cd:5a:c6:98:3e:bd:b6:07:10:ea:b5:5f:38:8d:a7:ac:74:31:
64:f8:3d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:16:40 2025 by rpki-client