Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/jvaFexoxtk4rKhDumsQjGLQsBLU.roa
File: jvaFexoxtk4rKhDumsQjGLQsBLU.roa (raw, json)
Hash identifier: trR6TCS5RgKXy+FTVPF28Tq5uhqKg+8D3gvbODYNaCY=
Subject key identifier: 8E:F6:85:7B:1A:31:B6:4E:2B:2A:10:EE:9A:C4:23:18:B4:2C:04:B5
Certificate issuer: /CN=bfd786b24b4b30275bcc8d5244e34ee00481d790
Certificate serial: 01942747B3783A6217A9B55B2BD290235F87
Authority key identifier: BF:D7:86:B2:4B:4B:30:27:5B:CC:8D:52:44:E3:4E:E0:04:81:D7:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/jvaFexoxtk4rKhDumsQjGLQsBLU.roa
Signing time: Thu 02 Jan 2025 13:49:57 +0000
ROA not before: Thu 02 Jan 2025 13:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 188.94.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:b3:78:3a:62:17:a9:b5:5b:2b:d2:90:23:5f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd786b24b4b30275bcc8d5244e34ee00481d790
Validity
Not Before: Jan 2 13:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ef6857b1a31b64e2b2a10ee9ac42318b42c04b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:73:cd:86:b3:df:61:79:6e:11:21:43:ce:2d:
03:10:f2:d0:2f:f4:a1:da:d5:64:74:fd:42:ae:66:
de:a5:fe:52:ac:15:a2:45:50:32:e1:78:d5:5a:2e:
29:bb:1a:3b:fc:bd:0a:f7:a7:a1:97:e1:0e:46:48:
01:39:bc:91:00:2d:66:7d:af:80:34:e0:b8:f4:14:
f0:2c:68:76:e1:7c:8f:a7:10:a0:f1:c4:f1:0f:47:
c9:1b:3c:2e:50:bf:c2:58:34:b6:c6:d4:32:86:a1:
d2:12:4e:37:7b:b2:2f:89:09:d6:23:8b:0d:46:a3:
16:21:86:9d:64:25:c5:46:cb:48:dc:5b:c5:ec:7b:
96:cf:1e:93:ca:a0:06:3b:4f:ae:cd:e4:fa:cd:83:
3f:72:db:00:0f:ab:21:d6:66:3b:9b:81:dd:f3:e3:
e3:75:33:03:59:8f:c8:2f:39:f8:cf:9b:7b:ad:34:
b0:57:8d:27:bd:2c:8b:38:6f:19:76:91:ad:f4:16:
c8:fd:40:7c:d1:9c:4c:27:75:ae:84:a1:d9:1a:02:
18:77:a4:fd:7e:85:cb:3d:e6:79:c5:f5:db:77:2f:
26:99:61:3d:12:eb:74:fd:93:87:de:39:27:d6:8a:
90:7c:05:77:64:19:f3:7e:9d:36:02:d2:df:ad:4e:
ea:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F6:85:7B:1A:31:B6:4E:2B:2A:10:EE:9A:C4:23:18:B4:2C:04:B5
X509v3 Authority Key Identifier:
keyid:BF:D7:86:B2:4B:4B:30:27:5B:CC:8D:52:44:E3:4E:E0:04:81:D7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/jvaFexoxtk4rKhDumsQjGLQsBLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.94.190.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:e2:01:f7:59:14:7e:50:a8:4d:ee:60:14:a1:fe:b4:33:95:
1e:dc:e8:47:dc:c8:68:5b:ff:40:5f:be:2d:0d:2e:80:a2:72:
66:0f:52:cc:fd:c5:9f:32:20:d6:db:d4:73:d0:eb:8e:38:7a:
9a:63:ef:8a:ac:39:f8:d0:a5:22:0a:7f:9a:ff:b5:a8:ae:f6:
83:52:3f:45:12:64:87:94:21:94:bc:e9:8a:60:54:17:09:39:
fe:87:8c:e4:ea:33:9a:45:20:1a:c7:73:f8:56:59:18:a4:87:
b5:77:ef:6d:80:9b:04:ed:41:41:c5:06:35:b7:79:ce:fe:d4:
f4:59:a3:ff:02:4c:3a:dd:1b:91:07:05:f5:08:9f:b9:17:7c:
4f:e0:d3:67:cd:a0:10:e2:29:33:ea:89:de:43:9b:b2:80:6d:
6a:cf:83:2d:b5:8e:f7:c0:c3:28:28:de:6e:c2:40:e5:4a:0b:
ea:47:24:57:e5:79:a5:6b:68:d2:54:64:8d:5a:d4:8c:c6:f6:
f3:e7:39:59:fa:2e:da:57:25:4a:77:aa:45:2c:fb:78:7a:3c:
a3:76:b6:52:e5:7f:2e:f3:b5:22:23:ce:c2:de:b5:82:54:8f:
b1:e3:4c:89:35:26:f8:8f:1d:c4:d5:7d:aa:3a:96:5d:28:45:
5a:8b:5a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:16 2025 by rpki-client