Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/JBl-UFa4Ozq7GP59w-w7OuuiKKA.roa
File: JBl-UFa4Ozq7GP59w-w7OuuiKKA.roa (raw, json)
Hash identifier: c9qdLckI85oUP4WAVpBWSpkYz0V8KzCsqch9M1JvM+A=
Subject key identifier: 24:19:7E:50:56:B8:3B:3A:BB:18:FE:7D:C3:EC:3B:3A:EB:A2:28:A0
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019196F8A57517437DD88A8C457F54C282EF
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/JBl-UFa4Ozq7GP59w-w7OuuiKKA.roa
Signing time: Wed 28 Aug 2024 03:12:43 +0000
ROA not before: Wed 28 Aug 2024 03:12:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:96:f8:a5:75:17:43:7d:d8:8a:8c:45:7f:54:c2:82:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 28 03:12:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24197e5056b83b3abb18fe7dc3ec3b3aeba228a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:74:82:a4:62:17:49:ec:38:94:a0:53:4b:bb:
32:b4:1e:ad:4a:54:36:0e:21:d0:3b:ac:fa:ad:2b:
4e:f2:4f:bf:99:a0:59:09:f5:4b:5c:5d:40:0c:76:
02:0a:a5:57:22:60:a2:aa:89:a0:0d:47:38:a6:d7:
a7:81:bb:49:98:08:1f:3a:48:5a:2c:6c:33:f6:c8:
80:e5:30:50:bc:77:85:bb:50:07:f0:58:58:de:d0:
56:2e:37:9a:fd:a7:df:65:e3:a2:cc:06:5f:c0:42:
af:ec:ea:d3:bc:66:d7:b2:cf:75:cb:50:55:f0:68:
63:6d:e2:72:79:54:2e:dd:55:11:cb:42:c1:08:97:
25:b8:50:23:af:4b:de:bb:50:21:12:a3:d5:fd:11:
5e:64:b9:b6:6d:a1:0b:ff:c0:69:9c:1b:1e:58:bb:
a7:06:38:7c:ec:7b:c8:be:c2:f5:9d:7a:5c:c6:b6:
51:5e:46:89:49:29:90:d3:72:7b:8e:b0:df:56:0b:
1b:33:f1:95:98:9d:20:09:6c:c0:59:f3:0d:cf:8a:
ad:ec:a5:13:78:67:52:f9:60:ca:e7:14:16:22:aa:
ac:8d:28:8f:b3:f6:fd:e9:34:5e:37:23:20:6b:25:
11:6a:0b:11:53:0c:a0:00:23:07:46:4a:3d:87:b8:
15:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:19:7E:50:56:B8:3B:3A:BB:18:FE:7D:C3:EC:3B:3A:EB:A2:28:A0
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/JBl-UFa4Ozq7GP59w-w7OuuiKKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
70:d6:66:89:15:0b:d1:c9:e6:52:bf:bf:f9:f4:1e:98:80:6e:
75:62:a3:9a:53:30:ed:78:65:d1:1c:be:b5:de:6d:d0:0f:29:
0c:c4:9b:13:de:03:70:c0:e1:fd:1b:78:00:e8:4a:0c:68:3b:
e8:aa:c6:75:a7:24:e7:79:eb:5b:64:6c:70:25:2e:b0:3b:bc:
f9:2e:56:8f:a8:c5:be:27:77:d9:e6:73:3c:70:da:45:61:60:
ed:bc:bd:b3:90:0a:6e:5e:b4:72:b0:ed:a3:28:ec:27:52:50:
14:da:54:9b:b0:24:20:17:1f:d3:b1:1e:6f:75:c6:85:e8:ba:
bd:6c:85:89:bf:7e:3c:b3:2e:f9:7f:d5:8d:9b:01:40:b6:93:
34:d5:32:51:5b:d9:fe:d0:54:c7:57:1f:88:2e:8e:7d:a8:47:
cc:6e:6c:ee:b2:46:92:56:e4:93:7a:9e:8d:e6:57:b2:f1:c3:
d3:bf:51:3d:4d:5e:f0:b1:81:fc:1b:f1:ed:27:6b:ef:d9:4f:
40:00:79:20:f7:af:53:fa:49:ae:66:47:d8:91:d8:31:03:0e:
34:dd:6d:d5:e7:bf:7e:4f:18:66:73:3b:2c:4b:15:2e:ac:c8:
b3:c8:a4:6a:2b:f5:eb:8b:d5:8c:9d:e0:8d:bc:9f:0d:11:a0:
0b:c8:4f:aa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:19:23 2025 by rpki-client