Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/jc_U6pxcmD6LEEKU3ehAzVau7vA.roa
File: jc_U6pxcmD6LEEKU3ehAzVau7vA.roa (raw, json)
Hash identifier: yajl7mPBISuYFnnS/k3FiVeboOIcdSJWtrg89ICgp0Q=
Subject key identifier: 8D:CF:D4:EA:9C:5C:98:3E:8B:10:42:94:DD:E8:40:CD:56:AE:EE:F0
Certificate issuer: /CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Certificate serial: 343A06AF
Authority key identifier: 3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/jc_U6pxcmD6LEEKU3ehAzVau7vA.roa
Signing time: Tue 01 Mar 2022 17:22:21 +0000
ROA not before: Tue 01 Mar 2022 17:22:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34984
IP address blocks: 193.106.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 876218031 (0x343a06af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Validity
Not Before: Mar 1 17:22:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8dcfd4ea9c5c983e8b104294dde840cd56aeeef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3a:a3:b6:f0:e7:d2:47:1e:61:c3:54:cc:7a:
0d:a7:75:db:d9:71:3b:57:44:37:f0:c0:d9:28:81:
16:87:f0:bb:9b:89:74:c2:35:b1:af:85:32:81:0b:
99:d5:a8:57:56:83:25:ab:b6:58:b2:42:3d:ee:a5:
f5:5a:bb:0a:63:c2:c3:ab:3c:9b:db:a9:15:fd:16:
d7:e6:19:f3:e7:06:d2:d2:24:fd:21:5c:15:38:b2:
a5:41:36:b3:c4:80:ae:45:55:e1:d3:50:15:c3:df:
5d:44:24:cc:25:b9:cf:8e:c9:d5:61:13:77:3e:95:
10:09:b0:c7:5c:df:1a:ec:8b:b9:a6:f8:95:be:65:
02:aa:d0:c8:bd:7a:7b:1c:47:8d:84:11:d4:29:e5:
26:52:f2:b0:f8:dc:07:28:b4:84:80:02:5c:ad:13:
fd:05:e9:3b:57:eb:8b:12:66:c0:5d:89:97:d5:03:
94:60:2a:89:00:17:5d:d2:53:d5:d5:e3:84:97:8e:
d5:9a:b5:80:e4:02:af:ba:5a:cc:ea:c9:01:dc:92:
82:3e:ff:a1:48:6c:34:fd:db:d2:10:38:9c:89:0b:
4b:ab:9f:d9:28:c9:54:4c:0e:bb:0f:af:42:71:8f:
a2:25:20:24:dd:b8:ba:23:a4:df:8c:7f:69:11:0b:
8b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:CF:D4:EA:9C:5C:98:3E:8B:10:42:94:DD:E8:40:CD:56:AE:EE:F0
X509v3 Authority Key Identifier:
keyid:3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/jc_U6pxcmD6LEEKU3ehAzVau7vA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.196.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:10:99:c3:48:00:29:85:ed:bb:29:78:4f:60:e4:61:96:cd:
b4:59:a0:c3:f4:60:ed:d9:47:96:d6:cb:2c:c2:a4:e8:32:cb:
e5:e3:ac:e9:93:5a:57:94:5a:5f:77:01:8c:d9:6f:ab:e4:a7:
b8:ec:f0:8b:cc:c7:e7:8b:34:c9:bb:b4:f9:92:ed:6f:0f:34:
82:f4:eb:77:6c:7a:55:85:f8:e4:5f:c0:3d:1b:a5:06:7a:99:
b8:04:34:d1:f0:b3:ea:1a:47:c0:f5:5d:6c:94:50:19:70:9c:
f2:13:72:19:51:0f:e4:02:14:a3:23:14:4b:f5:95:b6:e5:f6:
df:6b:9a:54:6c:8e:5e:42:b3:44:ae:ed:2c:fc:93:5e:a9:80:
b5:06:03:04:d0:d5:df:32:56:ab:63:d8:42:e0:51:40:35:4e:
42:ec:e6:65:fa:f3:9e:0e:b3:a8:c9:ff:77:bb:78:06:eb:a5:
5b:57:4e:7f:30:5e:a5:26:fb:ff:be:79:04:39:2f:2f:41:58:
eb:8c:43:ff:ee:4d:ff:d7:5a:2e:33:cc:fa:81:5c:db:e4:89:
90:03:fa:2f:fb:32:d4:74:53:94:fa:5e:0c:43:e5:88:22:64:
81:13:d7:a0:3f:5d:4a:f2:6f:d9:07:5c:d4:ef:c1:9f:c5:9e:
f3:aa:66:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:28:45 2025 by rpki-client