Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/jZVM5c5Inmzx4Oemkx6R9iw1k_8.roa
File: jZVM5c5Inmzx4Oemkx6R9iw1k_8.roa (raw, json)
Hash identifier: rjEJpSgCWwFovtBLax9fmGlzA4/RiwDw0hJijdvo6KI=
Subject key identifier: 8D:95:4C:E5:CE:48:9E:6C:F1:E0:E7:A6:93:1E:91:F6:2C:35:93:FF
Certificate issuer: /CN=d28c3886c6ef5227c246224cc894a84a53bcf51a
Certificate serial: 0194221FB82D169AC6A22E1AC40974808F6C
Authority key identifier: D2:8C:38:86:C6:EF:52:27:C2:46:22:4C:C8:94:A8:4A:53:BC:F5:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ow4hsbvUifCRiJMyJSoSlO89Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/jZVM5c5Inmzx4Oemkx6R9iw1k_8.roa
Signing time: Wed 01 Jan 2025 13:48:11 +0000
ROA not before: Wed 01 Jan 2025 13:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12480
IP address blocks: 194.143.156.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:b8:2d:16:9a:c6:a2:2e:1a:c4:09:74:80:8f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d28c3886c6ef5227c246224cc894a84a53bcf51a
Validity
Not Before: Jan 1 13:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d954ce5ce489e6cf1e0e7a6931e91f62c3593ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0b:11:9a:e7:2f:9a:52:6d:3d:f4:5b:56:50:
cc:46:65:8e:72:71:b4:74:2a:7b:58:b2:5a:e3:87:
20:20:83:12:de:dc:44:a1:c7:ca:a7:fb:21:1d:2e:
0a:4e:9f:2e:da:72:4f:83:4f:4c:2b:94:67:86:08:
3e:0a:ea:ad:4a:d9:bc:b9:52:04:dc:19:f9:e4:be:
a7:f9:c6:cf:b7:7b:f5:7b:4f:72:0e:d8:8b:e6:34:
ef:f7:dc:d5:3f:67:3e:b2:98:71:2f:d1:e7:08:e4:
92:22:da:65:30:a4:d5:c0:ba:b5:db:64:b9:e5:06:
b4:0b:6b:3d:59:ed:f6:fc:a6:62:ed:8f:a2:f9:4b:
95:26:bd:b2:aa:82:ef:42:21:51:e4:b9:57:f9:33:
88:d7:9c:ae:3e:0c:66:d8:98:89:f6:6a:c3:1e:e5:
26:e9:bf:0b:a3:f0:0a:79:39:1a:05:b2:75:32:56:
33:4f:99:3c:b8:f4:01:1e:0b:f3:48:c8:1c:f2:86:
5f:ac:a2:8e:f5:87:f1:cc:9b:c6:5b:31:28:a3:bc:
8f:e1:ed:9a:6c:ca:64:19:f1:90:6e:27:4a:63:38:
cd:0c:b9:fb:1e:19:c0:1d:08:c8:0a:13:05:01:15:
96:f0:7d:dc:32:36:ef:9e:7c:f9:7b:f0:98:bd:67:
cd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:95:4C:E5:CE:48:9E:6C:F1:E0:E7:A6:93:1E:91:F6:2C:35:93:FF
X509v3 Authority Key Identifier:
keyid:D2:8C:38:86:C6:EF:52:27:C2:46:22:4C:C8:94:A8:4A:53:BC:F5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ow4hsbvUifCRiJMyJSoSlO89Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/jZVM5c5Inmzx4Oemkx6R9iw1k_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.156.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:64:ac:b4:4e:4f:a0:60:27:7e:54:49:7f:99:67:d1:12:eb:
bd:d8:b6:74:06:27:ea:9f:7d:d0:7a:a5:5d:b0:05:6b:e1:da:
35:b3:88:bf:de:17:2c:34:45:d0:b7:3f:9f:c5:1f:24:c8:7a:
28:2e:b7:0b:4b:13:68:5c:ce:eb:00:fb:2e:f3:1e:25:0c:3d:
53:a9:79:ce:14:0b:07:94:87:60:41:c0:50:68:18:7b:aa:69:
eb:c2:89:3b:f5:fe:6c:6b:3d:aa:47:c0:6d:7c:ca:3e:6a:d9:
c1:65:3e:f0:90:f4:d8:b5:b3:d4:5d:4e:0b:09:c6:67:ba:b2:
2a:33:ee:65:2c:2c:a7:d2:bb:52:91:a8:1e:68:02:1e:b0:5b:
4b:75:93:b2:10:a8:1a:e7:19:ca:06:bc:f7:5a:96:b1:17:84:
4a:ea:c8:20:f2:3f:3a:ad:29:d5:b5:55:76:7a:ed:cf:e9:e2:
6c:f7:d5:fb:9f:ac:84:c9:6d:9f:d9:2e:d3:fb:0b:a5:a8:3b:
ca:51:95:ec:6e:2c:e8:86:51:90:20:a2:ca:bb:a1:d2:00:88:
0e:8c:15:29:d7:6e:ff:f6:61:3e:8f:44:1b:93:9d:42:c2:ba:
3d:94:90:dc:64:c4:a1:f1:3d:19:a5:d2:e6:88:98:32:2e:4c:
0f:d7:f6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:23 2025 by rpki-client