Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/Jsm60-_F38dCtn1Fh5UrIsK2DI8.roa
File: Jsm60-_F38dCtn1Fh5UrIsK2DI8.roa (raw, json)
Hash identifier: Tm+qtJh+MHWjGJZNGRncnqfRALRXk7AntriFb7cyvl4=
Subject key identifier: 26:C9:BA:D3:EF:C5:DF:C7:42:B6:7D:45:87:95:2B:22:C2:B6:0C:8F
Certificate issuer: /CN=90f25e6a6893f466d2695e90670c047443643701
Certificate serial: 0194236A2648027CE71A07187EBDFD240B67
Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/Jsm60-_F38dCtn1Fh5UrIsK2DI8.roa
Signing time: Wed 01 Jan 2025 19:49:06 +0000
ROA not before: Wed 01 Jan 2025 19:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24643
IP address blocks: 185.72.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:26:48:02:7c:e7:1a:07:18:7e:bd:fd:24:0b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f25e6a6893f466d2695e90670c047443643701
Validity
Not Before: Jan 1 19:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26c9bad3efc5dfc742b67d4587952b22c2b60c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7c:ef:cb:7f:0f:71:53:86:27:e7:70:52:fb:
1c:9a:97:ad:65:fb:11:a5:92:01:4d:c7:0f:9c:24:
94:b9:4c:ef:d1:e1:eb:a6:dd:75:2a:c6:17:56:54:
59:e2:77:3f:1a:47:2d:c0:c2:57:fa:26:75:42:e4:
f0:35:e8:ff:8b:7e:88:41:f4:11:a3:98:e5:a1:d0:
14:64:7a:86:47:c7:d0:fb:fe:55:2d:27:28:e1:0f:
65:99:fe:66:17:76:c1:fa:19:e0:1a:00:02:96:77:
73:62:b1:e8:49:75:7c:7d:12:2e:55:2e:27:e4:c7:
91:4c:3c:a6:a9:ba:d9:81:2c:13:39:0b:13:3c:80:
4f:38:a3:5d:b5:82:e9:d2:3b:2b:6c:57:57:f5:fc:
79:b3:77:c7:42:76:d7:04:18:de:36:37:5e:25:0c:
4a:14:24:7c:85:ac:d1:52:15:a7:6f:88:5b:a3:6a:
fc:d5:58:d1:6b:81:3a:5d:1e:c7:0f:85:86:bb:45:
c4:0c:07:2a:d0:5d:f5:4c:ae:94:9f:41:e8:16:a6:
cc:7a:91:9a:64:18:5d:a5:07:a5:7d:38:0f:d5:de:
c0:5b:5e:f1:08:3c:26:61:be:c2:b2:00:a6:e5:48:
ed:36:f8:99:69:33:f7:d9:7d:96:1f:0a:d9:65:b0:
92:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C9:BA:D3:EF:C5:DF:C7:42:B6:7D:45:87:95:2B:22:C2:B6:0C:8F
X509v3 Authority Key Identifier:
keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/Jsm60-_F38dCtn1Fh5UrIsK2DI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.122.0/24
Signature Algorithm: sha256WithRSAEncryption
56:28:c3:2c:f1:d8:e0:d5:ca:4e:76:9a:78:92:20:6b:97:47:
be:63:9a:37:f9:36:6e:23:31:84:ca:a8:5c:a1:9d:e3:9c:3d:
3a:44:e5:2e:4b:f5:6c:fe:d3:e8:05:c9:89:05:85:9d:d7:44:
e1:b2:01:53:0f:8d:75:57:78:c4:97:8a:01:66:aa:43:fa:1e:
b2:5f:f7:34:8e:32:12:36:60:84:34:03:e9:42:ca:d9:07:52:
b6:bc:a4:6a:f6:9b:b9:c0:61:b7:05:0b:f5:34:74:45:c8:09:
b7:e8:25:0e:a6:81:2c:e6:5e:2d:45:57:86:7f:50:be:96:94:
69:4c:31:56:7d:f4:ef:2e:9a:74:f2:26:03:b0:f4:b5:ad:cb:
ff:76:95:a2:7e:b0:45:c2:4d:01:51:45:c0:f2:92:49:51:3d:
5b:ab:73:4a:b5:66:ed:93:9a:82:72:79:5a:82:f3:21:80:e0:
a8:d0:8c:78:be:98:b7:11:8c:f9:2e:d1:59:80:05:e7:c4:a5:
fa:4c:11:9f:78:0f:5c:71:f0:23:74:41:ef:a7:19:a2:51:5d:
81:aa:b2:2c:a9:96:fe:b8:04:68:11:18:22:f3:0f:9c:10:4e:
84:3e:21:29:21:e8:41:18:57:3c:66:e9:e0:9f:fc:0d:e8:db:
6c:35:bf:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:16 2025 by rpki-client