Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/JXA-33cK85ZDxPWA1cZa0TNm8fw.roa
File: JXA-33cK85ZDxPWA1cZa0TNm8fw.roa (raw, json)
Hash identifier: bET0Mft9jd9rbtnPUbEnui7J4iR2350r1V2/tNoa4bY=
Subject key identifier: 25:70:3E:DF:77:0A:F3:96:43:C4:F5:80:D5:C6:5A:D1:33:66:F1:FC
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 0193906A5DBE19F3F3A505EBE57D83919668
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/JXA-33cK85ZDxPWA1cZa0TNm8fw.roa
Signing time: Wed 04 Dec 2024 06:45:10 +0000
ROA not before: Wed 04 Dec 2024 06:45:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.246.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:90:6a:5d:be:19:f3:f3:a5:05:eb:e5:7d:83:91:96:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Dec 4 06:45:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25703edf770af39643c4f580d5c65ad13366f1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8a:cf:ac:bd:03:fd:dc:f4:fb:e8:c8:b1:ab:
76:3e:59:22:90:90:55:06:1e:a4:f1:85:ae:60:ef:
b5:e1:51:15:41:83:60:04:8e:89:ab:4e:64:27:0e:
6a:52:71:6e:51:e3:b1:34:f0:30:ab:55:8c:d0:b3:
b8:03:7d:ac:9a:0f:34:d7:3e:12:38:62:89:11:f2:
df:e2:a1:7e:27:11:33:fe:8c:f8:4b:1a:e2:9d:06:
00:82:b2:85:70:97:6b:87:9f:b8:13:50:3d:26:e2:
80:e5:3f:25:54:43:3e:f9:d4:6e:73:e0:4c:a6:1b:
d5:a2:bb:3b:69:28:6c:e8:5a:d8:14:f0:32:c5:9e:
9a:89:c8:91:44:44:85:a1:57:7c:5c:27:7c:4d:d5:
cb:5d:b9:92:3e:43:ca:97:14:53:f9:59:76:b5:15:
65:33:76:40:e2:3a:77:d9:c9:48:1c:1c:13:19:43:
d3:a1:46:d7:ef:dd:fd:58:a2:4f:58:03:85:64:be:
b4:8e:00:63:b9:b9:3b:92:40:14:76:94:88:ef:cc:
7f:61:94:ca:66:ec:11:73:9c:8a:df:a4:29:54:84:
bf:cf:1a:48:e2:eb:84:da:d0:1c:b4:8c:47:85:be:
d8:8e:a7:8e:78:c7:2b:4a:b0:00:00:d3:30:7c:8e:
25:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:70:3E:DF:77:0A:F3:96:43:C4:F5:80:D5:C6:5A:D1:33:66:F1:FC
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/JXA-33cK85ZDxPWA1cZa0TNm8fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.220.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:c3:4f:0d:76:3f:ed:63:37:28:88:01:28:7b:d2:d3:52:4b:
6e:a1:ad:4a:c6:a9:bd:e6:5f:52:0d:b4:dd:08:b1:be:84:18:
9b:34:60:2c:1e:a2:7b:a3:e6:0c:e0:bd:f6:4d:f9:59:f8:c0:
85:af:5d:c8:1c:ba:c3:bc:64:83:85:b4:00:8c:8a:b6:ec:c9:
60:5b:e8:e9:db:21:ab:93:76:63:c0:e1:9d:86:18:d8:15:58:
1f:80:d2:88:d9:a4:33:2b:a6:ab:b4:9f:78:4c:ee:3f:32:61:
f7:64:34:c6:f8:f8:d2:85:80:a1:25:b9:38:37:bb:7f:7c:8f:
70:ff:8c:c6:cf:46:91:51:44:32:94:4f:bd:ac:7b:35:08:aa:
a7:54:45:ea:1c:e2:11:e0:c9:75:52:9b:fa:bd:82:5c:4a:d4:
f2:ff:ad:ba:44:77:93:dc:8e:91:21:fa:25:d9:ef:8f:e0:91:
02:77:a8:1d:0e:95:90:88:0d:40:36:36:c3:97:1e:66:76:10:
e8:58:f6:02:b7:51:9e:a5:65:a5:a1:87:f7:3a:1a:71:9a:44:
14:60:96:10:88:16:29:a3:d3:41:55:e2:4d:76:22:81:0b:38:
a4:9a:63:0a:e4:33:13:1b:60:ee:48:fe:be:98:05:9b:52:7d:
bd:d5:eb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:38:12 2025 by rpki-client