Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/jJZ2HGBh9sf4zKvFBoawkCSE36M.roa
File: jJZ2HGBh9sf4zKvFBoawkCSE36M.roa (raw, json)
Hash identifier: /j0hgJuEgbh9wJPPT5skbRnDVTk4N5FaC35FuOjVz1M=
Subject key identifier: 8C:96:76:1C:60:61:F6:C7:F8:CC:AB:C5:06:86:B0:90:24:84:DF:A3
Certificate issuer: /CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
Certificate serial: 01941FFA8BC521131B58A0BFA596D57B4FA3
Authority key identifier: FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/jJZ2HGBh9sf4zKvFBoawkCSE36M.roa
Signing time: Wed 01 Jan 2025 03:48:20 +0000
ROA not before: Wed 01 Jan 2025 03:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 194.55.2.0/23 maxlen: 23
194.55.2.0/24 maxlen: 24
194.55.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:8b:c5:21:13:1b:58:a0:bf:a5:96:d5:7b:4f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
Validity
Not Before: Jan 1 03:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c96761c6061f6c7f8ccabc50686b0902484dfa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e3:fa:ee:99:f8:60:fd:fb:f3:1d:3d:0b:8d:
1d:d7:ed:aa:4e:52:aa:b5:3d:c5:22:f7:1e:ee:3b:
c8:ab:bd:38:f3:25:39:ed:9d:4b:fe:c2:56:96:b6:
0f:f8:9d:cc:c0:6d:60:a0:55:50:ce:14:38:16:4b:
97:14:21:90:b5:98:3a:92:75:20:ad:30:b6:ad:34:
a2:32:83:83:13:a2:66:74:d7:5e:00:1b:43:12:fe:
1c:fb:4a:47:c1:a0:65:64:02:07:bc:79:34:85:ac:
51:8a:d7:78:65:36:1e:13:63:5f:a3:64:c3:e9:2e:
c8:7e:fb:b3:f6:64:cf:20:60:85:3a:d9:b2:a6:b7:
a1:8d:12:d7:55:b0:dc:7f:95:ad:28:10:61:b8:2f:
d8:08:39:dd:b9:01:00:ef:3f:a8:62:6b:38:38:95:
d1:d8:68:d5:a7:72:b6:48:69:6d:e2:c2:30:a7:be:
6b:7e:b3:d0:05:35:27:30:c7:b5:4d:fc:ce:b2:52:
c4:97:ad:13:78:79:57:c8:cf:74:77:b1:89:ef:84:
18:69:7c:a4:f2:92:07:c3:06:5e:91:04:46:36:78:
66:cb:83:61:08:d1:88:c3:e0:2a:c4:c1:a5:a5:a4:
ad:86:f5:0a:6e:41:27:14:e1:6e:8d:c5:11:71:b7:
9c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:96:76:1C:60:61:F6:C7:F8:CC:AB:C5:06:86:B0:90:24:84:DF:A3
X509v3 Authority Key Identifier:
keyid:FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/jJZ2HGBh9sf4zKvFBoawkCSE36M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.2.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:62:17:6a:88:cb:28:60:38:42:51:07:d3:4d:15:d2:56:76:
6c:de:7e:10:48:0b:7f:dd:0f:2a:41:6b:d5:32:06:dd:e8:f1:
55:e7:4b:99:e0:aa:7e:5f:0b:7a:54:b2:0d:68:fb:0b:a0:a0:
6f:0b:9b:c3:9c:4d:d1:1c:2a:cf:ac:94:7c:2b:5d:12:bc:74:
08:5e:70:52:57:05:08:6c:a4:98:df:c7:9e:d8:75:43:2a:67:
b5:99:73:30:fc:f2:ab:df:50:37:95:4f:25:07:f6:69:11:aa:
1a:5e:f0:c8:fa:3b:0f:ab:70:9a:e2:73:5f:fe:da:0c:55:cd:
c2:d2:68:37:b4:f6:1f:53:97:b0:b9:06:5a:2f:ad:9b:06:80:
25:bb:6a:b9:89:3e:89:a0:de:66:c9:c5:95:21:00:33:93:68:
ad:05:cf:16:ab:ef:a2:7e:79:88:b9:e9:78:9d:79:0c:fa:82:
f9:a2:bd:5b:35:a0:f1:e6:09:7f:4f:f9:72:f3:3e:b1:40:bc:
bf:18:21:c6:a3:c3:b6:71:dd:15:82:ca:b6:1c:fd:b2:15:23:
15:93:83:18:ce:c5:f5:69:d7:bc:ee:c6:28:d0:9c:bf:51:e8:
a6:7d:7c:0c:84:62:ae:93:de:ca:fe:2d:5b:f1:12:09:9d:20:
7a:8f:02:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:00:49 2025 by rpki-client