Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/JXOr8HoHhCJacFjcm3kIsBVcNGw.roa
File: JXOr8HoHhCJacFjcm3kIsBVcNGw.roa (raw, json)
Hash identifier: 5pzOb/tvzfjmJnXUEAAKNZcQSCS+HKbHH9QupvE3pq8=
Subject key identifier: 25:73:AB:F0:7A:07:84:22:5A:70:58:DC:9B:79:08:B0:15:5C:34:6C
Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial: 0188003194F14BC9D8360A81ABE65944A024
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/JXOr8HoHhCJacFjcm3kIsBVcNGw.roa
Signing time: Tue 09 May 2023 11:07:09 +0000
ROA not before: Tue 09 May 2023 11:07:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398781
IP address blocks: 188.241.146.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:00:31:94:f1:4b:c9:d8:36:0a:81:ab:e6:59:44:a0:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Validity
Not Before: May 9 11:07:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2573abf07a0784225a7058dc9b7908b0155c346c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:45:db:25:a2:78:da:f5:21:f5:fa:6c:ca:f8:
69:9b:61:4c:76:12:fc:c1:68:54:f8:01:8e:18:ea:
ef:65:9a:29:da:13:f9:a7:df:bf:71:16:70:51:d5:
80:99:b0:dd:52:ec:0a:b9:10:d6:8e:6a:7f:84:9f:
d4:f2:3c:6d:93:c5:75:f4:13:f7:5d:30:bf:c7:ac:
b8:0d:3f:74:f5:b5:d6:c6:57:4d:8c:9e:df:68:d2:
fb:91:b3:08:87:b2:ef:80:b4:61:97:3c:7f:3f:12:
e4:04:78:a3:6b:01:d1:9e:73:80:61:e4:c2:65:58:
78:7f:88:6c:bd:72:18:1c:72:5d:a6:32:3f:7c:e9:
60:e9:ab:8e:1a:f8:90:ec:71:9a:ee:3d:c2:9b:9b:
42:96:61:20:11:40:87:e7:58:56:91:36:ff:ad:b8:
9a:0f:41:14:51:8d:c8:33:88:ec:98:2e:d4:a4:ab:
09:c9:72:1b:dd:09:b9:f7:dc:35:61:57:13:bc:b1:
e5:87:98:ec:24:d0:22:92:5d:ab:6b:90:ca:b3:04:
e9:98:3e:d7:f8:15:97:01:32:6f:2f:cb:3c:33:df:
29:cd:a8:7d:c0:ad:e2:97:37:f0:9f:00:14:88:59:
6c:9d:f2:5e:5e:5c:0a:d1:4c:63:7a:bc:16:0b:49:
b3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:73:AB:F0:7A:07:84:22:5A:70:58:DC:9B:79:08:B0:15:5C:34:6C
X509v3 Authority Key Identifier:
keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/JXOr8HoHhCJacFjcm3kIsBVcNGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.241.146.0/24
Signature Algorithm: sha256WithRSAEncryption
49:c5:6e:94:8c:ce:19:37:6c:a4:b4:d5:da:bc:46:aa:71:ab:
3c:77:fe:f0:09:e6:65:d2:ea:40:98:d6:a5:d1:60:6a:7f:d8:
27:2c:20:46:2f:bb:23:2d:42:19:61:54:f7:23:68:3f:62:d0:
e4:34:07:c5:9f:b8:92:a3:2a:43:d8:9b:80:6c:e0:5a:c4:7c:
20:9b:7a:6b:72:61:7f:46:ed:cd:2c:43:3a:ca:f3:cb:d1:16:
22:8a:12:fb:90:5c:88:78:7f:ab:47:c0:fc:1e:ec:f0:1e:4a:
de:41:e2:ff:24:16:5d:e1:d6:5d:65:b1:cd:4c:18:55:43:65:
72:fd:85:d2:20:38:88:92:62:b3:73:22:60:10:ca:10:4a:e3:
05:11:29:f5:4b:64:b5:cb:03:c9:cc:e8:f3:9f:25:c3:16:b8:
16:4f:2f:18:b9:d9:0f:be:fa:1e:6d:0d:80:67:2e:b8:6c:8a:
18:de:10:62:80:f9:67:0b:70:33:27:a7:00:e9:fc:c4:f7:17:
00:32:7a:84:6f:d7:4d:55:35:c0:a2:03:f4:1b:4a:55:ac:f2:
fe:a1:e3:85:e1:3f:3a:58:d5:2a:86:9d:60:b2:6d:3d:8f:b0:
36:d9:62:9a:a6:cd:dd:ab:41:66:c0:ab:15:6d:22:b5:44:9c:
86:93:a2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:29:59 2025 by rpki-client