Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/JLZHp3zugUr0BJKEkPLt_peuCWY.roa
File: JLZHp3zugUr0BJKEkPLt_peuCWY.roa (raw, json)
Hash identifier: xqh8b79ZtGYi3X/2gVjxCLbm1mPbREjzpn3t3zp8STc=
Subject key identifier: 24:B6:47:A7:7C:EE:81:4A:F4:04:92:84:90:F2:ED:FE:97:AE:09:66
Certificate issuer: /CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Certificate serial: 01941FFA26690C8D3895D28822F19BB09C93
Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/JLZHp3zugUr0BJKEkPLt_peuCWY.roa
Signing time: Wed 01 Jan 2025 03:47:55 +0000
ROA not before: Wed 01 Jan 2025 03:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64267
IP address blocks: 193.31.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:26:69:0c:8d:38:95:d2:88:22:f1:9b:b0:9c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Validity
Not Before: Jan 1 03:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24b647a77cee814af404928490f2edfe97ae0966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:aa:ed:bc:e0:0b:c7:d3:fb:7b:d6:2e:96:0b:
dd:f5:69:79:7f:f4:aa:34:fc:f9:ca:b1:8a:15:f8:
ac:d2:09:df:d4:17:c6:e9:e1:c8:7e:7a:cd:1a:4a:
be:50:22:6a:04:55:b0:99:03:0d:dd:7e:b7:ce:83:
70:5a:4f:31:33:62:48:15:93:29:86:35:c7:55:73:
79:77:99:6e:d3:da:0c:70:31:23:20:04:c4:1b:bb:
6a:74:66:6c:69:48:0f:59:14:67:88:52:a6:d3:5d:
1f:e1:8d:52:95:23:86:51:40:9f:f1:b6:be:36:66:
d8:e8:b1:df:7f:d0:b9:a8:43:09:bc:2e:91:42:ad:
86:9a:b4:0e:02:f0:2e:5c:48:ea:ed:26:48:29:e5:
d9:34:ef:b9:34:42:60:d7:5f:32:2e:ab:7a:7b:4d:
19:c5:f0:ce:f8:96:d5:bf:c7:a9:39:55:e7:68:a8:
a3:cf:9f:8f:a7:a6:00:c7:44:f1:75:f9:3d:1c:1f:
61:15:83:90:8e:f6:27:5f:66:5d:b8:5e:e8:12:30:
ca:6d:65:b4:82:45:1d:4f:bb:cb:55:50:8a:88:fa:
70:03:d3:a3:bc:51:a5:c1:d5:dc:2b:b6:26:92:b2:
91:08:83:b3:73:29:9e:2a:c0:b1:5c:63:bf:cc:bc:
24:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B6:47:A7:7C:EE:81:4A:F4:04:92:84:90:F2:ED:FE:97:AE:09:66
X509v3 Authority Key Identifier:
keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/JLZHp3zugUr0BJKEkPLt_peuCWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.62.0/24
Signature Algorithm: sha256WithRSAEncryption
56:32:9e:0c:2a:30:9f:96:fd:c0:3f:9a:ec:a4:ea:86:45:d8:
c4:71:04:94:18:e2:1d:a3:cf:a3:0c:bf:08:ec:36:cc:b0:a2:
01:4b:be:76:23:93:fb:75:1b:7f:26:02:2b:fa:97:6b:71:77:
de:ea:f4:8f:94:60:fe:eb:15:89:c8:cf:10:f8:66:ad:e3:c6:
7a:7c:65:b2:10:8d:a9:53:d2:80:10:77:ff:c9:5f:f8:e1:89:
aa:54:33:ba:a8:6f:b1:2f:c5:e5:49:6c:52:41:7d:31:83:24:
2a:c5:50:cf:93:a1:06:b3:16:f6:b9:2e:a5:65:6d:b8:0e:9c:
94:99:32:d9:11:0b:56:f2:1d:3b:0d:ec:82:40:2c:dd:99:2e:
10:83:a8:af:da:e8:79:e2:b7:12:c4:01:0f:89:81:e7:6d:ea:
37:9c:88:da:aa:6e:38:d9:e6:1b:b1:47:8d:77:3f:c9:0b:b4:
8b:20:47:3f:44:1d:97:be:ad:b3:7f:56:7f:4e:c6:f4:0d:f7:
1b:b9:8f:11:a3:2c:bb:1a:8b:61:b1:00:7e:d6:58:74:6e:84:
85:71:89:30:9e:cc:ea:56:d8:76:6c:5e:0d:b7:30:a0:b2:cf:
ce:ac:eb:e3:96:50:5e:67:62:7d:9a:b7:4e:ff:df:dd:ee:a8:
49:90:d4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:04:36 2025 by rpki-client