Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/JRT-ehjK87EWSX2wN_VxdPNgZVU.roa
File: JRT-ehjK87EWSX2wN_VxdPNgZVU.roa (raw, json)
Hash identifier: FFbMq3Jl0t/JwkKVVNHldSFfVrz4m+b2CW8bGskb98A=
Subject key identifier: 25:14:FE:7A:18:CA:F3:B1:16:49:7D:B0:37:F5:71:74:F3:60:65:55
Certificate issuer: /CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Certificate serial: 0194266C1FAD31797F1D7688EF5EEF68222F
Authority key identifier: DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/JRT-ehjK87EWSX2wN_VxdPNgZVU.roa
Signing time: Thu 02 Jan 2025 09:50:07 +0000
ROA not before: Thu 02 Jan 2025 09:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60435
IP address blocks: 185.178.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:1f:ad:31:79:7f:1d:76:88:ef:5e:ef:68:22:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Validity
Not Before: Jan 2 09:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2514fe7a18caf3b116497db037f57174f3606555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a1:25:f5:d1:b7:22:56:b0:65:86:11:de:e0:
7c:54:32:27:15:f2:64:1d:4e:c6:17:b8:87:8d:42:
1a:11:e3:d1:37:e2:60:85:93:3e:37:e6:46:a1:94:
5c:bb:00:1f:9a:f2:5f:fa:b1:bb:cc:8a:3e:ea:16:
b1:f1:28:95:32:03:94:9c:5e:85:95:e9:98:f5:64:
76:c0:1c:af:b3:59:64:c3:ed:f5:72:34:dd:db:df:
3e:2b:bc:e0:98:e5:2c:d5:99:5c:e0:ae:ca:86:e8:
05:af:87:c2:b6:13:0b:d1:7a:53:dd:41:c0:d8:2a:
f8:73:50:5d:72:5a:c7:bb:37:fd:72:52:b7:80:36:
45:46:9a:b6:46:21:88:96:09:5f:73:76:40:84:92:
32:4a:26:e9:ed:02:4d:75:5d:64:97:aa:21:00:0c:
d5:0f:f2:92:b7:32:70:86:f5:5d:ec:91:d5:0a:c3:
0d:10:fc:3e:dc:ac:ab:c9:ea:48:a4:9b:19:f8:84:
55:ce:d2:f2:91:3d:52:de:76:71:b9:b3:2d:55:9a:
ab:7a:52:a0:20:7c:af:3a:7c:d8:c8:f6:d8:6d:27:
f9:07:b7:ac:83:8d:0c:11:8c:57:a0:35:02:36:9b:
28:9d:0c:6c:42:21:f9:45:cb:41:3d:b7:73:4c:bd:
b0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:14:FE:7A:18:CA:F3:B1:16:49:7D:B0:37:F5:71:74:F3:60:65:55
X509v3 Authority Key Identifier:
keyid:DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/JRT-ehjK87EWSX2wN_VxdPNgZVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.224.0/24
Signature Algorithm: sha256WithRSAEncryption
20:74:9b:7f:71:32:fa:f8:41:a3:6a:32:dd:1b:c8:42:17:8d:
08:5b:9e:df:83:20:5f:a3:84:89:31:e8:07:ba:4a:5a:5b:a6:
35:a3:ce:8e:2f:4a:44:9c:c4:c2:8c:c8:55:0e:5c:ec:d5:7e:
f6:48:8e:ac:39:12:05:e6:18:fa:7c:4b:8f:50:a0:31:1a:f2:
71:08:41:11:6e:b2:fd:7f:50:76:7e:b5:a5:b9:67:ab:48:d0:
d1:f4:ac:fd:45:dc:2a:47:ae:a3:7c:f3:8a:db:ba:1e:12:63:
76:f7:03:05:72:12:6d:1c:05:31:2e:60:63:88:9d:de:6f:85:
5b:51:1b:0d:48:2c:70:b4:15:5a:ef:90:f4:46:05:6f:a6:a6:
4a:d7:f3:39:7f:84:5c:a1:fe:25:11:e5:fc:da:45:00:73:5f:
b9:70:b5:61:7e:5d:5f:66:1c:16:4b:36:75:eb:06:7e:5d:3e:
ef:96:ac:7b:4c:3e:74:7a:35:51:af:21:15:b6:aa:ea:42:6e:
7f:00:b3:c7:e7:28:3d:67:d8:f2:51:3b:56:b9:96:74:3c:33:
0e:99:6e:65:37:c6:70:9b:0c:40:4e:bb:22:5f:af:d2:4c:8d:
00:99:91:ee:c9:82:0a:23:15:77:bc:d4:08:a9:ab:8a:23:b3:
d6:5f:97:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:06:00 2025 by rpki-client