Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/9685f8-1dfe-4954-8c39-bc8f12f92c73/1/jZu0JHSUqpSi35wfs5tEGlyztns.roa
File: jZu0JHSUqpSi35wfs5tEGlyztns.roa (raw, json)
Hash identifier: 6Irm/DJ8NXFX5DcGNwVppEcOxPaQgYW9+8p++6vmDSI=
Subject key identifier: 8D:9B:B4:24:74:94:AA:94:A2:DF:9C:1F:B3:9B:44:1A:5C:B3:B6:7B
Certificate issuer: /CN=bc3da566bc7e93a2622f468bcbe63f4faea57133
Certificate serial: 01856EB91E44E9491148DE174DCDC45692FD
Authority key identifier: BC:3D:A5:66:BC:7E:93:A2:62:2F:46:8B:CB:E6:3F:4F:AE:A5:71:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vD2lZrx-k6JiL0aLy-Y_T66lcTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/9685f8-1dfe-4954-8c39-bc8f12f92c73/1/jZu0JHSUqpSi35wfs5tEGlyztns.roa
Signing time: Sun 01 Jan 2023 19:05:03 +0000
ROA not before: Sun 01 Jan 2023 19:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35470
IP address blocks: 194.0.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b9:1e:44:e9:49:11:48:de:17:4d:cd:c4:56:92:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc3da566bc7e93a2622f468bcbe63f4faea57133
Validity
Not Before: Jan 1 19:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d9bb4247494aa94a2df9c1fb39b441a5cb3b67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0c:10:97:a0:7b:b6:77:ab:35:4c:c4:41:c1:
8e:15:d4:1a:41:19:ab:60:e3:10:f7:d6:04:fe:6b:
92:71:34:05:05:3d:72:73:d7:79:e8:e2:8e:06:93:
b4:bf:27:f1:86:cb:bf:2e:9d:1b:5a:da:62:75:49:
a9:63:4b:62:eb:65:e3:d2:88:e5:a7:d6:d8:13:3a:
13:09:2b:db:8f:a5:cd:eb:00:54:c8:bd:e4:a0:c8:
44:a1:8b:d1:87:a3:bd:46:ac:22:f6:75:4f:a5:f9:
54:60:d1:90:9f:2a:27:40:ca:f6:fb:ba:92:00:5b:
57:8f:7c:0c:f3:69:3e:69:a8:49:7b:b8:a3:7a:69:
40:ff:fa:91:ca:80:08:a8:36:3a:d1:72:73:85:81:
b0:aa:4e:76:2b:16:ec:d8:e5:7a:6a:a4:cc:0f:c9:
5b:c0:cc:73:d2:c3:26:28:57:89:62:ee:fd:d0:0b:
22:f6:71:92:05:ae:e2:8b:9d:1f:a1:69:e3:5b:eb:
86:d6:f5:ce:0f:ab:18:c4:50:7b:98:25:24:43:d0:
7a:4e:4f:62:c0:74:75:b9:0a:0f:bc:db:0b:47:3e:
b4:d3:7f:bd:2f:78:8d:c3:5b:cd:42:2f:81:bc:bb:
14:cb:e0:1a:47:14:60:49:3d:9c:30:47:02:be:03:
dc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9B:B4:24:74:94:AA:94:A2:DF:9C:1F:B3:9B:44:1A:5C:B3:B6:7B
X509v3 Authority Key Identifier:
keyid:BC:3D:A5:66:BC:7E:93:A2:62:2F:46:8B:CB:E6:3F:4F:AE:A5:71:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vD2lZrx-k6JiL0aLy-Y_T66lcTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/9685f8-1dfe-4954-8c39-bc8f12f92c73/1/jZu0JHSUqpSi35wfs5tEGlyztns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/9685f8-1dfe-4954-8c39-bc8f12f92c73/1/vD2lZrx-k6JiL0aLy-Y_T66lcTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.234.0/24
Signature Algorithm: sha256WithRSAEncryption
57:db:74:25:4c:ef:ad:1c:12:56:8a:4b:71:bf:fb:ec:ff:1e:
bc:97:66:0b:07:5e:53:36:d3:56:fb:66:33:fd:55:13:d5:35:
cf:e8:4d:b4:de:f3:9f:19:67:5a:19:ac:a9:0e:4d:d8:eb:6a:
0e:22:98:17:8a:3a:b1:f8:fd:99:d9:58:e5:dc:4e:a5:16:03:
f8:92:aa:33:c1:46:4c:b9:35:00:31:04:23:73:1b:52:f1:fc:
e4:90:62:df:66:ab:34:e1:c3:53:16:c8:f5:1e:76:54:04:dd:
f1:71:ff:73:a7:1e:1b:ae:1c:25:15:37:c5:f4:9f:c1:6a:5a:
be:1e:bb:52:ec:31:4a:65:ae:c9:82:02:2a:14:83:1e:50:32:
9e:fc:ab:6c:a5:10:c9:22:9c:a4:07:8b:0a:98:c3:92:23:0a:
db:d4:7c:2f:0b:96:d7:2c:d0:b9:d6:38:54:40:6d:3f:be:e4:
7f:1b:12:b1:9c:09:78:2c:c0:2d:75:e8:5f:7e:c4:3d:9b:88:
b5:d3:4b:10:00:28:41:64:2c:d3:40:10:57:a7:35:c9:eb:2e:
39:7c:51:67:e6:09:3a:cd:b5:62:82:1b:e4:2e:2c:1e:da:d6:
81:f1:83:d2:16:77:cb:8d:54:6e:5e:25:39:d0:4e:3b:01:c8:
f0:7e:78:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:16 2025 by rpki-client