Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/638306-4db3-4aac-a2eb-2ecd41a73baf/1/JvFAmbDNMQPuHJFcv-GGj8TUddc.roa
File: JvFAmbDNMQPuHJFcv-GGj8TUddc.roa (raw, json)
Hash identifier: SA3mkCBubty50L/nVcm5BQS/jBArZXMCiT9AuwnuzyM=
Subject key identifier: 26:F1:40:99:B0:CD:31:03:EE:1C:91:5C:BF:E1:86:8F:C4:D4:75:D7
Certificate issuer: /CN=8310a913896e85e48d5c09d2e406647e71afd1e8
Certificate serial: 01865999731339142846CFD84AAD624BE611
Authority key identifier: 83:10:A9:13:89:6E:85:E4:8D:5C:09:D2:E4:06:64:7E:71:AF:D1:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gxCpE4luheSNXAnS5AZkfnGv0eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/638306-4db3-4aac-a2eb-2ecd41a73baf/1/JvFAmbDNMQPuHJFcv-GGj8TUddc.roa
Signing time: Thu 16 Feb 2023 09:41:14 +0000
ROA not before: Thu 16 Feb 2023 09:41:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208911
IP address blocks: 176.97.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:59:99:73:13:39:14:28:46:cf:d8:4a:ad:62:4b:e6:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8310a913896e85e48d5c09d2e406647e71afd1e8
Validity
Not Before: Feb 16 09:41:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26f14099b0cd3103ee1c915cbfe1868fc4d475d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:97:d6:ac:b7:91:53:5e:03:de:ec:7e:6c:02:
20:5f:49:c5:8a:d6:14:9d:7f:f1:e0:a2:86:64:5f:
70:15:54:05:d8:62:48:db:10:40:df:38:2a:0e:cb:
52:d6:5b:91:6f:22:37:27:7d:e1:7f:1e:49:04:5b:
88:7f:fe:0c:e7:58:67:bc:27:26:26:26:0e:81:4e:
d8:9c:72:34:9f:1c:42:dd:37:39:8d:80:19:be:69:
5e:71:94:54:d1:2c:5e:66:19:9c:93:d7:c4:64:cc:
e8:b2:10:d4:51:1f:08:a6:f1:36:32:52:15:0c:e5:
88:67:aa:18:26:96:71:bc:e5:d8:eb:21:b5:8e:4e:
e8:2d:bf:02:d6:9a:8f:22:82:d1:61:59:69:f0:6f:
48:bd:68:15:40:bb:1c:f3:0e:1c:a9:d4:5a:fa:1b:
3a:ae:67:06:d2:42:f3:5b:d6:81:14:b0:1e:b8:72:
a4:f8:4d:57:8b:82:73:af:30:85:6f:6e:9f:9f:80:
13:06:93:00:7e:07:93:f4:a4:4f:49:fe:c2:70:d9:
74:1d:31:6b:8d:c8:77:54:55:7a:2a:28:87:59:d8:
61:60:5b:82:6a:70:12:af:1f:58:aa:25:7d:a6:35:
a1:87:26:da:ea:46:b4:94:9a:c3:21:39:15:39:16:
d2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F1:40:99:B0:CD:31:03:EE:1C:91:5C:BF:E1:86:8F:C4:D4:75:D7
X509v3 Authority Key Identifier:
keyid:83:10:A9:13:89:6E:85:E4:8D:5C:09:D2:E4:06:64:7E:71:AF:D1:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gxCpE4luheSNXAnS5AZkfnGv0eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/638306-4db3-4aac-a2eb-2ecd41a73baf/1/JvFAmbDNMQPuHJFcv-GGj8TUddc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/638306-4db3-4aac-a2eb-2ecd41a73baf/1/gxCpE4luheSNXAnS5AZkfnGv0eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.220.0/24
Signature Algorithm: sha256WithRSAEncryption
05:17:ef:93:da:61:39:d7:d5:65:04:52:a5:f0:45:68:4c:c3:
33:fc:33:d8:21:6a:85:8e:55:62:b5:df:4d:2d:7d:e1:95:82:
56:53:24:7d:9e:3b:61:58:be:ff:69:b3:b4:51:7b:33:c4:28:
a3:8e:87:71:cf:27:07:6a:c7:29:dd:19:4f:48:63:c8:c6:0e:
cb:21:62:34:c2:45:0a:44:66:f5:24:07:24:00:18:75:22:19:
82:78:0a:0f:2c:81:c0:6b:23:bb:19:39:c7:c7:b7:71:aa:b7:
ec:29:5b:a9:3b:7e:bc:70:2f:c3:83:f2:14:39:dc:fe:50:b6:
1b:33:f8:1e:0e:db:8b:db:d0:62:76:61:dd:87:84:72:57:ba:
4b:4d:d6:51:23:89:4a:bf:bb:5f:6c:c4:77:85:5b:0f:e7:48:
06:fd:02:8b:ca:b0:f7:b3:45:11:ee:96:9d:be:d4:42:85:e5:
94:0f:9f:85:75:63:f7:19:0c:5c:86:5f:44:62:12:41:53:c9:
e2:9a:4e:68:12:15:38:6f:8d:60:ea:d5:de:8c:3a:8c:95:60:
a1:06:18:0a:a3:43:75:e8:60:b4:3e:a7:d6:a2:ea:2a:96:66:
03:87:5e:e6:04:4b:ac:87:a7:aa:90:9b:b4:15:8e:7a:95:8d:
17:04:d7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:58:00 2025 by rpki-client