Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/g_JNH7gOaAOj_YX1GFwMG5EgUSc.roa
File: g_JNH7gOaAOj_YX1GFwMG5EgUSc.roa (raw, json)
Hash identifier: eApqZboLkQTa+wGga+MD4NN9O/ClMD233tgVbWU1Quc=
Subject key identifier: 83:F2:4D:1F:B8:0E:68:03:A3:FD:85:F5:18:5C:0C:1B:91:20:51:27
Certificate issuer: /CN=ed457f969c0fec35b926d0f72a47dd44b8b300f5
Certificate serial: 01942826E373645617B4E92050FF71DDF728
Authority key identifier: ED:45:7F:96:9C:0F:EC:35:B9:26:D0:F7:2A:47:DD:44:B8:B3:00:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UV_lpwP7DW5JtD3KkfdRLizAPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/g_JNH7gOaAOj_YX1GFwMG5EgUSc.roa
Signing time: Thu 02 Jan 2025 17:53:44 +0000
ROA not before: Thu 02 Jan 2025 17:53:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34798
IP address blocks: 193.19.120.0/23 maxlen: 32
193.22.104.0/23 maxlen: 32
2a0f:c640::/48 maxlen: 64
2a0f:c640:1::/48 maxlen: 125
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:e3:73:64:56:17:b4:e9:20:50:ff:71:dd:f7:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed457f969c0fec35b926d0f72a47dd44b8b300f5
Validity
Not Before: Jan 2 17:53:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83f24d1fb80e6803a3fd85f5185c0c1b91205127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8b:ca:40:68:f1:58:e7:9c:5e:92:5e:37:3e:
a8:a3:3f:4d:bc:b4:15:eb:a8:a5:25:48:0a:29:a8:
46:31:0f:05:30:05:68:6f:d8:63:67:8b:77:d6:0e:
7c:63:d0:7a:be:db:b5:e4:ca:f6:3c:4a:b7:8a:20:
a0:e8:bd:ef:2d:d3:de:cc:70:eb:2e:99:e2:55:01:
aa:31:c2:58:67:96:76:49:ef:00:11:95:b2:c3:1d:
a0:5d:2e:a8:7a:84:af:41:61:f2:43:92:9a:2a:e5:
b2:bc:e0:fc:cf:e7:f4:df:a0:ec:2a:73:c2:ea:b2:
98:90:4f:d5:e6:73:1d:7e:70:59:f9:4f:e4:5a:58:
5a:7d:00:9c:45:19:29:af:e0:35:43:87:fc:83:06:
3c:59:c3:33:05:ee:d6:72:cd:ae:74:a0:c3:fd:29:
a8:93:fb:44:ac:84:0a:4c:36:a7:e3:d3:2c:a1:99:
d9:7d:2a:f2:10:9e:2e:2f:5d:59:a1:b4:16:d1:0b:
08:b5:3c:a9:92:72:28:91:d5:e7:ef:4f:25:19:95:
13:69:50:5a:94:57:89:5c:42:f8:ce:42:03:dc:68:
62:a3:4e:98:7e:5a:70:c6:63:9e:47:23:41:39:ee:
c8:df:c1:28:e5:ec:23:76:85:36:89:c7:4d:36:09:
9c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F2:4D:1F:B8:0E:68:03:A3:FD:85:F5:18:5C:0C:1B:91:20:51:27
X509v3 Authority Key Identifier:
keyid:ED:45:7F:96:9C:0F:EC:35:B9:26:D0:F7:2A:47:DD:44:B8:B3:00:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UV_lpwP7DW5JtD3KkfdRLizAPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/g_JNH7gOaAOj_YX1GFwMG5EgUSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.120.0/23
193.22.104.0/23
IPv6:
2a0f:c640::/47
Signature Algorithm: sha256WithRSAEncryption
39:ac:a6:12:07:f0:1c:bc:64:98:9c:5e:f0:55:30:f8:be:0b:
0b:e9:af:c1:19:76:68:3b:6e:62:cc:4f:39:c7:13:58:89:46:
5c:3a:74:59:1d:e7:fb:08:de:d0:98:d7:48:92:f8:dd:e3:11:
c8:b6:98:16:cc:50:0f:a1:7f:27:64:4c:48:70:b8:6e:7a:9f:
4d:fa:cd:e1:7b:06:57:30:bd:d1:67:40:f7:07:1b:02:b0:44:
8e:fe:24:ff:e2:2c:09:d3:e8:e0:01:a3:15:e0:84:07:bf:68:
6c:f8:ad:82:ed:59:19:89:37:d4:55:65:51:e2:3e:dd:64:70:
4e:12:df:c1:38:14:f3:10:92:7d:a7:16:c2:80:7b:8c:b2:f4:
3d:b0:6c:9d:2f:d7:e1:b8:75:aa:c9:b3:14:ec:30:64:ff:6a:
29:c6:43:3e:f0:e1:7f:59:11:2e:fb:65:d2:4c:2e:e9:81:1b:
60:88:ee:30:09:12:5c:82:79:e2:49:fb:b1:48:9b:94:cd:be:
ba:55:b8:ed:9f:8d:bd:1f:7b:f6:55:f7:34:05:23:57:25:b3:
d5:14:9b:84:15:08:e8:0c:48:63:97:6e:5f:75:03:da:4c:cd:
a2:21:ea:5e:1e:8b:25:df:4d:c0:4d:96:3a:e4:b5:72:36:9c:
26:4f:b6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:52 2025 by rpki-client