Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/jgkRdzS5JB9PWD_oFwdbOGdk6x4.roa
File: jgkRdzS5JB9PWD_oFwdbOGdk6x4.roa (raw, json)
Hash identifier: pk7j7TBSzPnMDTNnJGvz2FoxttkV1MmZfvsZ3NtTMUg=
Subject key identifier: 8E:09:11:77:34:B9:24:1F:4F:58:3F:E8:17:07:5B:38:67:64:EB:1E
Certificate issuer: /CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Certificate serial: 0194222025D122B7B777DBE0C93021615EDE
Authority key identifier: FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/jgkRdzS5JB9PWD_oFwdbOGdk6x4.roa
Signing time: Wed 01 Jan 2025 13:48:39 +0000
ROA not before: Wed 01 Jan 2025 13:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8947
IP address blocks: 37.140.208.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:25:d1:22:b7:b7:77:db:e0:c9:30:21:61:5e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Validity
Not Before: Jan 1 13:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e09117734b9241f4f583fe817075b386764eb1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d1:d0:58:2a:59:c5:47:4e:60:31:71:3a:69:
53:b5:ce:b6:ff:13:57:9d:5a:7b:e2:dd:c5:36:64:
6b:c2:7b:f3:84:cb:5f:be:29:61:29:83:97:5d:de:
1a:bd:a7:ad:1f:3c:f0:e2:ed:c1:66:b0:46:13:e3:
a9:3c:bc:75:43:2b:da:9b:9e:7d:da:d2:1f:b0:55:
7b:7d:76:42:01:a3:91:d8:a3:78:7d:61:e3:51:74:
bb:d5:3a:bb:fd:15:19:c7:b8:11:aa:6d:7d:47:68:
d4:c6:7d:13:41:59:ae:dd:1d:6d:1c:af:e1:76:4c:
28:f9:b2:4e:ac:42:73:11:ca:5e:a9:be:93:92:12:
4f:3a:69:dd:26:b7:f3:01:cd:ce:09:ba:ae:1d:d0:
99:a9:92:fc:78:48:9a:56:ef:96:87:e9:09:e4:06:
04:ec:41:5d:6f:74:28:f4:e5:d1:5e:69:38:1a:e1:
ef:00:5b:6a:d8:2d:cf:7d:17:8c:b1:26:3b:9d:5f:
8e:54:95:6f:6e:64:0d:ad:d1:1c:b6:4a:cd:bb:9a:
e4:8e:04:82:16:f3:2d:79:67:22:b8:3b:a9:70:45:
a0:75:c8:59:d8:e3:6b:38:48:67:d6:03:e8:59:fd:
d8:43:4e:3f:08:73:36:e7:be:f7:9e:07:f3:a6:ce:
0c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:09:11:77:34:B9:24:1F:4F:58:3F:E8:17:07:5B:38:67:64:EB:1E
X509v3 Authority Key Identifier:
keyid:FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/jgkRdzS5JB9PWD_oFwdbOGdk6x4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.208.0/23
Signature Algorithm: sha256WithRSAEncryption
06:ea:35:53:f9:14:d1:8e:3a:4a:42:09:e0:58:bc:c1:9f:57:
c2:fa:73:bc:25:67:ff:c6:a2:c2:eb:1a:2b:c7:e9:8b:fb:fa:
5d:d0:1c:58:b8:c9:67:e0:99:e9:a3:65:2a:6b:d0:58:c8:30:
10:3a:93:49:4f:aa:ea:93:18:0b:68:9f:ac:77:5d:2c:cf:e2:
7d:93:aa:e9:8b:25:93:56:a8:b9:74:e9:5a:e8:0e:51:0f:41:
b2:12:14:0f:4d:40:da:91:99:8d:a1:c1:8c:c0:2c:31:d2:85:
01:c0:34:c5:c7:80:60:d3:bd:e8:d4:12:86:e4:34:22:07:a1:
38:81:cf:a3:ef:3c:d6:a3:ac:7c:d4:e2:2c:b1:c0:70:ba:88:
a9:e9:45:6d:a3:e0:30:c8:87:5f:44:55:17:d2:55:f9:96:0a:
3a:0b:ed:56:aa:49:ab:e9:b0:9b:a9:27:57:f4:1b:b4:85:a8:
e1:b4:de:9c:34:3f:74:17:c4:13:63:9b:18:0a:c4:1a:d6:d0:
0e:08:0b:52:5b:63:58:8c:c1:58:71:f4:26:c7:2c:1c:52:19:
5b:f4:a6:ad:85:b3:6b:f4:ed:35:2f:e1:86:fc:f5:22:e1:1d:
bb:6d:c4:ee:6c:4e:c3:ee:b7:f4:2c:5e:d6:af:cf:cb:4f:82:
6c:a9:c3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:13:06 2025 by rpki-client