Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/JCxOuTIjLujlao5I9hrb5gQegGo.roa
File: JCxOuTIjLujlao5I9hrb5gQegGo.roa (raw, json)
Hash identifier: SDv0FBjSKSZUTMpJ38YSkos63s4YQ/vsV3WiI+cz/dg=
Subject key identifier: 24:2C:4E:B9:32:23:2E:E8:E5:6A:8E:48:F6:1A:DB:E6:04:1E:80:6A
Certificate issuer: /CN=29851f7ae610b1d0061500b343a4868f3256066e
Certificate serial: 0194221FFAF8A8B022F8471FB7C44C48346A
Authority key identifier: 29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/JCxOuTIjLujlao5I9hrb5gQegGo.roa
Signing time: Wed 01 Jan 2025 13:48:28 +0000
ROA not before: Wed 01 Jan 2025 13:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199851
IP address blocks: 91.220.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:fa:f8:a8:b0:22:f8:47:1f:b7:c4:4c:48:34:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29851f7ae610b1d0061500b343a4868f3256066e
Validity
Not Before: Jan 1 13:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=242c4eb932232ee8e56a8e48f61adbe6041e806a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:56:83:a5:90:be:e0:9e:e6:3d:a8:67:79:4e:
b0:ec:99:bb:48:34:6f:dd:c5:1f:66:48:dd:9d:5f:
0a:b9:a2:99:46:54:99:03:c5:6b:d0:14:f2:3c:74:
19:5a:ad:18:a9:26:b1:05:cd:e6:d7:cc:71:a9:93:
1f:22:b7:54:0a:61:ca:e3:1b:4f:fa:c2:f4:f0:34:
58:e7:a7:f2:7c:d1:73:4f:8c:96:5a:54:21:c0:32:
83:34:79:f7:10:6d:a6:f5:38:5a:fd:93:54:4a:ec:
ef:ef:6e:a9:c8:71:16:5c:8c:2e:97:37:88:af:eb:
98:01:c7:39:51:25:46:d3:3c:09:2f:a9:ef:59:c0:
42:42:5c:25:e2:e3:76:5a:a7:ff:3e:0a:56:99:05:
24:bf:7d:ce:66:a4:f1:0f:9d:a2:67:db:e0:d2:e7:
36:4a:7c:11:03:a2:9f:4b:da:5b:7b:7f:cb:48:a0:
97:38:74:b0:a2:8c:a8:12:91:54:fd:f3:b9:26:b4:
a9:aa:c7:6e:71:55:6f:f7:8c:74:2a:a3:59:fc:47:
ef:6e:52:92:4a:3b:63:06:55:6f:90:b2:e2:d4:ee:
7d:b5:6c:f8:fc:3b:11:30:d6:de:c0:6c:a1:80:6f:
86:17:34:39:6f:40:ef:2d:7a:a4:7a:17:de:36:19:
99:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2C:4E:B9:32:23:2E:E8:E5:6A:8E:48:F6:1A:DB:E6:04:1E:80:6A
X509v3 Authority Key Identifier:
keyid:29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/JCxOuTIjLujlao5I9hrb5gQegGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.186.0/24
Signature Algorithm: sha256WithRSAEncryption
91:6f:46:a3:45:b2:5a:e7:32:e6:07:b7:1c:7f:f5:2b:46:11:
52:c4:c7:53:d4:70:09:bb:a0:ff:a9:8a:13:50:69:83:8f:1d:
60:f3:b7:e6:78:75:a1:d9:d9:9f:a2:b2:f7:04:78:fa:51:cf:
9c:c0:87:d3:77:c4:b9:0d:27:25:e1:10:59:a6:28:78:1d:0c:
31:48:b4:4c:36:87:01:07:50:fa:f2:ef:3a:ee:de:ec:80:3a:
d2:71:7b:c2:b0:5a:18:0b:0a:47:c8:4d:7b:a1:c0:ca:cb:bc:
9e:c5:6d:dd:ef:e4:60:5c:22:be:c4:ed:0c:70:33:a1:38:ad:
56:17:35:5f:48:c6:e7:a2:7c:42:21:98:68:61:bd:a3:67:43:
a0:b4:d8:51:44:37:44:9e:29:8b:d2:63:ba:97:69:a8:48:32:
57:74:92:65:99:73:b0:46:5c:a9:e5:18:bc:fa:03:75:62:ab:
0c:d3:3d:95:af:e2:b5:34:88:f0:7c:6c:ab:c6:bf:b9:33:4b:
d8:0d:dc:ed:57:44:52:61:ff:9a:fe:c4:8d:d2:8c:43:95:d1:
7f:55:cd:bf:f4:b6:fa:d6:67:e4:ef:04:02:e5:e3:97:20:c7:
bb:04:f2:64:86:53:5b:62:af:e4:5f:12:2e:d1:01:fa:eb:45:
cd:03:60:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:00 2025 by rpki-client