Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/JAqvgN4KkkWNoe1vrMrVsDBqmfE.roa
File: JAqvgN4KkkWNoe1vrMrVsDBqmfE.roa (raw, json)
Hash identifier: QG1yL1zcYsT8fBEaDP08SL61cVF4WfYEKH5BAPzFTBE=
Subject key identifier: 24:0A:AF:80:DE:0A:92:45:8D:A1:ED:6F:AC:CA:D5:B0:30:6A:99:F1
Certificate issuer: /CN=1375aa5e37c42f7deb7f3b0e9670bf59a2aca6b5
Certificate serial: 0194258F32659169704FD637DDDFE9D76B5E
Authority key identifier: 13:75:AA:5E:37:C4:2F:7D:EB:7F:3B:0E:96:70:BF:59:A2:AC:A6:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/JAqvgN4KkkWNoe1vrMrVsDBqmfE.roa
Signing time: Thu 02 Jan 2025 05:48:49 +0000
ROA not before: Thu 02 Jan 2025 05:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214754
IP address blocks: 195.26.234.0/23 maxlen: 24
2a0a:9940::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:32:65:91:69:70:4f:d6:37:dd:df:e9:d7:6b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1375aa5e37c42f7deb7f3b0e9670bf59a2aca6b5
Validity
Not Before: Jan 2 05:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=240aaf80de0a92458da1ed6faccad5b0306a99f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:60:1d:5e:e3:93:db:fa:66:f3:aa:38:ae:b5:
c7:b2:99:f2:e1:97:e1:58:f3:38:1e:10:58:ea:4f:
ec:a3:78:17:5f:45:28:d2:f7:62:04:60:18:97:b0:
ee:4e:cd:82:fb:5c:1d:4f:14:db:4e:3d:9b:45:e7:
1c:71:be:dc:e5:b7:6c:a7:7f:e9:b7:2d:eb:2d:88:
fa:56:21:da:a7:1a:13:45:cf:02:c7:bf:ab:47:91:
cb:da:dd:15:2e:6f:bd:90:53:db:09:73:81:13:0f:
28:7d:d8:6b:05:9a:71:3a:ca:cd:8a:08:22:a0:2d:
85:24:c2:28:f7:b5:61:0b:81:00:04:d2:d7:9e:de:
9e:03:fe:34:bf:d2:d8:d9:bd:53:1c:73:04:14:2e:
b5:b7:fc:74:95:14:53:8a:7b:88:a0:24:a5:32:82:
e7:4b:3c:24:5c:79:f9:0e:90:92:45:d8:3f:0a:33:
be:fc:0f:a2:33:6f:bc:93:07:9f:d8:fa:75:e2:de:
61:4d:e2:6e:2e:b8:d7:16:2a:54:24:2c:76:a6:cc:
5e:fe:3c:4a:39:63:69:92:79:fb:f0:fa:34:03:89:
1b:d1:48:9d:2d:83:61:9a:8b:c8:2c:c5:e3:bc:20:
a6:c1:95:13:f1:4f:4e:3c:4f:6a:83:a6:c1:a2:52:
4c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0A:AF:80:DE:0A:92:45:8D:A1:ED:6F:AC:CA:D5:B0:30:6A:99:F1
X509v3 Authority Key Identifier:
keyid:13:75:AA:5E:37:C4:2F:7D:EB:7F:3B:0E:96:70:BF:59:A2:AC:A6:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/JAqvgN4KkkWNoe1vrMrVsDBqmfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.26.234.0/23
IPv6:
2a0a:9940::/29
Signature Algorithm: sha256WithRSAEncryption
ab:1e:31:a0:33:dc:e0:01:08:bd:0d:4f:a5:51:71:3a:fc:c0:
d9:2b:13:05:0d:a3:bd:e6:e6:68:d0:13:ec:9c:0d:42:10:a3:
4a:5c:c9:b1:17:8e:23:be:8c:a5:4d:bd:04:b5:69:34:00:cd:
4a:75:99:26:ae:5e:40:f6:8b:e9:00:e7:03:b9:4f:95:42:92:
fb:61:00:96:c6:00:1a:39:84:78:5a:d5:b0:80:d8:7f:18:79:
01:77:94:48:89:b6:d9:c7:fc:48:b6:f2:52:ab:35:ff:fd:50:
98:5b:8d:48:20:39:b8:9c:bd:09:fd:5f:85:0c:2f:4c:14:ad:
56:f8:7c:50:5f:a4:b3:24:f4:00:b3:ae:4a:bf:5e:42:f1:dc:
b0:1b:61:e9:39:2d:2a:d7:fb:d9:9a:59:eb:57:b9:cc:91:52:
89:6f:bc:2b:2c:77:9c:03:2e:b2:1f:2f:5c:cb:46:4e:a5:59:
d1:dc:bd:48:a2:da:27:f4:3f:23:6f:67:e5:4f:17:bf:a8:7a:
89:7a:18:1b:7f:2b:3c:3b:77:3f:2a:43:ee:10:ca:db:a1:ae:
bf:71:7a:f0:c2:fc:1b:9b:68:32:a4:98:39:43:84:d2:15:90:
57:38:bb:ed:fb:61:83:92:a9:71:a3:ee:dd:88:db:75:a8:c9:
95:53:0e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:36 2025 by rpki-client