Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/jzKy-bNbEooaDReNok2j2yv-pdI.roa
File: jzKy-bNbEooaDReNok2j2yv-pdI.roa (raw, json)
Hash identifier: GUiFogVUQmG0/pMsKlem+Qrlz+e50kXxDrB2fF+wH/s=
Subject key identifier: 8F:32:B2:F9:B3:5B:12:8A:1A:0D:17:8D:A2:4D:A3:DB:2B:FE:A5:D2
Certificate issuer: /CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Certificate serial: 01942826D73B46201DDFC2CE84C8BE311F67
Authority key identifier: A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/jzKy-bNbEooaDReNok2j2yv-pdI.roa
Signing time: Thu 02 Jan 2025 17:53:41 +0000
ROA not before: Thu 02 Jan 2025 17:53:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15404
IP address blocks: 185.226.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:d7:3b:46:20:1d:df:c2:ce:84:c8:be:31:1f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Validity
Not Before: Jan 2 17:53:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f32b2f9b35b128a1a0d178da24da3db2bfea5d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:37:5b:8d:4c:1a:b1:94:ab:47:b2:3e:40:0b:
e2:ca:7e:fb:96:3c:0f:96:8f:d1:da:be:63:75:7d:
26:bb:3f:81:10:6a:b8:00:e7:ff:fc:17:a8:10:98:
2f:39:ac:df:a8:a7:64:de:b0:83:4c:57:12:2a:c4:
d6:ff:b8:ac:71:8c:0d:68:e9:93:a9:d4:5e:a2:8e:
81:e9:e5:47:35:b9:d4:eb:19:b0:0d:43:5a:07:f8:
4a:62:b6:75:68:51:00:0e:c8:75:67:cd:76:89:16:
56:d4:92:30:1d:d3:ac:bb:72:e8:dd:31:eb:51:9d:
5b:5b:9c:bd:49:d2:3e:d5:cd:6e:32:53:5c:30:2d:
39:ed:6e:53:e9:d4:70:ec:57:37:05:b7:cf:6b:13:
6d:27:b7:df:ba:ac:24:78:68:94:10:a6:a6:25:ac:
06:6a:1f:f3:16:d5:e8:2d:da:30:0c:5a:f1:30:ca:
03:66:22:ec:de:6a:ed:5b:29:6a:33:9d:dc:b9:84:
8a:ce:41:56:16:b8:61:7f:cb:49:d8:62:e5:78:82:
bf:42:09:80:fd:db:4e:7a:37:37:fe:19:b8:89:26:
1c:1e:b5:d1:83:fe:05:e2:81:9e:99:c6:9e:c4:6a:
b8:6a:b7:d2:43:cd:42:2f:42:8d:8b:8e:c7:e2:e3:
d0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:32:B2:F9:B3:5B:12:8A:1A:0D:17:8D:A2:4D:A3:DB:2B:FE:A5:D2
X509v3 Authority Key Identifier:
keyid:A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/jzKy-bNbEooaDReNok2j2yv-pdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.242.0/24
Signature Algorithm: sha256WithRSAEncryption
85:82:40:bb:ac:25:54:53:c4:27:6c:52:d6:04:d8:e9:e8:4e:
e6:98:bd:1f:5b:d5:0b:2c:79:3d:be:94:90:3e:c3:c4:0c:16:
7a:a3:1b:45:1d:d0:42:33:c7:5d:fa:6f:c3:71:98:32:c3:d3:
22:d6:4b:85:e8:7e:b7:db:b6:bf:b2:24:f6:8f:70:14:bf:4e:
ca:d1:87:50:ba:a1:77:32:06:33:8f:a0:6e:cb:6b:9b:35:f9:
f2:a0:eb:bf:7f:35:65:d9:4f:1e:ff:bb:40:f7:b7:5c:ea:c8:
91:63:63:84:cc:50:b6:22:63:fd:29:80:8b:b7:c1:1d:16:e9:
ee:1b:55:69:d0:a5:21:db:f0:b7:3e:97:07:70:3f:bd:66:ea:
73:f7:c4:c7:7b:4b:5d:07:78:11:e3:bd:90:92:47:ad:82:57:
5e:c8:4c:cc:d8:0c:3e:3d:77:f8:48:ec:28:48:3b:18:fd:9d:
b9:40:b7:f4:c2:a5:29:87:d3:dc:80:b2:fe:a0:6c:98:3c:19:
4f:e4:50:2c:f7:1e:b7:28:f4:47:f5:8e:92:5c:ab:c9:ff:38:
ee:a2:81:fc:3b:b9:80:0a:96:ac:be:1d:d3:f8:a7:a7:e0:0a:
59:d3:9d:91:6c:8c:fd:e9:b1:a9:15:a2:a4:d5:52:94:66:23:
0e:3c:89:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:05:06 2025 by rpki-client