Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/JPDyuwyAVoJM2Iyx8CZ_ZB6RHCU.roa
File: JPDyuwyAVoJM2Iyx8CZ_ZB6RHCU.roa (raw, json)
Hash identifier: QuCzbV3mXtMMCr1dPTRw5qrXtwuzqj3+jKGWKorTdEc=
Subject key identifier: 24:F0:F2:BB:0C:80:56:82:4C:D8:8C:B1:F0:26:7F:64:1E:91:1C:25
Certificate issuer: /CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Certificate serial: 019493794910ABDF6DFE8A5721CB1664240B
Authority key identifier: C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/JPDyuwyAVoJM2Iyx8CZ_ZB6RHCU.roa
Signing time: Thu 23 Jan 2025 14:03:06 +0000
ROA not before: Thu 23 Jan 2025 14:03:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216321
IP address blocks: 176.10.89.0/24 maxlen: 24
202.181.204.0/24 maxlen: 24
2a13:d8c0::/29 maxlen: 48
2a13:d8c0::/32 maxlen: 32
2a13:d8c1::/32 maxlen: 32
2a13:d8c1:ce00::/40 maxlen: 40
2a13:d8c1:fe00::/40 maxlen: 40
2a13:d8c2::/32 maxlen: 32
2a13:d8c3::/32 maxlen: 32
2a13:d8c4::/32 maxlen: 32
2a13:d8c5::/32 maxlen: 32
2a13:d8c6::/32 maxlen: 32
2a13:d8c7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:93:79:49:10:ab:df:6d:fe:8a:57:21:cb:16:64:24:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Validity
Not Before: Jan 23 14:03:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24f0f2bb0c8056824cd88cb1f0267f641e911c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:23:f7:ee:b4:db:9f:43:cc:20:dd:5f:d9:f1:
c7:d3:54:50:7c:98:be:12:36:da:2e:29:30:f8:64:
ff:f0:ba:37:a8:f9:09:ed:e5:2f:95:a6:49:e4:98:
bf:c1:c8:ac:d1:91:3e:da:1e:ce:18:bd:63:c8:7f:
1c:8f:6b:b1:39:4b:f2:65:1c:6c:af:4e:e3:29:25:
b0:bd:1c:85:7d:0b:1d:6f:29:6e:ea:41:08:47:20:
66:07:7e:44:4c:a1:7d:c3:ce:c5:7e:d3:ac:12:25:
75:4c:22:2f:37:f5:12:f0:12:61:34:d1:c5:d6:1a:
44:c8:5f:d2:a9:f3:62:26:c6:82:b6:3f:23:fd:a5:
11:d1:8d:ea:ea:23:80:a3:49:b3:dc:56:81:60:4e:
65:1f:e9:16:d7:cb:e8:c3:a2:6c:59:6f:08:23:af:
b2:ba:9a:77:ca:34:c9:14:55:e1:ed:10:5d:b4:4e:
93:cc:d3:72:2f:8e:b6:a1:de:77:0b:0f:48:6b:8a:
b9:4b:13:4c:08:55:b9:c5:2d:1c:30:0d:20:69:e9:
c5:91:e6:29:17:d6:a5:4c:13:1a:8b:7b:c3:4a:5b:
5a:d5:ab:15:79:7e:89:e6:f3:d4:c7:bb:8c:50:97:
f9:f1:88:b4:fd:3f:68:f7:d8:d2:af:1d:92:a6:7d:
1f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F0:F2:BB:0C:80:56:82:4C:D8:8C:B1:F0:26:7F:64:1E:91:1C:25
X509v3 Authority Key Identifier:
keyid:C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/JPDyuwyAVoJM2Iyx8CZ_ZB6RHCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.10.89.0/24
202.181.204.0/24
IPv6:
2a13:d8c0::/29
Signature Algorithm: sha256WithRSAEncryption
3e:cd:47:b0:b9:fd:6c:3a:6d:b2:82:5d:d1:37:8e:5d:59:5c:
28:04:39:c3:e0:92:ec:06:a9:05:02:1f:db:4b:a8:cd:92:64:
d3:e3:0d:c4:4e:3c:5c:55:38:61:0b:05:fe:d6:cf:1f:a7:4f:
d0:b0:a9:6a:5e:bc:ce:69:7f:1b:39:cc:e0:05:5f:a1:ee:d4:
01:10:27:3c:f3:9d:0b:8f:97:4c:85:35:fd:dd:eb:88:fc:a3:
51:d7:3a:a6:3c:24:9a:fd:0f:fd:b7:46:d9:52:cc:a5:96:25:
25:c5:b9:74:70:ec:49:f3:75:54:45:33:28:9f:1c:e1:6a:28:
dc:91:03:06:e6:2f:59:c2:b4:e9:c4:b5:68:cb:c6:70:f7:c7:
9c:5a:96:68:15:19:e8:e4:07:8b:ad:46:16:ee:58:91:73:ea:
e0:c7:af:e7:dc:19:f3:5d:6f:d2:24:63:cf:c3:e0:f3:a6:b8:
b5:ab:73:e2:0e:6e:69:c9:ca:94:f4:41:4e:da:c3:d2:79:fb:
b4:69:6d:80:53:0c:1a:75:2b:aa:d3:2e:2d:8c:45:4d:cd:52:
fb:55:d6:82:5c:fa:b5:d2:f4:cf:b6:37:c3:cb:e1:88:3a:49:
50:a2:1c:0e:ea:64:b5:ca:e0:46:6a:c1:a2:a2:c6:ef:53:f8:
f8:92:5e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:26 2025 by rpki-client