Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/0d814f-d9f7-4d68-8bfc-3a1c25d83105/1/Jgh7F8ME_k3i4v0_f5amvAiCDMA.roa
File: Jgh7F8ME_k3i4v0_f5amvAiCDMA.roa (raw, json)
Hash identifier: H4dw3sNiVTTACYUfCDFE7IVr4jTfQg5BKbt44FabzyA=
Subject key identifier: 26:08:7B:17:C3:04:FE:4D:E2:E2:FD:3F:7F:96:A6:BC:08:82:0C:C0
Certificate issuer: /CN=144ccce7224da99cbc5433da41cfd582fa60d3b6
Certificate serial: 0181F988A3DAC864DB3D7315062D689AB6F3
Authority key identifier: 14:4C:CC:E7:22:4D:A9:9C:BC:54:33:DA:41:CF:D5:82:FA:60:D3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FEzM5yJNqZy8VDPaQc_Vgvpg07Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/0d814f-d9f7-4d68-8bfc-3a1c25d83105/1/Jgh7F8ME_k3i4v0_f5amvAiCDMA.roa
Signing time: Wed 13 Jul 2022 21:48:10 +0000
ROA not before: Wed 13 Jul 2022 21:48:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 18779
IP address blocks: 2a11:8ec0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f9:88:a3:da:c8:64:db:3d:73:15:06:2d:68:9a:b6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=144ccce7224da99cbc5433da41cfd582fa60d3b6
Validity
Not Before: Jul 13 21:48:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26087b17c304fe4de2e2fd3f7f96a6bc08820cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ef:0a:56:b9:57:2a:07:e8:74:ae:7b:45:d6:
5e:ce:30:a1:e9:8f:b9:9e:b8:45:b7:56:66:41:04:
c9:67:f9:13:31:84:bf:e5:9a:db:11:a9:01:ff:31:
32:ae:2d:9e:7b:9c:b5:6e:97:a6:67:0b:27:d7:96:
3d:10:cb:f6:29:c2:a8:ab:7f:f2:d2:11:1c:9f:72:
35:35:5e:46:ee:7a:5d:ec:65:ac:46:75:c2:e9:e2:
63:c2:45:06:5e:47:b6:79:9c:73:d7:6c:40:8b:f4:
e3:da:5d:73:27:1e:bf:3e:4d:85:a5:a1:f6:6b:cc:
5f:10:62:ee:5e:9c:e5:e6:9b:2d:04:b9:61:50:ab:
97:ca:49:8f:a2:05:a4:e3:b5:04:5f:44:8b:38:0f:
fa:fc:d6:63:87:2d:4b:47:9a:20:ed:f6:f4:85:97:
85:cc:fe:4a:04:6a:6b:25:7f:31:4b:95:4e:a2:77:
80:b1:e1:33:57:15:b9:97:52:8e:ea:d4:30:2f:e5:
20:3d:d4:21:0b:87:a4:4c:a4:80:04:9f:4e:e6:79:
40:26:89:62:7b:93:b4:63:b4:79:13:30:4f:90:b3:
97:9e:81:31:4b:e3:17:e3:55:d4:38:3f:9c:93:d1:
cb:86:b0:4a:81:09:00:ef:c5:12:7e:0b:ee:4b:94:
34:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:08:7B:17:C3:04:FE:4D:E2:E2:FD:3F:7F:96:A6:BC:08:82:0C:C0
X509v3 Authority Key Identifier:
keyid:14:4C:CC:E7:22:4D:A9:9C:BC:54:33:DA:41:CF:D5:82:FA:60:D3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEzM5yJNqZy8VDPaQc_Vgvpg07Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/0d814f-d9f7-4d68-8bfc-3a1c25d83105/1/Jgh7F8ME_k3i4v0_f5amvAiCDMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/0d814f-d9f7-4d68-8bfc-3a1c25d83105/1/FEzM5yJNqZy8VDPaQc_Vgvpg07Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:8ec0::/29
Signature Algorithm: sha256WithRSAEncryption
03:7d:f8:1a:c3:55:47:97:47:21:16:e7:75:e5:c1:a7:e5:df:
c6:fc:fc:d3:1c:62:85:74:fe:2e:e5:2f:8e:b6:0a:a7:00:54:
5c:97:52:79:45:f4:60:27:88:87:f9:cd:04:bc:97:f3:92:7c:
53:bd:f9:3b:2e:c1:4c:89:06:0f:0c:b5:14:d3:31:55:16:b8:
44:93:b1:5c:c7:1e:8a:68:1a:bd:5e:6c:2d:ba:f3:d7:e9:b3:
30:a3:c6:92:33:9a:03:90:10:ca:69:bf:60:eb:25:fd:fc:a9:
db:62:4c:ce:eb:04:69:91:ea:a4:f3:e3:9d:5f:d6:d4:cb:56:
cf:a4:bc:df:95:58:82:ab:17:75:9d:3b:b9:7a:22:ff:6e:70:
0c:b3:6a:32:61:9c:07:54:91:ac:b0:e0:3d:32:6b:0a:65:d5:
09:43:5c:00:27:49:25:a0:cb:40:19:d8:f3:78:9a:62:28:d9:
3c:67:12:cb:0e:3e:ec:d1:ca:de:63:59:f9:5e:b8:7c:9f:9f:
b4:e3:6d:ab:24:08:97:7e:05:b6:40:6d:22:4a:2f:e5:a1:c0:
e3:7f:ba:2b:47:75:49:a4:70:f0:90:16:f7:ba:53:01:2a:13:
0b:70:05:b0:38:9c:3a:88:9c:f0:a1:00:fc:ca:b4:41:5b:38:
40:35:5b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:36:07 2025 by rpki-client