Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/j3GxUQVvGAKfDgWfaKuT57OF-I4.roa
File: j3GxUQVvGAKfDgWfaKuT57OF-I4.roa (raw, json)
Hash identifier: olmoCtC+kEAMzce4RKHWTmDZ2h30/hw/6BpWr6L7zlY=
Subject key identifier: 8F:71:B1:51:05:6F:18:02:9F:0E:05:9F:68:AB:93:E7:B3:85:F8:8E
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0192D37C137E3F07DA5227DA969A2ED78D2D
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/j3GxUQVvGAKfDgWfaKuT57OF-I4.roa
Signing time: Mon 28 Oct 2024 14:16:16 +0000
ROA not before: Mon 28 Oct 2024 14:16:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13335
IP address blocks: 150.241.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d3:7c:13:7e:3f:07:da:52:27:da:96:9a:2e:d7:8d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 28 14:16:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f71b151056f18029f0e059f68ab93e7b385f88e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:45:6b:e4:04:e2:6e:67:0a:cf:5c:8d:cd:2c:
69:db:5e:2a:79:5d:33:9e:e9:41:ba:27:b5:68:47:
13:f2:32:5b:f2:47:2f:7a:49:34:24:cd:c2:73:d4:
55:f8:3c:69:ed:3f:09:ec:1b:f3:df:33:a0:c9:d6:
47:e6:b4:54:7e:e1:84:62:c4:54:84:a2:51:ce:f4:
27:ab:4f:06:93:18:f2:3c:f4:b0:31:af:45:dd:da:
d7:48:49:d2:ec:95:1d:a9:dd:f2:f7:9c:2d:83:ed:
3d:ff:e3:37:f2:67:42:44:33:cd:7d:3f:e6:ab:93:
30:36:70:36:dc:ee:47:c8:00:d3:74:e4:09:7c:e1:
c3:fa:6e:26:01:15:43:fa:93:85:2d:5a:eb:a2:f6:
35:e1:63:4b:65:55:3c:28:80:00:08:d1:82:d7:8b:
43:07:8a:7a:91:f7:99:25:be:dd:4d:a5:ea:44:d0:
cd:10:50:00:7a:06:03:cd:1f:f4:26:4b:8c:28:27:
47:b1:6f:d8:06:b0:0c:63:65:23:f4:4c:aa:f5:08:
d0:bc:98:48:be:75:04:1e:04:77:ac:e7:d3:83:3e:
1b:88:df:c8:9c:3c:82:0f:c3:cb:2b:9e:f8:c7:c8:
28:d0:35:b2:ed:e1:8c:13:b6:90:1d:3a:fd:52:77:
fd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:71:B1:51:05:6F:18:02:9F:0E:05:9F:68:AB:93:E7:B3:85:F8:8E
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/j3GxUQVvGAKfDgWfaKuT57OF-I4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.121.0/24
Signature Algorithm: sha256WithRSAEncryption
93:51:82:e8:0b:e7:09:1d:53:d3:f0:54:77:c2:d7:b3:fb:03:
ca:00:0c:35:92:c6:94:cd:8a:ad:ed:d0:12:d2:78:84:b1:a6:
a7:1c:65:99:0b:39:b6:1a:16:16:43:09:bd:ad:cb:9c:75:5a:
29:79:60:f1:e3:42:70:19:e5:06:29:f4:df:5c:8f:c8:1a:7e:
cd:e4:74:24:2f:97:90:0d:73:5d:c0:e2:e4:90:d9:db:9d:3c:
6f:52:c3:2d:4e:5a:57:ac:4f:6f:60:88:89:cc:1a:50:1d:6d:
2f:56:3d:08:21:38:b9:7e:91:23:d6:59:f4:63:85:11:8b:16:
87:60:4c:ae:d1:0d:23:24:cd:35:f6:46:e6:9e:b8:28:f7:14:
a5:88:cf:8c:0f:1c:d6:67:9a:8f:61:cc:a5:fc:bf:c9:bc:bc:
2d:17:2c:91:e6:52:e3:be:24:b1:6a:7d:34:82:8d:5e:a2:a5:
16:31:0d:2f:43:dd:0a:24:43:f0:9d:46:f3:01:ae:6e:2d:5b:
80:e0:47:39:71:36:34:c5:d2:22:37:e5:e1:c5:bd:a7:a3:60:
5d:3d:95:ab:b8:73:59:0e:06:7f:cf:a4:13:73:67:47:c2:53:
19:68:72:b6:41:0d:89:32:5e:d0:b1:51:77:2e:f9:15:ca:05:
4c:95:a7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:01 2025 by rpki-client