Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/JM7Diumu07DkwWLADgRxpUrBPAo.roa
File: JM7Diumu07DkwWLADgRxpUrBPAo.roa (raw, json)
Hash identifier: so2SddPtay/IxArEazOpnYcd0MRszDIHkgKGB+pzdZM=
Subject key identifier: 24:CE:C3:8A:E9:AE:D3:B0:E4:C1:62:C0:0E:04:71:A5:4A:C1:3C:0A
Certificate issuer: /CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52
Certificate serial: 019427B653E3A4D258BFDA3807F083FE3B28
Authority key identifier: 10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/JM7Diumu07DkwWLADgRxpUrBPAo.roa
Signing time: Thu 02 Jan 2025 15:50:47 +0000
ROA not before: Thu 02 Jan 2025 15:50:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47692
IP address blocks: 80.249.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:53:e3:a4:d2:58:bf:da:38:07:f0:83:fe:3b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52
Validity
Not Before: Jan 2 15:50:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24cec38ae9aed3b0e4c162c00e0471a54ac13c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3a:e5:de:1e:95:f1:69:02:b3:f8:db:6b:e5:
77:6f:54:d3:42:0d:c8:75:34:79:79:a4:f1:b7:7c:
1a:77:26:57:63:b4:bf:d2:c8:3c:4e:fb:82:bc:64:
53:d2:f3:41:56:cc:00:42:d7:0e:e1:c0:be:73:5e:
3c:f2:2f:c9:d8:e1:a4:d2:16:5b:6c:f2:fa:ff:eb:
e2:e1:08:2e:e2:12:b5:b0:9e:81:62:6e:db:25:68:
ad:88:c9:c4:ec:99:cc:74:a7:4d:b4:54:4c:0d:b5:
ec:9a:76:a6:d7:33:46:de:58:df:95:ae:c9:33:fc:
ba:b0:e5:ec:c6:82:b5:8c:2f:df:de:d2:c7:78:2b:
eb:6c:4d:15:57:b2:97:c3:8c:31:4d:ea:f1:e5:50:
6c:5a:1e:97:e2:c2:5a:c8:de:45:5e:04:d5:fe:b9:
05:e0:50:fb:19:29:98:d5:40:46:51:f1:f1:85:30:
a4:10:8e:75:8b:2d:59:e1:1b:bf:f6:d8:86:a5:07:
89:ed:6e:90:e6:13:2b:a1:93:98:38:66:0f:3a:6e:
d1:c3:af:38:66:fd:44:a9:47:9e:5f:ad:0b:ae:c0:
dd:5a:a3:a5:cf:14:4a:7e:4b:96:7f:a9:f9:18:f5:
78:3c:37:41:3b:7e:1c:af:b2:89:33:76:5a:9f:ab:
ee:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CE:C3:8A:E9:AE:D3:B0:E4:C1:62:C0:0E:04:71:A5:4A:C1:3C:0A
X509v3 Authority Key Identifier:
keyid:10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/JM7Diumu07DkwWLADgRxpUrBPAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.249.121.0/24
Signature Algorithm: sha256WithRSAEncryption
30:2a:e9:57:46:ae:d6:cf:3a:e1:de:18:27:3f:92:29:83:f2:
d1:3c:62:46:bc:2d:75:a0:fd:e0:67:6a:5f:f3:07:9e:53:ea:
16:68:66:2c:cb:73:a3:6d:80:e4:64:1e:52:35:ab:eb:60:f6:
2c:b2:5c:cd:08:f4:f3:35:25:61:ab:f9:bc:ab:49:2a:82:0c:
cc:cb:fd:1e:01:26:61:e7:d6:28:8c:2f:bf:8a:2a:70:1a:10:
aa:67:78:00:59:0d:8f:d3:97:f2:4d:ea:05:ea:e3:f4:d6:36:
5b:3c:4b:1f:4d:93:0a:6d:56:20:f5:fa:4d:9e:ad:6c:14:aa:
72:7f:f8:1a:d9:86:a2:07:b1:d4:48:1d:97:d8:40:0b:f7:3b:
92:a4:27:40:20:9d:18:d9:81:45:c1:7f:c0:bf:b9:b5:13:07:
9c:4d:88:9c:24:a9:f7:c3:be:7d:0d:71:9f:88:e7:b0:f1:d8:
56:f0:e1:33:57:74:f4:11:3f:64:ce:c8:03:ac:66:e9:a3:f7:
4c:24:9f:67:2a:80:05:4f:e0:2f:2a:c6:5e:ae:23:96:12:ea:
00:b3:66:47:27:4d:17:8c:6c:c3:62:0a:b6:64:57:f0:68:bb:
de:6b:32:01:33:31:d3:cb:27:8b:f0:5d:b8:26:4a:45:73:fa:
0e:b9:8c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 15:26:01 2025 by rpki-client