Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/07dd67-e8c0-46b6-829c-e4c27d2e2376/1/JbpEpTpm22MQAIdJu_22lN7k8kc.roa
File: JbpEpTpm22MQAIdJu_22lN7k8kc.roa (raw, json)
Hash identifier: RSNHJVb6JRlZBaBHn5NjlPHJgJvSYRE9voCf11wcA0U=
Subject key identifier: 25:BA:44:A5:3A:66:DB:63:10:00:87:49:BB:FD:B6:94:DE:E4:F2:47
Certificate issuer: /CN=04d9e5b0f9d1a7fdd3e6bc12e817e673a09ea193
Certificate serial: 0185711E4B730E53BD4A833E7126FED99E3E
Authority key identifier: 04:D9:E5:B0:F9:D1:A7:FD:D3:E6:BC:12:E8:17:E6:73:A0:9E:A1:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNnlsPnRp_3T5rwS6Bfmc6CeoZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/07dd67-e8c0-46b6-829c-e4c27d2e2376/1/JbpEpTpm22MQAIdJu_22lN7k8kc.roa
Signing time: Mon 02 Jan 2023 06:14:48 +0000
ROA not before: Mon 02 Jan 2023 06:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200845
IP address blocks: 185.241.244.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:4b:73:0e:53:bd:4a:83:3e:71:26:fe:d9:9e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d9e5b0f9d1a7fdd3e6bc12e817e673a09ea193
Validity
Not Before: Jan 2 06:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25ba44a53a66db6310008749bbfdb694dee4f247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bd:39:87:84:75:51:56:da:c2:4a:60:ba:87:
4b:fc:01:fc:57:97:28:9c:d4:90:0c:94:cc:d5:60:
4d:2f:21:f0:71:cc:20:fc:e9:66:e8:77:08:b7:f1:
09:06:b5:95:7f:60:88:f9:69:e6:12:75:3a:da:5c:
e9:74:7c:16:97:a8:3c:4f:1e:c5:d3:99:2b:3b:41:
64:5b:cd:38:94:80:5b:26:33:a8:4b:c6:60:d4:ae:
71:a2:f6:0e:e6:f1:70:f5:35:d6:66:b6:e4:e2:2a:
71:cf:bb:5a:f1:d6:c1:47:75:ff:25:e9:56:29:37:
e1:20:34:8d:29:9e:9b:5d:ac:e7:bf:5a:6a:56:07:
e4:1f:9d:39:2d:f6:29:ef:f3:26:5f:a7:e8:6a:bb:
0b:52:60:27:72:b9:a1:6f:06:c9:8d:8a:89:ed:73:
73:ff:b8:ff:47:1a:31:27:39:1d:2f:1c:f4:85:dc:
cf:2f:a5:a7:ad:e0:b8:98:56:ea:ba:a1:77:df:69:
0b:3a:6c:54:7b:be:60:a0:87:2e:67:53:31:2e:c1:
b3:cd:f0:ee:14:05:ce:0c:9d:da:7d:b9:ef:95:cd:
38:61:1c:3e:db:63:4d:d9:cc:ab:83:bf:fd:f1:13:
60:33:d6:ae:27:13:aa:9a:ba:52:f7:85:58:0f:0d:
f9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BA:44:A5:3A:66:DB:63:10:00:87:49:BB:FD:B6:94:DE:E4:F2:47
X509v3 Authority Key Identifier:
keyid:04:D9:E5:B0:F9:D1:A7:FD:D3:E6:BC:12:E8:17:E6:73:A0:9E:A1:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNnlsPnRp_3T5rwS6Bfmc6CeoZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/07dd67-e8c0-46b6-829c-e4c27d2e2376/1/JbpEpTpm22MQAIdJu_22lN7k8kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/07dd67-e8c0-46b6-829c-e4c27d2e2376/1/BNnlsPnRp_3T5rwS6Bfmc6CeoZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.244.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:fb:d6:5b:f1:58:d7:89:ed:fb:b2:e3:c0:c1:31:55:e8:aa:
78:bf:ae:8e:47:af:77:0a:5b:e8:0e:98:86:a4:5e:2e:3d:13:
52:bd:c7:ba:d0:66:de:84:cf:f0:ff:e0:96:ef:58:fa:00:5e:
99:08:d9:29:0e:c5:de:5b:d0:bd:cd:c4:1c:88:75:f5:76:a9:
3e:66:76:48:d6:9c:29:fc:20:5d:90:12:ee:3e:ac:2a:40:24:
26:51:41:bf:2e:dd:28:f8:2f:a2:b9:a5:c4:9c:85:62:d0:9a:
f5:b5:0f:02:d5:0f:1e:02:a3:8e:77:7c:71:ed:ad:8b:0b:67:
ec:0d:c8:9b:53:df:4b:7d:e1:eb:42:94:59:d8:0d:3f:e1:8a:
9d:aa:26:06:de:28:30:7b:d6:9c:50:9e:fe:ab:aa:56:93:4c:
b1:a6:e9:9a:0e:d4:91:e3:ff:3b:b5:d5:10:13:65:c4:8c:b0:
3a:d7:83:d4:62:61:07:92:10:cf:36:19:99:62:24:07:e5:d1:
c1:8b:5e:e4:b6:92:80:b6:c8:39:af:ed:df:0f:e6:98:9c:f0:
4b:30:ca:bf:c8:f5:8e:47:7c:77:d0:ac:d3:35:4f:d1:bd:18:
9b:8d:68:e5:54:a2:4a:41:06:b0:37:40:7e:89:35:30:a1:2d:
08:48:d7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:42 2024 by rpki-client on console-ams.rpki-client.org