Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/CJ-EIdp9R0bqIzXbzoAIOK1GnJg.roa
File: CJ-EIdp9R0bqIzXbzoAIOK1GnJg.roa (raw, json)
Hash identifier: Z4G6hVbJpp4EHw/Lx04EGp7CU9ueMbpBgULqYxX3F+c=
Subject key identifier: 08:9F:84:21:DA:7D:47:46:EA:23:35:DB:CE:80:08:38:AD:46:9C:98
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0194222062968694682D1D88F7A06A278D82
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/CJ-EIdp9R0bqIzXbzoAIOK1GnJg.roa
Signing time: Wed 01 Jan 2025 13:48:55 +0000
ROA not before: Wed 01 Jan 2025 13:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399641
IP address blocks: 185.194.31.0/24 maxlen: 24
185.218.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:62:96:86:94:68:2d:1d:88:f7:a0:6a:27:8d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=089f8421da7d4746ea2335dbce800838ad469c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:55:74:72:58:9c:b3:52:75:38:d6:41:46:f4:
97:57:10:f0:13:d4:3a:b7:26:3d:6f:97:49:7b:fd:
bb:05:ea:d3:d4:2d:2e:2b:60:ab:63:6a:c0:7e:7b:
7c:af:e8:7a:01:06:62:07:86:a9:28:3d:8c:44:87:
11:7d:b3:6e:17:84:9d:4e:be:e7:6f:86:c7:d3:fd:
8b:c3:75:93:c6:c6:02:f9:92:0a:d5:74:35:13:07:
11:fb:ad:2b:df:bb:c4:91:7e:02:a5:0d:e1:0f:f9:
c3:be:d9:e6:dc:96:c2:1f:1a:6f:80:de:2b:2c:39:
20:8c:0c:d6:c4:7a:85:36:4d:3a:f0:09:c7:26:88:
af:ee:11:c9:06:ec:70:0d:70:56:20:ba:20:0f:ac:
e3:54:17:89:39:ed:05:50:d2:aa:de:d7:4c:21:a9:
bc:62:4a:83:78:32:92:15:aa:fb:45:ed:62:3c:48:
7c:1a:69:c9:fd:10:72:45:97:27:15:0d:9f:d7:cc:
f9:39:73:87:31:8a:5e:7d:ab:dc:d3:08:4f:f4:07:
f7:b1:f5:b6:b9:e8:b8:3c:2a:10:80:8f:22:30:7e:
45:b4:72:6f:52:67:eb:7b:ff:46:9d:03:07:66:c4:
20:5f:ba:4f:d3:67:c0:97:73:ab:e5:f6:1b:30:22:
6d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9F:84:21:DA:7D:47:46:EA:23:35:DB:CE:80:08:38:AD:46:9C:98
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/CJ-EIdp9R0bqIzXbzoAIOK1GnJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.31.0/24
185.218.103.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:26:6f:7a:7d:96:8e:b2:ce:ac:43:13:38:1f:d7:d7:39:b2:
4e:5d:bd:aa:7f:ba:0c:b5:98:17:ca:56:8d:bf:26:64:9c:6c:
51:50:54:ac:c3:68:36:d7:6b:63:cd:e3:91:a5:18:9d:1e:20:
bf:0c:b8:48:95:7e:b2:f2:73:ae:d2:79:35:61:7b:8d:8b:b9:
d2:fa:17:67:28:32:77:53:f8:2c:40:e2:6c:2f:8e:6b:f6:56:
48:0c:4a:7a:5d:7f:87:5b:7e:21:1a:0b:53:ab:9f:34:d4:03:
f8:a1:65:65:29:ac:a4:a0:32:7c:f6:89:bd:1e:f3:6d:0f:f4:
73:2c:82:03:eb:8d:80:e4:b9:dd:78:ce:31:38:a2:80:18:85:
3d:da:8b:d1:11:24:cf:6d:5f:0f:cc:2f:5e:34:26:d4:5f:1b:
23:63:43:3a:6d:f2:b7:62:ba:e9:ba:89:37:3d:fd:37:c5:95:
d0:9d:b8:ea:89:9e:2a:2c:d9:61:62:ab:11:9a:8d:9f:0a:96:
3e:b4:27:91:15:82:5b:54:24:7b:f8:7a:10:dd:e4:a1:aa:3a:
fc:46:cc:79:57:47:1e:3a:3f:98:33:5e:f9:a3:7e:d0:cf:15:
a0:64:a1:17:9b:95:b5:a3:59:43:e9:cc:57:37:ca:f2:6f:2a:
89:f0:80:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:41:23 2025 by rpki-client