Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/jlgOunTc_AY2JrXceYBhgrHhN_A.roa
File: jlgOunTc_AY2JrXceYBhgrHhN_A.roa (raw, json)
Hash identifier: MXrOBNARi65uD1sJ0xucWcsht+Vh8FLhKbsUKNb2aUg=
Subject key identifier: 8E:58:0E:BA:74:DC:FC:06:36:26:B5:DC:79:80:61:82:B1:E1:37:F0
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019422201F4C44FFB43EF2A4968679461E17
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/jlgOunTc_AY2JrXceYBhgrHhN_A.roa
Signing time: Wed 01 Jan 2025 13:48:38 +0000
ROA not before: Wed 01 Jan 2025 13:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35699
IP address blocks: 194.26.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:1f:4c:44:ff:b4:3e:f2:a4:96:86:79:46:1e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e580eba74dcfc063626b5dc79806182b1e137f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0f:f4:58:bc:04:f3:c8:48:15:22:6d:d2:e2:
08:8f:23:00:ca:98:18:5e:24:2c:e0:e7:73:06:bf:
4b:95:86:9c:6f:df:ee:f9:d8:2b:90:c3:8c:44:38:
4d:ec:f3:3d:e1:35:cb:51:27:39:db:08:a5:50:25:
86:23:19:12:8e:d8:f0:1a:4d:0c:11:16:e8:06:af:
93:3e:c6:79:b7:19:f6:f6:54:22:10:3f:82:36:51:
d7:49:b7:bf:26:87:a4:6d:3e:2d:21:55:4b:04:6c:
19:dc:f2:67:73:e5:85:da:8f:81:34:c4:85:09:eb:
45:e1:44:b9:e9:ca:7a:b9:8c:83:b1:b9:c1:66:04:
c4:47:47:fb:2f:32:21:c8:88:be:45:68:4b:5f:12:
ea:15:b3:35:f9:47:6a:bd:76:23:fb:53:46:d5:ed:
a0:1e:d3:c0:7c:fd:95:e0:fa:6f:e7:8b:37:9e:0d:
61:50:42:9e:83:fe:af:9f:10:86:7d:e2:2c:7f:85:
d1:39:c9:90:1c:a6:96:1c:c1:96:7f:5a:7a:c0:ce:
37:09:03:75:13:cb:9f:27:9a:11:7c:02:e8:00:0a:
c6:8a:fd:fe:b8:07:2e:6a:43:29:ba:cf:66:46:bb:
83:19:31:c2:04:02:93:0e:06:7e:ff:52:d9:0d:11:
f6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:58:0E:BA:74:DC:FC:06:36:26:B5:DC:79:80:61:82:B1:E1:37:F0
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/jlgOunTc_AY2JrXceYBhgrHhN_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.175.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:96:e1:be:cb:68:29:23:8c:dc:6e:15:9d:94:5a:c6:0f:90:
eb:ed:df:5c:3c:43:08:21:3f:de:8c:8d:a8:dc:33:94:c8:2a:
dd:5f:2e:02:d2:aa:44:8c:ac:38:31:94:f1:00:e3:7d:95:2c:
83:a0:ee:88:7e:d7:63:5c:7f:78:09:64:3a:fb:e5:c7:b7:08:
86:c3:18:cc:6d:2a:e7:db:d8:cd:43:1f:dd:1d:a0:3b:6e:c1:
2f:ae:91:1e:88:0f:65:32:2c:d9:eb:4c:43:9c:5c:d1:c4:12:
66:08:08:b1:66:aa:4d:23:06:48:67:cf:3c:d5:02:ac:9f:53:
52:b3:62:7a:96:36:48:a6:a6:86:16:3e:43:cc:ed:47:a5:ba:
b8:a9:56:09:ac:ae:eb:4d:7b:17:b2:f7:14:92:27:d4:2f:e7:
90:8c:cf:cb:6e:4d:34:c5:b0:c0:2d:2e:f1:cd:57:85:90:b9:
32:7b:e4:3d:77:df:91:3a:35:e9:be:ee:72:31:64:9e:8c:ca:
ac:b0:d8:9a:db:2c:13:7c:c1:32:63:77:3f:08:e9:5c:ca:60:
25:cf:e8:b9:95:3c:d7:13:7b:d0:21:dc:e8:2a:e9:cf:af:d8:
d4:14:d9:67:f8:f0:45:0f:78:1d:85:5f:60:a2:e8:4e:57:e8:
ec:f3:ac:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:29:12 2025 by rpki-client