Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/jSWGRDdKL-HTUETX8py0S4BUPnw.roa
File: jSWGRDdKL-HTUETX8py0S4BUPnw.roa (raw, json)
Hash identifier: duy/YDBoOJtBJ6yTq6z5J9MLnvFlUwnH0+KkHirH4Ag=
Subject key identifier: 8D:25:86:44:37:4A:2F:E1:D3:50:44:D7:F2:9C:B4:4B:80:54:3E:7C
Certificate issuer: /CN=864df1128f7d42c6884863b5f273f3eba6596156
Certificate serial: 0194D5609EEBF75463C06E095220521E773A
Authority key identifier: 86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/jSWGRDdKL-HTUETX8py0S4BUPnw.roa
Signing time: Wed 05 Feb 2025 09:11:06 +0000
ROA not before: Wed 05 Feb 2025 09:11:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28716
IP address blocks: 194.93.40.0/22 maxlen: 24
194.93.40.0/24 maxlen: 24
194.93.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d5:60:9e:eb:f7:54:63:c0:6e:09:52:20:52:1e:77:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864df1128f7d42c6884863b5f273f3eba6596156
Validity
Not Before: Feb 5 09:11:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d258644374a2fe1d35044d7f29cb44b80543e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:87:f0:4a:d5:49:46:f9:89:4f:75:04:1b:fe:
f8:09:0f:8b:3c:f7:44:7f:59:17:11:6a:5e:5b:51:
9c:8f:53:d5:2c:69:bf:8e:43:1c:b2:d0:5d:36:2a:
79:ad:8c:b6:5e:d8:43:fa:75:ae:8d:fb:e7:33:75:
65:ea:fc:f0:92:a1:0d:b7:04:37:a7:14:1a:a9:88:
9a:95:88:26:3e:2a:99:80:db:a7:10:7b:41:24:09:
74:3d:13:a3:27:59:62:28:4a:1d:42:ae:23:10:a7:
69:3a:1c:a1:7c:bd:74:3e:93:bb:a4:19:20:06:68:
cf:82:2d:ef:02:ee:fb:e9:a3:f0:eb:90:85:37:7d:
44:c1:7c:ce:f6:d2:75:b9:c6:6d:a9:72:5e:2c:d3:
d8:7e:91:3a:db:29:bb:b1:b6:86:23:69:90:7e:86:
0f:f2:67:35:91:a9:cd:b1:67:01:ef:0a:4b:fd:d7:
64:a4:c7:a9:f6:ad:63:9f:5e:46:22:c2:8f:2a:93:
3a:68:11:bd:a7:15:c7:32:cb:c6:94:90:a4:b3:a6:
8b:8f:d1:48:af:51:12:57:08:c3:83:f4:ff:c9:75:
8c:64:45:2d:4d:7d:33:76:1e:de:d6:d6:ec:d2:a9:
99:8a:dd:a8:19:d1:04:1e:2d:00:d0:2c:93:00:aa:
9c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:25:86:44:37:4A:2F:E1:D3:50:44:D7:F2:9C:B4:4B:80:54:3E:7C
X509v3 Authority Key Identifier:
keyid:86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/jSWGRDdKL-HTUETX8py0S4BUPnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.40.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:93:7e:c9:48:d4:c8:97:5b:e8:4f:7f:fb:f2:80:bf:e4:05:
73:fb:dc:5c:30:8f:39:58:80:26:59:50:a9:e7:84:6a:f3:69:
27:87:4c:10:a9:b7:cc:1a:58:2d:dd:2a:cb:bb:0f:b9:99:9c:
b4:dc:2d:95:ea:e9:52:44:a4:8b:4c:f3:86:df:dd:da:76:1f:
7b:0e:7c:99:1e:2d:eb:26:6d:12:8f:5f:90:8b:00:ef:c9:f5:
c4:e7:44:9e:76:1a:9e:76:82:1c:f9:60:48:f3:40:69:ce:9e:
3c:d3:06:bb:d3:98:3d:81:6d:5b:b9:b0:b1:e5:0b:25:70:98:
cf:d1:03:4a:14:0e:45:c4:a0:72:ee:3c:06:5a:e5:98:5d:33:
69:8e:08:47:bd:78:82:22:72:d1:79:35:28:47:4d:bd:cb:54:
2f:1f:df:44:32:d6:14:6b:a6:3b:4c:d2:9f:cc:ca:34:04:3f:
70:fc:00:b4:34:4e:53:de:3d:d2:aa:45:e7:3e:dc:ec:37:2f:
10:be:52:16:49:16:23:9f:9d:c3:9f:9a:f5:f1:7a:a9:1a:c8:
f7:67:c8:ea:e5:87:72:26:37:95:ff:cc:18:4f:7d:28:f7:fa:
b0:a7:df:7b:c8:ba:c9:9a:29:fc:fc:b8:ed:7a:c9:2f:f4:af:
3e:24:65:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:15:13 2025 by rpki-client