Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/JSRscp0XKZY1UGFtCXuYBYNDyh8.roa
File: JSRscp0XKZY1UGFtCXuYBYNDyh8.roa (raw, json)
Hash identifier: kLUrwRfMQbF3GlcQQvBv3cWBaxj3YMK1Ub53haHByf0=
Subject key identifier: 25:24:6C:72:9D:17:29:96:35:50:61:6D:09:7B:98:05:83:43:CA:1F
Certificate issuer: /CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
Certificate serial: 01915563FE1BD11486DDBD15DAC352DF1860
Authority key identifier: 66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/JSRscp0XKZY1UGFtCXuYBYNDyh8.roa
Signing time: Thu 15 Aug 2024 09:35:02 +0000
ROA not before: Thu 15 Aug 2024 09:35:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134535
IP address blocks: 213.62.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:55:63:fe:1b:d1:14:86:dd:bd:15:da:c3:52:df:18:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
Validity
Not Before: Aug 15 09:35:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25246c729d1729963550616d097b98058343ca1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a3:40:fb:33:94:db:6c:78:9f:50:47:a2:05:
52:5a:70:56:52:14:47:d2:d8:35:4b:53:5a:08:c4:
89:9e:cd:39:cf:aa:98:cb:79:91:b6:75:8c:d8:d1:
ad:87:dd:0b:a5:02:2e:19:44:e8:f7:c9:43:e6:9f:
bf:60:2e:32:f2:cf:54:68:a5:84:60:a1:b2:a0:70:
c7:1c:48:6e:70:78:19:74:7f:0b:11:77:9e:6f:9d:
f8:3a:fd:e7:19:dc:39:19:4e:65:b1:59:3f:15:60:
a4:c3:57:b0:4b:c8:9b:90:38:e6:8e:42:8f:85:df:
cf:6d:27:d2:49:77:34:a5:32:fc:eb:6b:dd:f4:9f:
7d:20:c6:68:44:a0:c9:5c:da:1e:90:85:4a:60:d5:
a5:51:5c:91:65:6b:67:b1:b2:35:bf:31:9b:d9:e8:
40:60:10:0d:2e:9c:bb:2b:76:24:07:cb:f3:71:8f:
74:6e:9b:e9:ea:0d:1f:49:0f:d9:e4:ab:6f:d4:a7:
e3:2d:4d:2e:c1:78:16:4a:b8:42:c4:16:b3:7b:0d:
9b:8d:2d:cc:9e:bd:cf:a4:f8:5c:5a:da:b4:c4:e1:
b1:59:9f:af:77:4a:bd:45:33:fc:e2:4d:19:63:48:
0e:42:bc:a0:b6:70:df:1e:5e:46:8f:86:5a:ff:13:
f5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:24:6C:72:9D:17:29:96:35:50:61:6D:09:7B:98:05:83:43:CA:1F
X509v3 Authority Key Identifier:
keyid:66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/JSRscp0XKZY1UGFtCXuYBYNDyh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/ZkeJJDcWDdV3ftPteNSbxyteHF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.62.27.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:d2:f6:79:bf:52:54:29:46:fb:6e:05:0f:93:a4:d3:c5:d2:
85:eb:35:56:77:25:63:cf:66:73:a7:a6:33:e5:55:3b:37:e6:
2b:8c:b8:e9:5c:84:58:81:c7:6e:02:b8:3f:1a:68:30:26:d5:
c2:ba:a5:d8:01:40:22:03:55:28:27:0d:96:67:fe:a9:c1:5b:
82:03:c0:95:16:b7:63:a2:4c:86:62:db:42:3e:5e:d7:2b:07:
89:c5:94:2c:16:69:fb:dd:19:00:2b:cf:1a:10:f8:0b:f5:9f:
1b:53:46:33:24:52:d8:8a:56:88:53:97:d1:0c:cd:f6:12:60:
73:ca:e0:06:46:56:c9:fb:31:6c:58:1c:d9:b1:a5:d1:4e:3b:
b2:f5:c0:64:89:c1:ec:3d:84:b9:9b:b5:1a:be:ae:91:8a:67:
b8:98:80:70:a3:26:ca:f8:39:65:a4:41:a5:65:b8:20:59:28:
b8:3f:85:42:fc:e2:3b:e9:bd:36:aa:1c:87:5c:a6:08:38:b3:
0a:14:c8:8d:ea:2b:1c:e7:c8:e4:c2:b0:64:18:1d:24:c0:8b:
fe:b8:5c:a3:d0:87:4d:86:36:d5:6d:ae:ac:4e:fa:55:50:bc:
f9:54:a9:81:13:29:5f:44:12:d8:8f:20:25:26:4b:86:dd:c4:
8f:12:88:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:11:27 2025 by rpki-client