Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/jsLjY2Dc2S2O7jwfLML6nOsBS0o.roa
File: jsLjY2Dc2S2O7jwfLML6nOsBS0o.roa (raw, json)
Hash identifier: /a3bkiLEbNmaSUeq8MEDshih5vZMuYoOiChrBF9mx2s=
Subject key identifier: 8E:C2:E3:63:60:DC:D9:2D:8E:EE:3C:1F:2C:C2:FA:9C:EB:01:4B:4A
Certificate issuer: /CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Certificate serial: 019427B697D37867A1F3B4E01CDC760F07CF
Authority key identifier: 5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/jsLjY2Dc2S2O7jwfLML6nOsBS0o.roa
Signing time: Thu 02 Jan 2025 15:51:05 +0000
ROA not before: Thu 02 Jan 2025 15:51:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214255
IP address blocks: 213.254.186.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:97:d3:78:67:a1:f3:b4:e0:1c:dc:76:0f:07:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Validity
Not Before: Jan 2 15:51:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ec2e36360dcd92d8eee3c1f2cc2fa9ceb014b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:27:76:77:90:bc:1d:7c:dc:e1:3a:ac:2d:17:
a6:bf:c8:9f:77:c5:ac:a5:5a:3b:e0:33:9e:3b:24:
4a:7c:01:fa:b0:26:3d:1f:50:ae:a4:2d:ef:ce:e5:
bf:68:c5:5c:3a:cf:63:00:8d:4b:f8:61:35:dd:92:
57:76:17:3c:24:91:4c:ac:63:11:9e:df:c3:0c:a1:
21:06:e8:9b:d8:72:98:7c:69:eb:8d:21:8a:b8:e7:
0f:e2:cc:36:1f:b5:df:6b:e2:ae:6e:29:55:02:da:
6d:14:7e:fa:13:08:41:ed:5f:ed:6d:68:06:41:b6:
6f:ac:bd:48:2f:29:bf:79:51:38:4a:81:8b:72:30:
e6:b3:51:ec:62:44:ef:e4:87:1a:7f:62:50:75:c2:
b5:e4:a7:e1:48:66:79:a5:4f:1f:e6:3a:04:7a:73:
0d:54:42:87:67:9e:c7:d3:d1:7a:a9:5a:09:6e:93:
65:54:fa:d2:21:c6:25:7d:d8:b7:03:d4:8d:4b:24:
3d:e2:0b:18:9c:ac:b2:89:0d:79:54:7f:02:06:a3:
92:bd:05:48:f8:77:0f:1a:44:6f:ee:5f:dd:3c:14:
cf:67:6b:0a:25:bb:cb:de:24:64:20:d4:84:53:23:
9e:aa:af:f8:f1:6b:67:14:ed:55:60:0a:78:90:56:
b4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C2:E3:63:60:DC:D9:2D:8E:EE:3C:1F:2C:C2:FA:9C:EB:01:4B:4A
X509v3 Authority Key Identifier:
keyid:5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/jsLjY2Dc2S2O7jwfLML6nOsBS0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.254.186.0/23
Signature Algorithm: sha256WithRSAEncryption
52:97:d9:aa:aa:fb:48:ab:72:07:c2:39:a4:2c:f2:c3:fb:3c:
03:77:62:7b:56:38:d1:7c:c3:8d:a2:4a:3b:81:f5:46:dd:13:
c9:1c:e6:8d:dd:01:7e:b7:51:5f:d0:74:4f:99:e4:a6:4f:4c:
5d:7b:b2:5d:d9:7f:e4:21:da:67:5d:51:2d:e2:d9:6b:f1:3b:
a0:4e:80:46:9e:3f:30:f5:20:bb:91:95:94:97:bb:21:5e:50:
82:c9:15:38:d2:9e:78:37:ea:75:b2:19:aa:9c:8d:dd:c6:73:
ca:6c:3e:cb:7a:f7:59:ff:63:4b:f4:83:c4:96:35:45:54:0b:
4a:fe:83:36:05:81:2d:e5:da:dc:ba:a5:93:50:67:22:22:bb:
4d:7a:45:fb:3d:5b:8c:29:7a:4a:78:a7:ea:bd:85:c3:10:70:
54:a3:be:f9:be:56:30:2f:b9:5a:48:96:ef:0a:16:5e:e1:3b:
43:1d:43:ab:a2:d2:a7:fa:f2:53:af:27:bf:00:73:43:c3:dd:
96:58:ee:07:d1:49:e0:68:65:80:88:56:6c:1a:89:08:df:df:
e6:68:67:0a:91:40:15:c4:d1:f2:38:a6:8a:37:26:fc:f6:0c:
a5:a8:41:a2:c0:e8:93:29:2a:7a:d2:aa:da:90:86:15:65:fc:
39:4f:5e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:07:53 2025 by rpki-client