Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/JJBV1z2R-u9Mp9thC9Wdv1eJkc0.roa
File: JJBV1z2R-u9Mp9thC9Wdv1eJkc0.roa (raw, json)
Hash identifier: NQzzAQc28osxjZT05mQhRtDuQ1pY2Seb4Ooc5Ebd8mE=
Subject key identifier: 24:90:55:D7:3D:91:FA:EF:4C:A7:DB:61:0B:D5:9D:BF:57:89:91:CD
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019422FBA6149D5B0BA4F9D06465EB985D51
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/JJBV1z2R-u9Mp9thC9Wdv1eJkc0.roa
Signing time: Wed 01 Jan 2025 17:48:24 +0000
ROA not before: Wed 01 Jan 2025 17:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215567
IP address blocks: 88.209.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:a6:14:9d:5b:0b:a4:f9:d0:64:65:eb:98:5d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 17:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=249055d73d91faef4ca7db610bd59dbf578991cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b9:60:3c:2e:6e:aa:6b:8e:6a:52:58:6b:5f:
74:3c:d7:d9:0f:0b:63:8c:81:cf:bc:20:e9:2b:2a:
61:d4:a9:20:fe:1d:93:74:c0:a5:26:c0:33:2e:4d:
54:de:af:46:82:1d:bd:61:8e:21:15:4f:85:43:b2:
d1:70:ad:a3:1f:ea:90:3e:cb:ea:c8:64:c8:32:7d:
0e:66:69:eb:92:d4:d0:53:ec:07:3a:ab:be:ea:c0:
56:46:9d:5f:7d:ea:da:13:5d:5b:7f:b2:cb:59:2b:
21:94:51:4c:cd:4a:ef:ea:c2:97:65:b7:03:a8:17:
13:dc:cc:fe:df:84:a6:e6:71:08:99:a1:11:8d:f5:
ac:9d:05:a7:5a:68:3d:7d:28:3d:2b:23:49:ba:04:
05:eb:e4:ca:11:51:f4:d2:b1:ce:53:36:4f:e8:04:
ca:2f:de:90:6f:2d:84:ff:63:5a:ab:7c:bf:74:27:
7f:46:26:a1:b8:fd:7b:a8:2f:ec:99:f7:ef:f6:a7:
64:52:ba:6d:c7:2b:1d:52:0d:08:ef:41:ee:5b:1f:
5e:65:91:dd:af:1c:53:b1:2d:bf:5a:a3:dd:24:65:
54:ce:ad:f5:f1:fa:af:8e:c4:fe:26:89:b3:c3:71:
17:7b:d6:00:16:e4:86:99:e5:4d:cf:33:bd:12:23:
50:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:90:55:D7:3D:91:FA:EF:4C:A7:DB:61:0B:D5:9D:BF:57:89:91:CD
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/JJBV1z2R-u9Mp9thC9Wdv1eJkc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.248.0/24
Signature Algorithm: sha256WithRSAEncryption
82:06:e3:38:5b:9f:e9:09:11:42:10:e9:64:6b:33:5f:6d:58:
b9:a8:7e:b3:3a:e1:59:ee:5c:38:5a:28:eb:5e:00:08:b1:f8:
06:07:dc:b4:5e:06:7c:cd:41:8e:c9:22:69:b7:ac:da:7c:36:
ea:bc:8a:0c:46:0e:af:e0:aa:b0:d8:85:a7:48:c9:69:70:30:
01:fa:45:d3:c2:07:92:12:a7:42:61:57:78:82:9a:9a:4f:f7:
1b:40:e0:37:0f:8c:73:4e:d9:d3:ef:9b:29:cd:7b:59:5c:ec:
c7:83:99:09:e7:70:01:69:2e:0c:07:36:a2:2a:16:a1:5c:55:
11:15:7c:46:ce:c3:4a:d5:69:a0:f5:c0:c6:86:91:61:95:92:
1f:9e:d8:a4:88:32:d5:0f:96:68:be:3b:9e:88:13:b7:06:84:
30:23:c2:9e:d6:dd:11:10:94:32:b2:db:b1:2a:56:8c:25:48:
e0:ff:13:e9:1c:54:87:63:ef:fa:f9:ea:eb:d0:82:63:1e:21:
3b:05:93:81:e9:19:ae:05:89:e0:3f:50:9f:09:ac:39:58:3c:
7e:71:3f:32:8f:37:9c:88:93:36:d8:1a:c4:6e:86:19:d7:c2:
4f:3c:27:09:3d:7e:fa:4d:f9:3f:91:20:ce:c2:7a:17:b4:47:
4e:d1:04:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:39:37 2025 by rpki-client