Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/JKGONap7FzdYrafaJTvNvOknirY.roa
File: JKGONap7FzdYrafaJTvNvOknirY.roa (raw, json)
Hash identifier: 6R2FLTD9RagP9vvNsvrITqY5S2ocaqm6gRkV0qYr8H8=
Subject key identifier: 24:A1:8E:35:AA:7B:17:37:58:AD:A7:DA:25:3B:CD:BC:E9:27:8A:B6
Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial: 01884D90553CEF99231493065F8FD4A538DC
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/JKGONap7FzdYrafaJTvNvOknirY.roa
Signing time: Wed 24 May 2023 11:41:24 +0000
ROA not before: Wed 24 May 2023 11:41:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 185.233.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4d:90:55:3c:ef:99:23:14:93:06:5f:8f:d4:a5:38:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
Validity
Not Before: May 24 11:41:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24a18e35aa7b173758ada7da253bcdbce9278ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e5:fb:99:41:8c:52:94:7b:50:fa:4f:48:55:
f8:fa:dd:3d:ba:4e:46:ad:18:3c:5c:6a:ea:72:e9:
fc:c5:1b:03:e0:3b:b6:0b:dd:c2:52:dd:cc:92:55:
59:cd:d6:53:69:8c:cf:d9:e5:17:83:c6:1c:a6:c3:
49:98:b0:a6:57:bb:27:6d:8a:4a:da:7a:3c:90:b6:
64:f0:53:39:0f:e9:6a:4e:04:93:d8:45:97:4e:9e:
70:0d:37:74:93:36:fa:60:6f:61:68:59:b1:61:b9:
c4:04:e0:9e:5d:a3:59:15:d1:76:05:13:a7:08:71:
8d:77:08:ec:b1:f4:f7:c4:1a:0b:1d:b1:09:fd:49:
6c:ce:0d:c4:20:47:4d:fb:01:63:b8:82:67:ad:9a:
be:56:26:f5:96:76:ca:38:45:eb:f4:be:1b:70:dc:
f8:a3:c0:d1:5f:e4:9b:9d:5e:3d:02:2f:e0:5d:8f:
1d:93:04:e6:a8:57:43:0f:ae:7a:e1:4e:1b:ab:86:
55:72:b1:d7:02:fa:85:a1:e8:b2:a2:ae:61:34:af:
6d:4d:aa:0e:9f:ee:9f:c8:d6:7e:ed:86:62:42:3d:
18:c7:4f:c0:fd:41:cb:1b:fe:20:f2:1a:82:5b:d3:
ea:ce:38:df:a5:ca:e0:99:c3:e9:97:de:8d:0c:17:
e6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A1:8E:35:AA:7B:17:37:58:AD:A7:DA:25:3B:CD:BC:E9:27:8A:B6
X509v3 Authority Key Identifier:
keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/JKGONap7FzdYrafaJTvNvOknirY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.150.0/24
Signature Algorithm: sha256WithRSAEncryption
55:18:28:8d:ba:b7:aa:55:b6:22:54:48:09:db:af:04:07:c5:
da:7c:45:e1:43:25:97:cb:7b:d0:d8:d6:85:77:a6:8c:a9:9b:
03:8e:de:74:73:a8:29:e0:4a:95:c1:dc:ad:1f:64:b5:ad:47:
91:0f:38:b0:c0:b0:46:f1:75:ef:7b:dd:9e:8f:e2:c1:52:6f:
c8:2a:0a:ff:6a:1e:be:02:af:ab:0b:52:6a:a1:76:18:82:1f:
d2:2a:5d:6a:ca:c5:3c:bf:45:39:c8:e9:f3:e4:a2:3c:e9:84:
55:5b:1d:b8:3c:b1:c9:9b:91:a8:8f:92:55:c0:07:95:54:e6:
39:c8:84:0a:df:9c:52:5e:13:db:03:35:c1:94:6c:6b:b6:b0:
0d:27:a9:cf:f8:4d:be:06:05:ef:ff:a1:17:44:ec:2d:1d:3e:
a1:4b:0a:00:4d:4c:74:fd:67:c2:b9:f2:9e:c0:89:76:c0:0f:
71:32:b8:6a:57:03:f9:c3:93:af:d1:fb:7e:8d:f8:82:69:ee:
6d:47:ef:86:2c:03:2a:a0:86:ca:0c:07:1f:2b:c7:47:ca:db:
f5:10:e6:7d:9a:8d:d0:8f:d7:db:df:65:01:8b:a0:d5:e0:e2:
0c:0a:eb:8a:e2:da:51:82:99:d7:ba:38:74:3c:4b:01:18:58:
6a:e6:2d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:56 2025 by rpki-client