Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/jxRp3LItg7j8erDJ8R0T2aCXCr8.roa
File: jxRp3LItg7j8erDJ8R0T2aCXCr8.roa (raw, json)
Hash identifier: QeV/DuJmi0XOn6jKXthG6G1yFldJpvp3sThreaYeCPA=
Subject key identifier: 8F:14:69:DC:B2:2D:83:B8:FC:7A:B0:C9:F1:1D:13:D9:A0:97:0A:BF
Certificate issuer: /CN=7e1167886da81524431bbf2efb0572914b686ebc
Certificate serial: 019425FDEA50AAB941871AD48C6492824919
Authority key identifier: 7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/jxRp3LItg7j8erDJ8R0T2aCXCr8.roa
Signing time: Thu 02 Jan 2025 07:49:45 +0000
ROA not before: Thu 02 Jan 2025 07:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2159
IP address blocks: 212.39.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ea:50:aa:b9:41:87:1a:d4:8c:64:92:82:49:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1167886da81524431bbf2efb0572914b686ebc
Validity
Not Before: Jan 2 07:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f1469dcb22d83b8fc7ab0c9f11d13d9a0970abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d3:2f:ba:18:d7:b7:a0:8e:55:d2:75:74:ba:
2f:07:0b:21:42:7f:fd:05:d5:d6:10:28:e8:00:6d:
8e:4b:33:77:99:6e:1d:b0:f5:25:bb:0d:a6:60:f2:
ba:f8:4d:9c:75:bd:98:30:06:7e:27:2f:f7:30:bb:
41:f0:08:35:b1:4b:bd:b6:f8:00:41:22:10:03:42:
e8:2e:49:59:42:5f:a7:cd:b8:1e:5b:1b:79:ed:de:
e6:ae:0e:f7:fe:a3:f6:a5:fd:e0:42:59:e0:f9:1b:
b2:9d:62:7b:4c:5e:73:68:f7:ee:a1:9a:58:e6:7a:
63:bf:ff:e7:b5:e3:f0:94:85:bb:24:82:16:9d:13:
36:85:4d:26:04:bb:b5:54:99:5d:a8:57:7e:98:17:
76:95:6b:f8:9a:c3:0b:5b:6d:ae:54:15:84:85:5a:
f3:d5:b4:36:86:11:85:bf:b8:28:b2:93:ed:c3:b5:
17:a7:8d:9e:99:34:90:59:28:c6:7b:6f:36:94:a0:
4e:92:a0:e6:5a:dd:3f:3b:ef:1c:f6:ba:9b:82:4b:
79:b4:d6:29:f7:15:c9:dd:b3:2b:84:2f:29:96:5d:
49:58:4e:a2:04:7a:75:fd:d7:7e:e8:89:51:fb:91:
47:22:01:12:eb:5e:f8:b8:f4:23:7f:52:b0:ef:b8:
ba:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:14:69:DC:B2:2D:83:B8:FC:7A:B0:C9:F1:1D:13:D9:A0:97:0A:BF
X509v3 Authority Key Identifier:
keyid:7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/jxRp3LItg7j8erDJ8R0T2aCXCr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.39.229.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:79:eb:e5:0c:a2:89:a8:2b:45:9c:b8:8a:18:29:09:cf:86:
73:52:e5:8d:e0:e9:a7:f9:64:4d:ab:7e:21:c3:e0:42:75:4d:
c3:a8:da:58:f0:75:a0:10:36:c2:db:3f:9c:5b:fe:86:15:92:
28:2f:f5:94:bb:a2:82:94:4f:54:7f:29:4e:44:91:bc:27:88:
60:87:67:ad:23:29:81:a5:a5:11:ba:37:12:ca:7d:f6:bf:e9:
90:b0:09:14:7a:7e:ba:d9:66:02:8f:a7:8f:08:f0:ea:db:c0:
14:20:13:80:df:1e:49:69:f1:63:c7:c9:b1:5c:ef:12:6d:4e:
85:4c:5a:06:cc:84:f5:75:29:ea:31:06:56:64:9c:77:ca:09:
95:27:ba:fd:67:6c:1a:2c:d6:50:2d:1e:c3:60:48:4a:72:45:
5e:3e:16:08:f5:60:bb:1c:74:60:fd:6c:1b:5f:25:e8:29:e1:
4f:fd:a2:0f:14:cb:e1:6c:57:94:16:85:39:01:8a:8d:83:11:
50:27:f1:54:4c:a3:4c:b6:95:3b:57:77:17:31:55:81:bb:6c:
b7:2f:4a:4e:e7:a2:80:1d:03:5b:3f:ea:fa:ff:6b:b8:76:44:
2e:94:d2:58:4c:dd:61:23:b4:f5:b9:c5:bd:c3:b1:a8:5a:1a:
b1:67:ac:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:21 2025 by rpki-client