Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/JmVHDW-WpaUONDLX8rhO545q09I.roa
File: JmVHDW-WpaUONDLX8rhO545q09I.roa (raw, json)
Hash identifier: bCCcJT48+zRZnZYRnV812pu7SBAXykrCGRB/ykByHw0=
Subject key identifier: 26:65:47:0D:6F:96:A5:A5:0E:34:32:D7:F2:B8:4E:E7:8E:6A:D3:D2
Certificate issuer: /CN=191e27b29f65a24d9f94215715cd3671825a9eae
Certificate serial: 018573B186F3B53195199B09D6990C977148
Authority key identifier: 19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/JmVHDW-WpaUONDLX8rhO545q09I.roa
Signing time: Mon 02 Jan 2023 18:14:52 +0000
ROA not before: Mon 02 Jan 2023 18:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208917
IP address blocks: 185.102.26.0/24 maxlen: 24
185.102.24.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:b1:86:f3:b5:31:95:19:9b:09:d6:99:0c:97:71:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191e27b29f65a24d9f94215715cd3671825a9eae
Validity
Not Before: Jan 2 18:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2665470d6f96a5a50e3432d7f2b84ee78e6ad3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4e:f8:54:0c:27:5d:4e:f0:56:7d:6d:8f:4d:
af:72:47:da:30:34:5b:8e:98:9f:b6:14:09:52:df:
0a:d5:2b:a3:80:3d:ac:9d:c0:77:2a:1d:78:c9:40:
05:45:b0:fc:9f:98:bf:7d:8b:45:db:fe:86:ec:83:
3b:62:a5:d0:10:ef:41:73:28:b1:7d:82:f2:9d:99:
cd:fd:4e:73:e5:67:3a:09:97:98:33:42:e3:74:b5:
3e:b1:ce:d4:16:0f:b4:ce:87:ea:9b:4a:c4:e1:85:
e1:0d:a7:d0:fa:af:48:ea:dc:76:41:9f:ec:85:0c:
e7:b0:a1:96:a7:54:a8:7a:2e:31:b0:a7:8c:f5:b0:
6b:17:d6:5e:4c:c9:85:86:fa:e3:f8:ae:5e:8c:38:
98:5a:b5:d3:a2:12:58:62:ea:6e:be:6c:b0:db:e1:
1c:91:4a:ee:c1:84:5f:48:7d:de:40:b3:15:2d:8e:
40:20:0f:f9:4e:f2:4f:24:28:75:43:9c:7d:82:c8:
ad:13:19:07:38:21:27:2b:fc:76:13:e8:fd:c5:9b:
bc:9f:d5:81:9d:b6:d2:e9:86:7c:ff:77:cb:82:34:
c5:e1:cf:37:7c:ab:dd:72:84:3f:0c:03:85:13:03:
1e:eb:f2:85:3e:39:4d:5f:c9:ba:66:f8:0e:c0:5a:
a7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:65:47:0D:6F:96:A5:A5:0E:34:32:D7:F2:B8:4E:E7:8E:6A:D3:D2
X509v3 Authority Key Identifier:
keyid:19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/JmVHDW-WpaUONDLX8rhO545q09I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.24.0-185.102.26.255
Signature Algorithm: sha256WithRSAEncryption
47:46:8b:3c:03:06:df:0a:9b:63:d9:c4:06:d8:2f:7e:43:ff:
45:4f:ca:8b:75:80:0f:16:97:c6:d0:72:32:b4:fc:ee:6a:d6:
81:09:d9:dc:46:06:8d:24:2d:61:19:3a:51:77:b7:86:97:c6:
38:06:af:9e:f2:3b:66:82:5d:df:3a:70:62:17:b5:12:38:a7:
be:b3:01:88:f7:eb:9a:22:53:55:bb:d6:48:8c:82:ad:33:16:
6a:f3:ec:80:26:3d:bf:a5:74:5c:1c:cd:0f:9a:51:dc:64:81:
a5:7e:10:3c:d0:57:2e:3a:1d:86:1b:ec:9d:a4:08:6a:9d:dd:
94:c3:8e:35:9e:d2:85:13:31:91:90:3b:03:0c:75:b0:95:3f:
32:68:6b:d6:8b:13:cb:79:f6:47:12:2d:d8:84:97:e3:d7:8c:
f1:ba:d6:9f:70:4c:15:5e:f0:bb:06:e5:ea:02:54:06:67:52:
3b:0a:21:7f:36:c2:b9:1b:10:1a:fe:3a:df:6f:d0:7b:d6:32:
ec:a2:56:02:01:4c:c2:46:e0:33:8c:80:ef:f3:88:0f:96:96:
c2:e1:e2:2a:3d:2d:08:99:a4:28:f8:1d:9d:94:9b:98:76:ee:
1a:e3:00:70:2b:cd:41:6f:f0:26:7d:1d:ca:43:0b:2b:bc:26:
b3:8a:de:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:35 2025 by rpki-client