Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/750246-1e76-4358-8ac9-38510277816d/1/jLFjGGi3DsXXO1DF-YaagmDJrT0.roa
File: jLFjGGi3DsXXO1DF-YaagmDJrT0.roa (raw, json)
Hash identifier: dfWKjUkcL6GA+qRR4dhpVAIAiiYPUx6ql9TMhCEIh/Q=
Subject key identifier: 8C:B1:63:18:68:B7:0E:C5:D7:3B:50:C5:F9:86:9A:82:60:C9:AD:3D
Certificate issuer: /CN=f1740fc30cd6c6ca5f80a29a1be7d1834623ce8f
Certificate serial: 01856B0A2D4A740625577CB33848DAFB127B
Authority key identifier: F1:74:0F:C3:0C:D6:C6:CA:5F:80:A2:9A:1B:E7:D1:83:46:23:CE:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XQPwwzWxspfgKKaG-fRg0Yjzo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/750246-1e76-4358-8ac9-38510277816d/1/jLFjGGi3DsXXO1DF-YaagmDJrT0.roa
Signing time: Sun 01 Jan 2023 01:55:07 +0000
ROA not before: Sun 01 Jan 2023 01:55:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 195.225.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:0a:2d:4a:74:06:25:57:7c:b3:38:48:da:fb:12:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1740fc30cd6c6ca5f80a29a1be7d1834623ce8f
Validity
Not Before: Jan 1 01:55:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8cb1631868b70ec5d73b50c5f9869a8260c9ad3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0a:4c:a6:53:d5:82:8e:a2:e6:43:94:9c:70:
bc:5f:d5:32:06:df:6c:e7:18:77:0b:4b:15:bf:2c:
dc:97:44:2d:9c:3d:1d:ea:42:85:4e:3a:ef:9f:37:
ac:d6:b4:ba:9a:fe:56:89:86:ec:14:4b:5d:52:fe:
09:76:46:d5:e2:c6:c6:f7:17:59:eb:81:1e:6d:e9:
9e:37:6b:93:ac:dd:dd:65:be:f2:93:b4:5f:d2:32:
41:d5:67:35:e9:b4:5e:01:62:04:14:7c:86:41:47:
9c:39:c8:cd:c4:40:a2:df:70:28:a9:98:64:e9:ff:
88:e1:da:29:44:d9:f3:5d:e7:99:19:03:29:16:ee:
d4:1b:ea:3f:7f:25:7a:e6:f0:66:91:18:fd:a7:4f:
ea:d0:fe:66:10:7e:4f:5d:bf:54:d7:f7:1a:bd:66:
58:f1:32:82:4e:aa:27:7f:9c:3f:5c:d7:59:01:41:
5b:10:72:67:c4:60:e9:b8:4d:bd:86:f5:5b:6e:3c:
24:53:6e:a6:c5:72:36:13:70:cb:5e:5b:76:db:32:
6f:74:02:8c:c9:fc:58:0f:d5:ae:fe:cd:ea:44:0a:
28:42:19:a6:fa:1a:bf:c8:bc:98:c2:8c:18:c7:6c:
ef:fd:27:ec:52:66:e8:07:33:8f:02:f0:4b:50:b6:
5a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B1:63:18:68:B7:0E:C5:D7:3B:50:C5:F9:86:9A:82:60:C9:AD:3D
X509v3 Authority Key Identifier:
keyid:F1:74:0F:C3:0C:D6:C6:CA:5F:80:A2:9A:1B:E7:D1:83:46:23:CE:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XQPwwzWxspfgKKaG-fRg0Yjzo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/750246-1e76-4358-8ac9-38510277816d/1/jLFjGGi3DsXXO1DF-YaagmDJrT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/750246-1e76-4358-8ac9-38510277816d/1/8XQPwwzWxspfgKKaG-fRg0Yjzo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.83.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:95:d2:93:a2:b3:68:be:a8:6b:d7:d7:a6:2f:2f:59:f7:40:
b4:99:ae:93:a5:bf:d6:5a:99:97:27:88:2f:43:60:42:f1:bd:
99:6c:e0:88:f3:b4:b6:ec:41:5a:e7:9d:66:62:24:b4:91:eb:
55:6f:4b:f7:89:ed:36:b4:da:95:d3:92:51:f8:da:58:4e:39:
d0:1d:2f:cd:7a:59:87:c5:7f:81:16:ca:8d:c4:67:9a:76:a7:
99:b1:b3:1b:b9:5c:83:44:c8:78:36:c0:69:07:74:d7:09:bf:
e6:45:d5:fe:ba:29:3d:e5:f4:75:f9:c3:30:71:7f:fa:d6:78:
0b:a1:0e:e8:86:31:b3:d6:7b:15:d5:c9:b4:43:9b:e0:a7:1c:
cc:6a:43:bb:9d:4a:66:a6:2f:38:8d:2b:74:87:cd:cf:24:f4:
63:09:85:fd:a6:3a:5d:13:10:11:a8:1f:4d:2b:1c:8d:c6:83:
33:2c:c0:f7:79:d7:b2:f1:1f:6a:0a:d9:40:1b:67:17:8d:28:
bd:06:d3:f5:eb:ff:f1:63:d1:2f:d4:08:c8:38:22:a1:2d:8c:
b8:9b:ac:c0:5c:10:13:91:90:5a:dc:51:30:0f:44:cf:64:8a:
c7:d6:4c:10:4b:2a:e1:34:62:9d:7d:5d:62:d9:da:5b:8a:7e:
14:ac:23:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:45:40 2025 by rpki-client