Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/jPqjPZ927oU6pe2k5ljy1515_Bc.roa
File: jPqjPZ927oU6pe2k5ljy1515_Bc.roa (raw, json)
Hash identifier: 1wwmQ4EiI2fcY7sas0ylQShSCsBsDc+FRheBv820+D4=
Subject key identifier: 8C:FA:A3:3D:9F:76:EE:85:3A:A5:ED:A4:E6:58:F2:D7:9D:79:FC:17
Certificate issuer: /CN=bbffc9a9832667ac0d6d1e2406550533c3b55618
Certificate serial: 0194228E42D2271D1746EC1DEC0F8A896650
Authority key identifier: BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/jPqjPZ927oU6pe2k5ljy1515_Bc.roa
Signing time: Wed 01 Jan 2025 15:48:56 +0000
ROA not before: Wed 01 Jan 2025 15:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212103
IP address blocks: 194.115.182.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:42:d2:27:1d:17:46:ec:1d:ec:0f:8a:89:66:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbffc9a9832667ac0d6d1e2406550533c3b55618
Validity
Not Before: Jan 1 15:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8cfaa33d9f76ee853aa5eda4e658f2d79d79fc17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:13:f9:f1:d0:5d:f6:82:da:ee:b6:e2:a2:75:
51:1c:4f:b3:00:92:62:ba:0e:ae:58:dc:d8:0a:43:
c1:8e:76:c0:9a:11:44:4e:fa:24:b0:2d:1f:0d:d1:
fe:c1:88:52:0e:88:81:9f:bf:24:9d:94:1f:85:5a:
11:53:5c:b2:77:52:14:9d:7e:11:10:92:e1:dd:96:
8f:c6:68:d0:ae:a2:8c:c0:8a:03:3c:43:dd:be:da:
a6:1e:1c:42:87:a4:27:c0:9d:d3:1e:93:07:4f:5b:
67:6a:b7:e9:54:5d:2a:33:16:b8:ca:e1:45:9a:0f:
81:1b:46:e2:a0:70:27:44:84:1b:3f:46:84:cb:e4:
64:03:01:77:e1:12:49:3e:c6:0c:d1:a1:d1:4d:0b:
2c:99:12:9d:93:29:fa:a7:40:0e:69:3d:5b:5b:9b:
6b:e5:1f:cc:39:cb:7a:c0:16:04:0d:e9:b8:71:3c:
37:66:be:4e:4a:6e:00:7e:81:c6:e5:aa:2c:95:db:
a3:6f:33:69:10:ec:69:f1:92:fb:e1:f7:f2:c3:cf:
fc:0e:5e:2b:05:ea:33:92:43:5d:8a:ea:51:bb:26:
21:07:7f:8b:c7:1f:0b:68:8c:31:2b:43:66:b5:36:
72:d6:3a:df:6c:77:c5:b3:8f:12:5a:2e:fd:ff:d6:
17:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FA:A3:3D:9F:76:EE:85:3A:A5:ED:A4:E6:58:F2:D7:9D:79:FC:17
X509v3 Authority Key Identifier:
keyid:BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/jPqjPZ927oU6pe2k5ljy1515_Bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.115.182.0/23
Signature Algorithm: sha256WithRSAEncryption
04:66:a2:be:da:93:d6:19:a5:34:4b:61:3e:ed:08:85:0b:b3:
7e:b4:d3:4f:ed:56:43:93:fc:6f:91:8c:18:c1:16:95:2e:b3:
5c:67:27:9f:05:7c:42:7d:8f:d3:62:45:25:96:a2:36:8b:4b:
10:2b:09:90:60:79:0b:98:3a:02:40:38:8d:e4:1b:a3:57:cd:
ca:90:30:c9:16:cb:2a:6a:67:9a:83:1b:5c:fe:38:7f:c5:90:
8a:35:4b:66:d5:a6:63:de:e4:32:ad:1e:3d:06:46:48:4f:36:
5d:a5:be:4c:45:23:09:f3:74:7d:52:41:3e:12:a1:99:16:83:
23:56:4d:ca:54:39:45:c9:5f:f3:57:14:12:75:d0:08:ac:c0:
1c:6b:11:a1:9d:4e:46:b9:84:ce:7b:38:58:ca:6f:0a:e0:fd:
23:d8:6f:57:e6:ec:fd:0d:56:d2:4b:42:92:7a:02:73:0a:e1:
68:3d:8b:c3:c0:99:ef:0c:ef:57:5d:be:4b:0b:5f:84:b1:48:
b1:26:1a:a9:2b:51:9a:af:15:92:46:80:b2:a4:3b:ff:78:19:
5f:50:ef:70:83:ec:be:9a:91:7f:0e:c4:46:d5:58:68:c6:6a:
6f:e6:d3:5e:83:8d:d2:fc:a2:7e:54:55:15:7f:bb:fa:b2:8f:
17:17:c7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:30 2025 by rpki-client