Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/jt_bpQ7wQn4N01cElDM8r2IOsmI.roa
File: jt_bpQ7wQn4N01cElDM8r2IOsmI.roa (raw, json)
Hash identifier: GgQzhFNU7uWs4AdJTOnRp3Y7O5Y8aHCJwyZrS0rRldA=
Subject key identifier: 8E:DF:DB:A5:0E:F0:42:7E:0D:D3:57:04:94:33:3C:AF:62:0E:B2:62
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018D16508D336375A8559EACA0E9EF435DED
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/jt_bpQ7wQn4N01cElDM8r2IOsmI.roa
Signing time: Wed 17 Jan 2024 07:26:34 +0000
ROA not before: Wed 17 Jan 2024 07:26:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56769
IP address blocks: 31.15.20.0/24 maxlen: 24
192.162.66.0/24 maxlen: 24
192.162.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:16:50:8d:33:63:75:a8:55:9e:ac:a0:e9:ef:43:5d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 17 07:26:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8edfdba50ef0427e0dd3570494333caf620eb262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3a:17:c8:5b:38:8e:a3:12:78:bf:1e:fc:94:
9a:73:83:b4:1e:ef:b2:f7:0f:99:8a:f0:52:90:57:
f0:95:6e:ed:5f:1f:01:8e:c8:36:2f:43:de:df:bd:
5a:98:70:81:dc:45:e5:39:a0:dc:1f:04:ce:79:96:
88:f4:1e:78:12:15:9c:f3:fb:ec:50:cc:ab:83:0f:
02:bb:42:9b:e0:70:de:14:b2:0f:10:e3:f4:86:ca:
6d:1c:66:e3:54:ee:7e:cc:3e:25:fc:8b:3c:cb:2b:
e1:4e:44:18:4c:39:aa:07:b7:c9:ff:87:b7:a8:51:
8a:4e:f6:d1:6a:83:5a:1f:67:40:b5:eb:2d:2e:41:
cd:92:3b:b2:6a:38:57:2b:d9:4b:af:9b:f8:d9:a1:
ec:b6:85:8e:11:d2:fb:02:68:b5:5c:4c:3a:31:b3:
72:3e:bd:34:8b:fc:85:00:64:5d:65:62:46:9b:90:
70:e6:a4:0a:7e:e6:13:c7:f6:4a:2c:df:36:09:76:
a9:a4:fc:f0:0a:2c:39:5d:6f:e3:07:c8:ab:62:b7:
ec:76:fa:2a:2f:b8:e1:15:f8:4f:6d:70:03:5b:38:
df:ed:eb:f7:21:35:3d:be:66:95:55:57:01:f9:00:
ae:df:2c:8a:db:68:1a:ff:8e:40:38:60:f9:b0:3e:
46:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DF:DB:A5:0E:F0:42:7E:0D:D3:57:04:94:33:3C:AF:62:0E:B2:62
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/jt_bpQ7wQn4N01cElDM8r2IOsmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.20.0/24
192.162.66.0/23
Signature Algorithm: sha256WithRSAEncryption
cb:0b:79:f9:54:d8:cd:8e:16:5f:fc:38:63:13:6f:25:d3:36:
e3:23:df:37:fb:8a:e8:41:41:75:ea:dc:44:10:6b:d6:13:a4:
68:80:c7:26:28:b2:74:40:86:49:2e:02:c2:c1:c3:41:e7:8c:
5f:80:ab:0d:05:ed:37:06:56:b0:3a:20:63:34:7d:74:9d:17:
19:3a:8e:96:44:b6:53:38:79:38:6a:4e:8b:50:41:d2:ec:be:
37:c0:45:33:66:0c:a0:5f:26:aa:c7:e7:ca:3e:7a:54:24:64:
99:9e:21:52:b8:a3:fe:7f:48:c1:fc:24:d5:58:39:29:e2:58:
30:f9:c4:17:dc:e5:b2:23:0f:6f:12:2e:56:d0:20:8b:e8:83:
fd:88:ec:49:c6:96:a9:39:07:bb:01:b2:d8:1a:75:85:b4:4e:
1e:f6:78:a6:e8:42:f2:b0:4d:d3:8a:17:6d:e4:d3:53:e5:f4:
9c:6c:f8:f7:e6:68:0f:28:c8:66:98:d7:e9:bf:15:f0:ca:b6:
bc:b6:1c:a7:06:d3:77:c9:ad:57:97:3f:10:5b:1e:ae:17:b6:
cb:43:52:17:7b:80:52:95:08:a3:fd:01:6a:81:1c:4d:ae:77:
52:ef:06:e8:1b:03:df:0a:b7:06:69:24:18:3d:a7:df:3c:56:
dd:2d:69:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:00:44 2025 by rpki-client