Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/JOSO1JmulK_3UGT4DHh2rfgYfwY.roa
File: JOSO1JmulK_3UGT4DHh2rfgYfwY.roa (raw, json)
Hash identifier: EgfSLon34sQaHSqw1cjg97JzDl/x10iZFo3pqDa2iBE=
Subject key identifier: 24:E4:8E:D4:99:AE:94:AF:F7:50:64:F8:0C:78:76:AD:F8:18:7F:06
Certificate issuer: /CN=59cfe8128614d3325a8cec1833d73bb6a4698c0e
Certificate serial: 019425FCAF0D144E92A7A94FA1F816FDD5B0
Authority key identifier: 59:CF:E8:12:86:14:D3:32:5A:8C:EC:18:33:D7:3B:B6:A4:69:8C:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wc_oEoYU0zJajOwYM9c7tqRpjA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/JOSO1JmulK_3UGT4DHh2rfgYfwY.roa
Signing time: Thu 02 Jan 2025 07:48:24 +0000
ROA not before: Thu 02 Jan 2025 07:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 185.196.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:af:0d:14:4e:92:a7:a9:4f:a1:f8:16:fd:d5:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59cfe8128614d3325a8cec1833d73bb6a4698c0e
Validity
Not Before: Jan 2 07:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24e48ed499ae94aff75064f80c7876adf8187f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6d:da:44:5c:27:cd:05:c4:c9:d8:81:00:ab:
1b:0e:e8:ea:50:6c:f8:6f:ef:c5:1d:47:71:09:78:
e4:96:f5:07:50:99:af:1b:85:a3:bc:0a:07:d2:b5:
69:dd:84:1d:62:95:18:cd:ba:6f:07:05:91:5b:32:
0f:11:85:ca:c0:64:fa:7e:1e:a4:ee:49:d0:fd:c4:
4e:4a:15:fa:08:12:0a:5e:93:8f:84:29:4a:78:b4:
19:01:11:f4:6d:e5:b2:fe:84:ca:20:8b:a1:c8:a4:
f0:1b:b6:c4:02:cb:78:20:d8:82:c2:82:c7:b1:23:
2e:26:17:b2:04:ba:93:d9:5e:15:b9:ca:d7:10:4f:
23:7c:5b:e7:6e:25:93:78:ed:d1:a1:e1:c0:65:c4:
25:12:68:6a:d4:d4:0b:bb:7c:ec:20:bc:56:16:04:
c6:7a:75:26:dd:f8:e3:75:e1:d6:9b:e3:fe:ee:4a:
a3:c6:24:75:fd:57:c6:45:ba:b4:38:b2:c6:98:0e:
de:d5:3d:2c:f0:98:c3:cd:22:90:aa:00:b5:1a:36:
3a:99:c1:cc:ea:54:9c:74:63:ef:b3:01:db:16:de:
2f:c9:de:ca:3c:88:bf:08:8c:24:41:80:36:18:ed:
b7:dc:33:96:c4:8f:02:06:4e:88:e8:95:d9:eb:35:
87:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E4:8E:D4:99:AE:94:AF:F7:50:64:F8:0C:78:76:AD:F8:18:7F:06
X509v3 Authority Key Identifier:
keyid:59:CF:E8:12:86:14:D3:32:5A:8C:EC:18:33:D7:3B:B6:A4:69:8C:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wc_oEoYU0zJajOwYM9c7tqRpjA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/JOSO1JmulK_3UGT4DHh2rfgYfwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.74.0/24
Signature Algorithm: sha256WithRSAEncryption
38:bd:be:e5:ea:af:33:30:fa:2e:7e:83:3f:40:2a:f8:0e:db:
1d:43:b8:54:36:c2:30:63:5f:98:eb:a0:4f:68:cd:81:79:a4:
c0:00:dc:62:5e:54:e9:ff:21:8b:77:df:9a:2f:d3:d4:69:ac:
5d:f7:a1:d9:ad:af:df:19:06:21:fc:6d:f8:13:cf:13:f1:82:
20:79:73:25:54:85:46:b9:d2:3c:56:af:89:80:67:8e:84:28:
76:c8:bf:06:b8:91:7a:e3:26:f8:08:ce:20:36:7d:1c:31:93:
ea:24:63:70:bc:72:2d:59:83:25:69:7b:5b:25:cb:a3:8a:ef:
55:6b:25:df:26:7f:79:aa:da:c1:64:d9:73:e0:1f:09:ac:c6:
22:21:94:13:78:28:a1:5f:7b:3c:25:32:8a:a7:b8:c8:b5:4e:
c0:9f:bf:8c:9c:ee:3d:4a:f2:29:4e:50:3b:30:84:da:72:39:
54:91:21:3d:0f:4e:58:98:d0:20:93:83:d1:b1:71:f4:a7:63:
37:3d:0f:18:ab:5e:0e:0a:f1:74:2c:cb:c9:b9:a1:3f:84:3d:
88:df:4e:57:cc:95:36:02:04:ab:89:dc:02:6e:e8:41:8d:23:
94:36:e0:7c:2f:40:9f:cc:cc:7b:4f:57:77:99:2e:c3:9b:a0:
55:42:65:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:58 2025 by rpki-client