Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/jgcslWHmygjkRIS6MtfzGhZ40MU.roa
File: jgcslWHmygjkRIS6MtfzGhZ40MU.roa (raw, json)
Hash identifier: sDmrr8zpKt5WpBGAECM7NZQll745IxQeWlqllvJtGkM=
Subject key identifier: 8E:07:2C:95:61:E6:CA:08:E4:44:84:BA:32:D7:F3:1A:16:78:D0:C5
Certificate issuer: /CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a
Certificate serial: 0194214445E45C5CBAB9EA7CC0EBA045D2C6
Authority key identifier: 70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/jgcslWHmygjkRIS6MtfzGhZ40MU.roa
Signing time: Wed 01 Jan 2025 09:48:30 +0000
ROA not before: Wed 01 Jan 2025 09:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210858
IP address blocks: 185.141.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:45:e4:5c:5c:ba:b9:ea:7c:c0:eb:a0:45:d2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a
Validity
Not Before: Jan 1 09:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e072c9561e6ca08e44484ba32d7f31a1678d0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:66:3a:be:b9:d5:0a:0b:06:a0:ff:1b:4d:fe:
6c:59:79:49:2e:3c:48:e3:b1:05:b8:f4:f8:72:96:
7a:a3:13:93:73:34:c0:51:da:fb:73:51:b6:18:b8:
7a:a2:95:4b:a4:8e:09:fd:5b:cc:a4:b0:95:28:c2:
08:72:d8:38:de:55:16:3d:15:a0:b5:a0:4d:99:2a:
39:eb:7a:33:c3:59:81:8c:15:65:0f:ad:49:0f:21:
07:7e:d5:74:c4:45:c0:79:b0:a7:1d:7d:e2:8e:17:
3f:95:a9:25:d1:be:0b:56:e6:b4:5b:7c:53:27:66:
77:ac:42:33:c1:2f:20:6a:4d:b3:94:fd:c5:d5:0d:
b3:86:03:bb:72:29:ce:bd:0e:fc:13:3a:44:fd:cf:
4c:19:ba:93:4a:04:d2:fc:12:76:07:d8:be:0b:8b:
6e:fe:c4:cc:68:6e:79:40:c1:b0:f5:bd:7b:d4:c0:
e4:91:4f:58:f7:53:dc:aa:cf:1b:90:cb:6b:df:fd:
f4:db:39:e6:78:dc:d3:c1:ad:b4:f9:5d:6a:21:8b:
15:38:05:e1:eb:54:34:66:35:d2:9a:38:d2:8c:43:
37:8a:31:80:42:73:38:36:e4:44:dd:8f:42:f9:13:
a6:e2:c3:10:84:a7:e2:6b:cf:fa:6b:2f:d5:da:a5:
00:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:07:2C:95:61:E6:CA:08:E4:44:84:BA:32:D7:F3:1A:16:78:D0:C5
X509v3 Authority Key Identifier:
keyid:70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/jgcslWHmygjkRIS6MtfzGhZ40MU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.131.0/24
Signature Algorithm: sha256WithRSAEncryption
01:2a:f4:da:ac:af:df:4f:bc:dd:99:10:8f:7f:99:6b:45:c8:
4a:d8:87:98:6c:e2:f1:67:25:c2:bb:61:38:52:87:fc:c4:ca:
a9:a4:16:a4:06:37:a6:b3:1c:5f:bf:42:61:7b:e5:86:e5:66:
22:d2:75:aa:99:ef:79:67:16:b3:6b:42:33:c1:47:f1:f8:08:
eb:17:3d:1b:b3:7f:04:69:08:82:a5:cf:ea:df:35:07:e0:17:
fe:5c:d5:e8:55:bf:b6:f2:10:a7:31:09:f2:b4:71:3a:f0:21:
72:5f:8e:50:e9:65:3c:76:c9:d0:39:23:b4:92:e6:ca:7a:00:
20:ad:ee:7d:2c:be:8e:f0:69:69:03:1d:a8:6d:b7:ff:46:b1:
b0:4d:0f:6a:25:98:87:65:e3:0b:d4:88:a8:9f:e0:6d:50:99:
1d:a5:30:dc:2e:b3:b4:43:a0:22:0b:0b:29:42:26:0a:b7:71:
d3:c9:d9:8a:f4:be:88:aa:43:e5:94:ea:db:2b:ce:78:dc:c8:
e5:24:8c:30:12:53:50:f5:90:1a:4c:b6:7c:9c:22:7a:5f:a7:
48:8f:57:ce:ea:9f:ba:1c:4f:6d:01:c3:ec:1a:1e:81:08:d3:
16:37:88:a1:f3:36:25:9f:27:cd:20:42:8e:3f:18:7a:8f:07:
e3:31:f5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:10:09 2025 by rpki-client