Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/Jc6JT4xshgQRG7HUAK1HtP9BkTI.roa
File: Jc6JT4xshgQRG7HUAK1HtP9BkTI.roa (raw, json)
Hash identifier: hCl5v0Z86Jy7+0GlCW+6oKfv2bUVufzYinCdryb0Gzo=
Subject key identifier: 25:CE:89:4F:8C:6C:86:04:11:1B:B1:D4:00:AD:47:B4:FF:41:91:32
Certificate issuer: /CN=2dc9cb5302d8d13fe91e80f5cbd1fbacbc014827
Certificate serial: 01942747969794462B3A618BFDBB18E8F319
Authority key identifier: 2D:C9:CB:53:02:D8:D1:3F:E9:1E:80:F5:CB:D1:FB:AC:BC:01:48:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/Jc6JT4xshgQRG7HUAK1HtP9BkTI.roa
Signing time: Thu 02 Jan 2025 13:49:50 +0000
ROA not before: Thu 02 Jan 2025 13:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41242
IP address blocks: 81.31.48.0/20 maxlen: 20
193.142.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:96:97:94:46:2b:3a:61:8b:fd:bb:18:e8:f3:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc9cb5302d8d13fe91e80f5cbd1fbacbc014827
Validity
Not Before: Jan 2 13:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25ce894f8c6c8604111bb1d400ad47b4ff419132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ca:6c:06:fc:1a:92:05:d1:7e:8e:59:2c:e4:
77:e4:3d:48:f9:89:c3:26:7e:b4:4f:2e:5f:9e:b5:
29:40:ce:04:11:13:bb:a7:28:5a:49:80:d8:cb:22:
e5:d5:dd:ab:6e:35:25:86:14:24:04:4c:41:ff:76:
c3:95:3c:ce:cc:92:27:a4:b7:2a:33:80:04:6a:ef:
75:e7:b5:40:9d:c8:34:2e:60:94:10:4b:00:26:37:
ef:f4:37:49:02:1a:39:f9:fd:84:ea:72:fc:77:00:
ed:0e:8a:1c:3d:82:c2:21:9a:70:73:02:4c:7d:90:
c8:a8:28:e1:8d:a2:35:e4:f8:e9:dd:42:c0:da:5a:
17:6a:e6:c9:2c:b2:fe:4d:57:88:51:0b:5c:48:3c:
2a:c2:db:79:62:2c:e5:d2:b6:86:63:d3:16:12:ff:
0f:e3:ba:eb:76:5a:27:a1:38:fd:18:12:c2:a8:85:
27:99:39:c9:10:0c:b9:b3:47:08:32:93:92:17:f4:
48:7f:60:ab:41:db:c8:8f:de:e9:59:44:ce:1d:79:
1a:ff:ed:c7:ba:28:2c:6b:30:d4:cd:a4:99:70:62:
b1:dd:26:7d:3f:7d:af:80:c7:d4:c7:fa:63:f3:42:
fb:70:5b:06:3c:dc:1d:f8:b5:26:a9:f0:92:fa:44:
07:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CE:89:4F:8C:6C:86:04:11:1B:B1:D4:00:AD:47:B4:FF:41:91:32
X509v3 Authority Key Identifier:
keyid:2D:C9:CB:53:02:D8:D1:3F:E9:1E:80:F5:CB:D1:FB:AC:BC:01:48:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/Jc6JT4xshgQRG7HUAK1HtP9BkTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.48.0/20
193.142.121.0/24
Signature Algorithm: sha256WithRSAEncryption
89:88:63:49:16:1a:5b:10:43:9f:02:f6:c6:81:5b:92:bf:3f:
0f:e8:5c:b2:3c:6a:b2:fe:f4:a7:0d:dc:4b:f4:d1:f0:94:c3:
fd:4c:c9:9c:82:26:a5:aa:a8:ce:20:be:08:84:f2:4c:fd:09:
6e:78:c8:c0:07:61:50:39:85:f4:01:60:a3:9e:92:c0:cf:bd:
a4:aa:b1:95:93:31:fc:6e:c9:df:cf:9a:14:8d:0b:21:97:41:
c2:f0:39:4e:c0:69:2b:d7:7f:04:e1:29:2e:de:3e:6d:ff:38:
7c:ee:15:9c:ae:c0:e6:6c:43:5e:e8:50:6a:7c:01:63:c7:a2:
a6:aa:4f:73:de:3c:75:f8:95:c2:67:3c:14:4f:a8:35:1e:2c:
ba:58:67:77:8f:a7:97:90:d2:62:ee:8d:f8:a9:f1:67:b9:2d:
9c:0c:7c:5e:1a:fb:a6:94:d7:ee:63:f1:d5:3d:8d:b0:b4:e0:
09:f0:07:06:11:74:3a:2d:3d:06:5e:03:09:15:3e:77:e0:2f:
3c:14:4e:b2:1e:b8:65:ea:62:1d:8b:d9:bd:04:2e:75:06:69:
3e:8e:8c:d1:8a:a9:46:4c:9c:2a:14:bb:18:3a:e7:31:54:10:
f5:6a:92:29:c5:c4:3f:a0:7b:6d:fa:be:dd:7a:95:e6:24:bd:
f9:e8:ff:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:44:33 2025 by rpki-client