Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/JBCkmkN7TLYky4Fsa2gSyDNAKkc.roa
File: JBCkmkN7TLYky4Fsa2gSyDNAKkc.roa (raw, json)
Hash identifier: IBbS5qZGseNgJY3l7vbqALCeu4LGMN6jlDSM2xfjd/4=
Subject key identifier: 24:10:A4:9A:43:7B:4C:B6:24:CB:81:6C:6B:68:12:C8:33:40:2A:47
Certificate issuer: /CN=57e898bf420924f976b5ae451108b9e6a01fc7dc
Certificate serial: 019420685E4FB8384B0E8D95D64C2A56ED7F
Authority key identifier: 57:E8:98:BF:42:09:24:F9:76:B5:AE:45:11:08:B9:E6:A0:1F:C7:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/JBCkmkN7TLYky4Fsa2gSyDNAKkc.roa
Signing time: Wed 01 Jan 2025 05:48:18 +0000
ROA not before: Wed 01 Jan 2025 05:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207996
IP address blocks: 185.155.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:5e:4f:b8:38:4b:0e:8d:95:d6:4c:2a:56:ed:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57e898bf420924f976b5ae451108b9e6a01fc7dc
Validity
Not Before: Jan 1 05:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2410a49a437b4cb624cb816c6b6812c833402a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e3:a8:06:fc:9f:4e:99:31:2a:15:0f:52:23:
0d:85:9b:d2:03:4d:2c:62:de:a1:b9:e3:35:c8:e6:
10:4a:01:ab:41:d6:bf:38:11:00:b1:b1:47:54:17:
ce:a6:cc:60:d5:5c:98:89:20:fc:e2:f5:b1:cf:9f:
1c:d6:21:c2:9d:16:77:17:35:3a:4e:a2:72:09:16:
54:c4:3a:06:57:76:9f:4d:49:f5:bf:9b:56:1a:b3:
80:46:30:86:e8:fe:1d:1d:26:34:1f:96:47:f6:a3:
aa:8c:03:f4:d9:ed:e4:50:9c:a8:21:96:23:8e:76:
78:c8:13:59:8a:e2:e3:24:a8:2b:ca:ff:54:60:1e:
25:1d:76:42:9a:aa:ce:ff:87:21:c7:6d:59:1e:16:
2d:ff:94:c1:f0:ad:6c:77:be:9a:e1:a2:66:ac:54:
fd:a9:a3:56:95:0e:d5:0f:89:d2:00:c1:eb:b9:79:
f2:f6:25:8e:eb:d6:cd:2b:f3:dd:5a:36:68:bb:29:
73:4a:73:0a:74:bb:6c:ba:82:43:fd:3d:be:60:b6:
f0:fe:55:16:3e:a2:fe:46:e2:63:12:d9:17:04:3a:
54:1c:ce:c6:a0:e3:2f:a2:d5:87:bd:ed:ff:1f:04:
24:12:d8:f1:82:b6:2b:31:3d:48:cd:41:aa:a3:44:
25:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:10:A4:9A:43:7B:4C:B6:24:CB:81:6C:6B:68:12:C8:33:40:2A:47
X509v3 Authority Key Identifier:
keyid:57:E8:98:BF:42:09:24:F9:76:B5:AE:45:11:08:B9:E6:A0:1F:C7:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/JBCkmkN7TLYky4Fsa2gSyDNAKkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.29.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:6b:2e:5a:21:87:83:5b:ae:2c:36:7b:99:b3:94:da:b5:5c:
34:24:a3:24:bf:31:f9:a2:ee:eb:8f:6f:38:5d:08:c7:e2:d4:
87:32:fb:e0:4e:6d:44:7b:6f:20:48:f2:b4:58:23:b7:a0:be:
3d:7d:01:70:bc:7c:5c:c5:a5:f1:fb:b0:9c:8a:b5:da:81:5b:
d9:2a:9c:fa:64:a3:2d:14:74:30:d8:19:62:24:05:f2:7d:2d:
36:e8:d3:ab:b1:0c:a1:ca:8d:d0:10:a2:71:44:59:b0:8a:c2:
17:59:ba:a1:00:9f:f5:79:ed:7c:ce:9d:f9:34:a2:88:85:fd:
44:92:57:a3:39:89:7b:ce:29:cf:38:17:27:f0:4f:bd:93:92:
14:0a:e5:39:0f:68:33:9f:c7:6b:68:12:27:56:e6:a0:6a:13:
65:cc:c9:60:88:20:45:8c:d8:2f:e8:7e:77:88:16:87:8c:f9:
13:83:4a:bf:ef:91:54:ba:26:a2:6a:88:3f:60:74:32:47:67:
08:de:a0:46:49:d7:96:6b:d7:82:0d:32:b0:e2:44:72:ad:17:
66:cc:33:eb:13:a7:34:0a:29:b8:5d:76:4f:09:75:43:15:3c:
fe:8a:ef:8e:1b:a2:e4:09:aa:83:ae:9e:03:b0:47:c9:91:1a:
c0:ea:a2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:49:12 2025 by rpki-client