Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/jvqaPKegN_TBTkX1iGxxtfLozMg.roa
File: jvqaPKegN_TBTkX1iGxxtfLozMg.roa (raw, json)
Hash identifier: XuER/cHOoxfeKVPHA4CmD36sE1MXBYBHja2ydtJkaoY=
Subject key identifier: 8E:FA:9A:3C:A7:A0:37:F4:C1:4E:45:F5:88:6C:71:B5:F2:E8:CC:C8
Certificate issuer: /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Certificate serial: 0194266BD01B7698D31AF2DA7ECA5FA19A86
Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/jvqaPKegN_TBTkX1iGxxtfLozMg.roa
Signing time: Thu 02 Jan 2025 09:49:47 +0000
ROA not before: Thu 02 Jan 2025 09:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215625
IP address blocks: 46.235.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d0:1b:76:98:d3:1a:f2:da:7e:ca:5f:a1:9a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Validity
Not Before: Jan 2 09:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8efa9a3ca7a037f4c14e45f5886c71b5f2e8ccc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:76:65:69:85:47:46:a2:13:d0:62:e0:3e:e9:
8d:9a:aa:f9:54:bc:39:6e:b7:7d:63:3b:63:51:23:
61:ce:c1:bb:e5:1c:ba:2f:67:4d:0f:85:a5:87:01:
12:9c:36:28:49:90:99:68:1c:f7:b0:7b:f4:01:f1:
f0:87:b3:54:2f:b9:55:26:2b:4f:04:dc:a2:f6:61:
1c:1b:ba:cd:9e:1e:fc:e3:e7:12:6d:87:83:3e:c2:
90:39:c9:ca:6f:f0:06:ab:75:a0:25:be:97:e3:f7:
40:59:f7:fa:b3:a1:fd:08:cf:83:8b:95:4a:45:7e:
c1:b4:84:67:fc:77:cf:45:f0:f5:66:03:5a:57:33:
80:f7:82:99:4d:20:95:ac:c5:38:89:cc:79:dd:da:
6c:7e:30:f8:55:13:13:0c:80:f0:18:ba:03:e6:5b:
7d:5b:b1:ac:c2:85:d7:16:e9:f3:2c:0c:63:c9:70:
1b:2b:d3:a1:a5:15:74:8d:18:42:5b:cb:0c:c0:2e:
01:16:bf:da:7b:e4:04:d3:1e:28:ff:d8:30:e6:aa:
a9:9a:96:2e:4d:8f:3a:e9:8e:26:79:dd:cc:bf:7d:
66:ad:aa:39:d2:c4:bd:81:ce:40:31:3a:58:ce:e8:
57:1e:1a:a6:22:23:57:36:80:72:db:51:f8:ad:e2:
e6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FA:9A:3C:A7:A0:37:F4:C1:4E:45:F5:88:6C:71:B5:F2:E8:CC:C8
X509v3 Authority Key Identifier:
keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/jvqaPKegN_TBTkX1iGxxtfLozMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.12.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:6a:6a:35:44:02:59:65:10:a3:18:1f:2c:c5:92:47:68:3d:
32:a4:00:8e:68:27:9b:e5:75:a6:8d:2d:f8:e6:63:b1:91:e4:
fa:f2:26:23:2f:68:52:21:ed:7f:71:cb:40:df:88:67:e1:8b:
36:f9:37:6f:87:14:af:1a:b1:2e:be:d5:cb:a4:d7:41:fb:83:
c4:be:83:62:9e:c5:f3:15:d5:2a:eb:a6:be:e9:7d:ed:fc:12:
1e:da:56:e5:88:d0:2c:92:37:20:02:0a:c3:ab:5e:31:7c:c8:
3e:be:fb:ca:9c:d6:7f:2e:c3:97:ba:4f:1f:47:a0:6f:5c:77:
f2:62:c6:4f:66:8b:42:27:69:ea:7a:bc:52:75:ee:d2:17:45:
ed:a2:07:a9:c4:5c:52:c2:f0:6c:f6:37:97:aa:4d:4e:1a:e0:
11:fc:c9:22:0f:3b:24:81:2a:a9:3b:92:3f:07:f8:ff:b8:14:
63:2d:ec:44:d4:46:95:fe:9c:1c:9b:33:55:53:0f:3b:60:d0:
14:7a:aa:3a:43:fe:9d:e6:68:6c:36:ca:e5:68:19:29:b1:41:
fe:3a:0a:1e:8f:30:ef:0d:c4:17:98:31:7f:1a:28:d8:55:4e:
06:76:cc:10:15:0b:dc:ca:2e:fa:68:13:a7:92:82:9e:e2:07:
3c:96:d6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:57:36 2025 by rpki-client