Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/Jbshh5-Y5wAYjNhv_trKB-ylliE.roa
File: Jbshh5-Y5wAYjNhv_trKB-ylliE.roa (raw, json)
Hash identifier: 5xQE2hOATpkYgRTE2YQwm3+KGl3F12kDMLW5EC6YqT8=
Subject key identifier: 25:BB:21:87:9F:98:E7:00:18:8C:D8:6F:FE:DA:CA:07:EC:A5:96:21
Certificate issuer: /CN=1942817a29882d433bf1bb8ebc59b2ff256e803f
Certificate serial: 0194221FE9EB5FFA1BBC756868598EC47EDC
Authority key identifier: 19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/Jbshh5-Y5wAYjNhv_trKB-ylliE.roa
Signing time: Wed 01 Jan 2025 13:48:24 +0000
ROA not before: Wed 01 Jan 2025 13:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214945
IP address blocks: 31.130.168.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e9:eb:5f:fa:1b:bc:75:68:68:59:8e:c4:7e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1942817a29882d433bf1bb8ebc59b2ff256e803f
Validity
Not Before: Jan 1 13:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25bb21879f98e700188cd86ffedaca07eca59621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e9:a5:51:27:e1:30:ae:48:65:fe:6e:e4:c2:
0e:a0:4e:57:e4:d1:bb:83:4b:7a:7f:94:bf:9d:3b:
25:cf:e6:4b:2e:83:22:91:18:6f:04:46:eb:73:2a:
52:2b:ec:fc:89:33:76:9b:89:b6:34:bf:77:d1:80:
d4:a2:f3:11:e1:df:95:aa:2c:2d:88:4a:f9:59:15:
1f:69:f8:90:7e:aa:20:95:ad:06:03:a8:fa:e2:66:
c6:8f:5e:1f:b7:d0:9d:41:a2:a4:16:20:2c:c9:1c:
a7:3c:e6:f0:79:14:99:88:24:90:45:b5:9d:2a:81:
82:c5:78:a5:b9:51:05:ad:0f:de:95:22:d0:a7:b3:
81:4f:d8:05:74:e5:91:bd:b1:b0:61:e7:1d:bd:2c:
e4:cd:ba:47:2c:c2:b9:29:6b:77:55:0c:09:aa:ca:
a0:37:b0:58:52:31:94:b2:ab:e0:86:52:1c:b5:40:
d9:22:07:66:42:99:e0:8a:48:42:e7:fb:08:43:c8:
fb:41:33:fb:f7:91:48:97:b3:69:56:0b:86:cf:7c:
27:13:b7:26:3a:2a:f3:50:f4:f0:bc:75:d3:a0:d3:
8e:9d:cf:3d:81:37:39:5b:0f:45:2f:31:39:11:a5:
2d:d5:dc:c4:f5:b6:be:6c:f7:5f:53:39:ab:d5:21:
8d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BB:21:87:9F:98:E7:00:18:8C:D8:6F:FE:DA:CA:07:EC:A5:96:21
X509v3 Authority Key Identifier:
keyid:19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/Jbshh5-Y5wAYjNhv_trKB-ylliE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.168.0/21
Signature Algorithm: sha256WithRSAEncryption
89:0b:6c:40:1f:98:c4:57:b6:03:b9:b7:7b:09:5c:fe:7c:75:
31:b1:34:65:63:09:1b:bc:8c:10:13:59:d2:b7:fd:22:a0:ac:
8e:42:31:c3:ac:02:82:0d:73:31:bb:dc:db:73:50:b8:9c:18:
b1:aa:e8:12:c2:65:94:24:8b:3e:bb:a2:d4:f4:39:e7:b4:1d:
06:04:b5:9b:70:f3:03:ff:1d:87:87:98:5f:d4:13:0a:05:7d:
f6:87:5d:7b:6f:06:32:a1:2e:2b:19:cf:02:1e:93:71:77:b9:
c8:ce:78:18:d7:b8:ca:ef:94:e4:9f:92:54:0d:6d:82:bc:10:
de:30:6f:ca:69:2c:91:e6:43:25:a4:0f:2c:3e:31:88:f6:0e:
d7:f1:50:72:fb:e8:d7:d3:53:92:21:55:f3:b9:75:66:40:16:
85:a7:ff:c1:ac:ab:3b:7b:0d:3f:51:80:bd:5e:d7:5e:b1:2f:
68:ee:48:24:97:44:51:b8:4c:0d:50:47:f0:27:47:2a:73:f1:
1e:cc:ee:ee:cd:fa:39:28:5c:2c:82:e7:ac:79:5b:7b:3c:58:
fb:3c:87:8a:bf:10:a5:ed:d7:da:2b:71:ca:ea:38:8b:e5:a4:
d0:ce:94:7c:69:4b:17:34:5a:fb:82:f1:ba:65:64:92:9b:24:
e8:68:94:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:35:16 2025 by rpki-client