Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/jq_DhvsvzcmCaUw_lDmYlqXK-R4.roa
File: jq_DhvsvzcmCaUw_lDmYlqXK-R4.roa (raw, json)
Hash identifier: KOvHH56ipvWyjeOuOBdWhq6OhJFqmAAlbbCXs8yab8k=
Subject key identifier: 8E:AF:C3:86:FB:2F:CD:C9:82:69:4C:3F:94:39:98:96:A5:CA:F9:1E
Certificate issuer: /CN=b5e97fbe67d95df6e4a8065e2675e040d6e80efc
Certificate serial: 0194282617329967D938B24BB1CCEA1508FD
Authority key identifier: B5:E9:7F:BE:67:D9:5D:F6:E4:A8:06:5E:26:75:E0:40:D6:E8:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/jq_DhvsvzcmCaUw_lDmYlqXK-R4.roa
Signing time: Thu 02 Jan 2025 17:52:52 +0000
ROA not before: Thu 02 Jan 2025 17:52:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201593
IP address blocks: 194.49.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:17:32:99:67:d9:38:b2:4b:b1:cc:ea:15:08:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5e97fbe67d95df6e4a8065e2675e040d6e80efc
Validity
Not Before: Jan 2 17:52:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8eafc386fb2fcdc982694c3f94399896a5caf91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:73:13:13:02:45:43:f2:f0:b0:8b:09:1f:0f:
90:b2:6d:55:b9:90:eb:82:b1:6e:37:ec:e3:0e:57:
07:d0:e9:8b:8a:0e:f9:ea:06:eb:1b:68:e2:f4:b1:
69:e1:3b:ea:a5:3b:8f:9c:05:64:a8:d5:a1:41:dc:
0c:dc:cb:4f:a2:d1:7f:c6:6c:ae:75:b9:04:c4:4f:
aa:9f:cd:d4:a2:73:d5:6d:e0:26:60:26:cc:e4:bf:
6b:82:54:1e:91:51:2d:4c:02:5d:81:e3:6d:33:2e:
34:fc:5a:29:48:b1:cc:27:f9:0a:23:de:57:d1:3b:
29:cd:b0:8e:1d:c2:6b:30:05:d7:61:de:52:9a:28:
e3:3a:d7:fa:d6:04:5b:0b:87:d6:0e:a5:ad:1f:b5:
b4:e9:be:8d:91:c1:c7:e5:f6:5f:fd:da:c4:65:be:
cd:36:ad:11:64:73:c7:5f:fb:f4:f6:43:08:f1:76:
10:94:d3:b0:47:6e:1c:1f:7a:d1:70:39:9f:88:03:
5a:22:5a:ea:4a:9d:de:bb:64:fe:4f:6c:28:23:fb:
8b:57:df:26:62:91:2c:a6:1d:62:16:64:77:c0:87:
e0:13:c2:54:ef:f2:4e:20:df:59:4f:6b:33:b7:3d:
d9:aa:1f:22:3c:27:bf:ac:02:8c:32:46:95:d6:66:
88:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AF:C3:86:FB:2F:CD:C9:82:69:4C:3F:94:39:98:96:A5:CA:F9:1E
X509v3 Authority Key Identifier:
keyid:B5:E9:7F:BE:67:D9:5D:F6:E4:A8:06:5E:26:75:E0:40:D6:E8:0E:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/jq_DhvsvzcmCaUw_lDmYlqXK-R4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.127.0/24
Signature Algorithm: sha256WithRSAEncryption
49:70:da:4f:49:09:ff:a0:57:60:d4:ed:2f:b8:19:92:18:68:
92:7e:41:62:59:f9:0b:63:81:e0:e4:fe:2e:25:03:03:1c:f1:
a3:8a:74:ad:8d:93:f6:2d:1f:aa:cd:ab:9f:3a:b7:07:ce:2e:
6d:9f:83:c5:ac:aa:a1:27:f5:96:8b:43:53:a7:2e:0f:46:7b:
e6:0b:d1:3e:30:d2:0a:1e:db:3d:09:a8:0d:e9:2a:6b:32:75:
82:4c:07:83:c5:f7:a2:e5:5a:4c:f6:5a:f0:c9:6a:da:50:6b:
18:33:1b:4a:8f:c4:c4:fd:95:ec:8d:fc:e3:94:cb:dd:db:fc:
3d:9e:66:e5:71:23:e7:a2:b0:ab:6d:50:0c:fb:1b:67:0b:05:
65:b6:8e:25:e7:6a:d9:84:c7:ca:45:22:9a:40:8b:47:bc:32:
f9:3f:36:80:b2:fb:34:ca:a9:b6:e7:94:53:aa:3b:ed:b9:ac:
b6:ce:31:a7:73:66:71:2c:3e:35:c2:fa:67:98:99:eb:fc:92:
90:df:a6:46:c3:07:3a:e6:b6:92:07:77:e9:20:cb:58:c6:5d:
db:0a:a9:ca:96:59:41:c8:df:4c:19:ea:f9:67:55:6a:af:c4:
8b:ba:87:37:2b:80:70:80:3f:7d:d4:1f:c3:de:b9:28:bd:07:
01:78:ab:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:19:52 2025 by rpki-client