Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/jLM5t3eg01fijHX5BZDxTUjpEGU.roa
File: jLM5t3eg01fijHX5BZDxTUjpEGU.roa (raw, json)
Hash identifier: zlqEOh5qlKElj+/BR3gY6unzfRt8ygL6XM3lywwcPBU=
Subject key identifier: 8C:B3:39:B7:77:A0:D3:57:E2:8C:75:F9:05:90:F1:4D:48:E9:10:65
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019426D9C51A4C21CE31B718E356B49BF794
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/jLM5t3eg01fijHX5BZDxTUjpEGU.roa
Signing time: Thu 02 Jan 2025 11:49:53 +0000
ROA not before: Thu 02 Jan 2025 11:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8203
IP address blocks: 192.115.8.0/22 maxlen: 22
192.115.8.0/24 maxlen: 24
192.116.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:c5:1a:4c:21:ce:31:b7:18:e3:56:b4:9b:f7:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jan 2 11:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8cb339b777a0d357e28c75f90590f14d48e91065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:da:70:b4:5a:a8:45:21:57:26:ba:9f:41:3f:
c3:3e:f0:c3:69:6d:e7:4b:7c:d1:e7:81:5e:96:27:
92:36:28:4a:f5:71:51:5c:d3:db:34:27:ac:bf:d7:
2b:75:79:c0:ae:d5:45:db:c5:b5:22:ac:38:15:13:
e0:18:08:9d:f5:9f:61:94:de:16:dc:f0:8e:d6:6c:
14:e6:ec:59:9e:0a:98:57:c3:e0:c6:00:16:46:46:
62:e6:3d:1d:32:f9:69:6b:83:25:b0:5a:73:20:ad:
bb:ce:5e:3b:f1:bd:1a:f5:fe:21:45:57:c3:2f:2c:
20:2e:dd:e5:53:8b:75:aa:4f:64:bf:7c:03:4b:a5:
4d:a1:02:b6:0f:9c:3e:14:8a:0c:46:8d:94:3b:e5:
2e:c5:d2:18:ca:15:8f:50:d8:ec:a6:ca:fc:4c:96:
59:9b:34:0c:04:aa:d4:d0:ee:8f:00:95:6b:b1:4c:
ed:67:0c:14:6d:e2:43:90:98:24:ba:9e:5e:d6:91:
f9:c9:52:c5:43:35:7e:1f:23:48:d2:41:a3:8a:68:
52:62:8d:5d:f1:c7:57:1d:34:e4:e8:64:d2:f3:c2:
4a:e0:20:b6:5c:15:3b:0a:18:65:1f:7c:df:40:6d:
bf:7c:f1:e3:e8:b2:34:1d:4b:55:3c:ec:75:18:45:
59:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B3:39:B7:77:A0:D3:57:E2:8C:75:F9:05:90:F1:4D:48:E9:10:65
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/jLM5t3eg01fijHX5BZDxTUjpEGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.115.8.0/22
192.116.24.0/21
Signature Algorithm: sha256WithRSAEncryption
37:a4:d7:e4:3d:e3:c1:d2:a3:18:d5:cf:42:97:ac:37:ad:62:
7d:0b:b9:c0:3d:ae:60:5d:8c:be:78:67:37:d2:fc:d3:40:87:
c3:0d:97:f6:c7:fd:34:ae:a2:c2:3f:56:ae:63:07:5b:50:ba:
bf:10:81:1f:80:a6:44:65:be:39:ec:1b:77:0b:46:8e:51:87:
40:b6:8a:1c:d0:f9:f6:8f:09:03:f3:4d:ca:29:b0:92:a7:b7:
7d:47:4d:ab:c0:d0:2d:4c:18:87:76:49:c1:14:93:8d:df:d3:
a7:cc:9c:91:74:7f:8f:c1:5c:44:a0:ca:63:35:29:5e:b0:32:
45:99:75:21:2e:a1:45:b9:73:8a:6a:19:0f:dc:e3:34:64:06:
62:f7:a4:c0:83:7c:85:0b:de:bc:d9:d9:ec:fe:cc:0e:c1:e0:
5f:fe:e2:4d:4f:08:38:bc:98:fb:0a:96:88:96:00:b4:50:1c:
04:f9:18:e7:97:c9:26:fb:86:c0:11:4e:0d:c6:60:00:09:1e:
ca:82:6b:7e:b5:45:cc:25:65:6f:1f:d9:ba:1f:27:20:04:a4:
6e:4d:69:0a:3a:33:be:52:d9:b8:50:b3:66:1b:fd:73:48:77:
3e:dc:7b:21:e9:8f:1c:51:d5:0b:e3:75:ef:b5:61:1d:3c:91:
6e:3c:f5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:18:05 2025 by rpki-client