Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/JDxTNVA5sXO861LaJnEInxIC6cE.roa
File: JDxTNVA5sXO861LaJnEInxIC6cE.roa (raw, json)
Hash identifier: wDANlF+ZOT5kP2XyYHTeE88wDUM8Jf60i326vlXC21M=
Subject key identifier: 24:3C:53:35:50:39:B1:73:BC:EB:52:DA:26:71:08:9F:12:02:E9:C1
Certificate issuer: /CN=1130a1d5e5c0901d19b4b707a73d17cae0e3b660
Certificate serial: 019422FB292ED2379AC477B04974EF269A70
Authority key identifier: 11:30:A1:D5:E5:C0:90:1D:19:B4:B7:07:A7:3D:17:CA:E0:E3:B6:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/JDxTNVA5sXO861LaJnEInxIC6cE.roa
Signing time: Wed 01 Jan 2025 17:47:52 +0000
ROA not before: Wed 01 Jan 2025 17:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57395
IP address blocks: 176.124.36.0/24 maxlen: 24
176.124.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:29:2e:d2:37:9a:c4:77:b0:49:74:ef:26:9a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1130a1d5e5c0901d19b4b707a73d17cae0e3b660
Validity
Not Before: Jan 1 17:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=243c53355039b173bceb52da2671089f1202e9c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bd:2f:82:88:9f:9a:75:56:d8:f2:8b:58:ac:
ce:73:0d:80:42:4c:2f:84:c0:3e:36:21:2b:b3:63:
3e:fc:ed:b1:7e:42:b1:24:49:71:02:c2:35:27:fe:
34:78:25:f0:00:b7:9c:6d:eb:98:f8:c3:a4:93:c1:
0b:11:f2:74:bc:ec:da:2d:71:b1:fa:a4:23:21:97:
09:50:68:19:b7:c1:85:0d:19:87:9e:9d:7a:e4:95:
cd:e3:bd:cf:d8:28:b5:c5:f6:b6:bd:09:19:50:a0:
0d:24:76:ba:af:4a:59:97:06:fb:1b:17:c8:7f:28:
6f:9b:a4:3a:40:ad:60:25:4c:0c:88:fc:96:f2:45:
f5:91:3d:54:52:31:87:da:7c:39:92:29:4e:66:48:
2b:5d:dd:eb:87:c4:fb:3b:ce:c1:94:45:70:f1:de:
70:e9:a8:73:f8:60:14:03:87:32:36:29:19:d9:ab:
18:83:95:79:5b:e7:b7:85:35:f2:e2:e3:a4:d1:ee:
2a:64:08:dc:cc:6f:44:02:b9:55:e5:68:7c:b1:5f:
09:89:b9:50:6a:86:97:6c:ce:c9:30:d2:df:2a:60:
b8:3c:88:52:6e:ca:90:67:08:79:5b:90:1f:44:9d:
18:c7:5c:b2:1f:c2:f7:4a:6e:d5:45:fa:80:77:6c:
12:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3C:53:35:50:39:B1:73:BC:EB:52:DA:26:71:08:9F:12:02:E9:C1
X509v3 Authority Key Identifier:
keyid:11:30:A1:D5:E5:C0:90:1D:19:B4:B7:07:A7:3D:17:CA:E0:E3:B6:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/JDxTNVA5sXO861LaJnEInxIC6cE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.36.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:5e:ce:f3:a5:b9:f9:d3:35:7a:14:90:0a:06:be:b7:cf:5e:
ef:7f:4c:6f:4d:a6:b6:f2:ab:54:45:90:22:db:02:fd:94:e4:
e9:be:2c:ce:3c:10:b8:6b:ff:65:59:f4:01:78:34:8d:08:34:
83:b0:e8:e0:05:94:42:96:97:57:12:fc:92:13:bc:36:d2:28:
d0:e7:58:82:bf:e9:c7:5a:45:86:e5:cb:29:d2:33:2c:d1:55:
d7:4d:63:ff:35:40:93:44:5d:d8:38:39:29:fb:e7:4b:74:0f:
03:0e:37:53:1f:46:c0:36:a4:49:eb:a1:9d:65:32:4e:97:e2:
cd:d8:ff:9c:12:6f:cf:79:ec:0a:0e:f9:59:a5:d9:04:c7:5c:
31:3b:9d:b1:e5:1c:4f:40:0d:9b:eb:1c:f5:4a:f9:2c:61:0b:
3e:3b:9e:71:b1:7c:b3:31:bc:20:4d:5e:22:0c:5c:48:8e:da:
bb:8f:6c:46:f0:a4:6d:6e:b3:b1:48:40:83:a1:5a:31:48:2e:
f2:d6:0c:6f:b7:99:6b:d2:92:9d:fc:01:77:b7:51:92:2a:c5:
f1:e9:a6:49:b4:a3:cb:78:50:d7:a1:48:5c:fb:56:cb:d5:a1:
71:3c:cf:05:45:53:27:a6:17:11:ca:f1:55:ac:4c:9b:0d:53:
b6:b5:3f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:12:58 2025 by rpki-client