Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/JFfXWjIJHVSFeGbySM8n0cwBw74.roa
File: JFfXWjIJHVSFeGbySM8n0cwBw74.roa (raw, json)
Hash identifier: kgkONWoOOrXSbcj6bdCOVH5+Q3j9I/JtMm/NZI6wPhU=
Subject key identifier: 24:57:D7:5A:32:09:1D:54:85:78:66:F2:48:CF:27:D1:CC:01:C3:BE
Certificate issuer: /CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
Certificate serial: 019426D98BBEB2627FECB511FA41402A9419
Authority key identifier: 7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/JFfXWjIJHVSFeGbySM8n0cwBw74.roa
Signing time: Thu 02 Jan 2025 11:49:38 +0000
ROA not before: Thu 02 Jan 2025 11:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51786
IP address blocks: 185.117.12.0/24 maxlen: 24
185.117.13.0/24 maxlen: 24
2a06:8280::/44 maxlen: 44
2a06:8280:10::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:8b:be:b2:62:7f:ec:b5:11:fa:41:40:2a:94:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
Validity
Not Before: Jan 2 11:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2457d75a32091d54857866f248cf27d1cc01c3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:59:55:1e:c4:1f:b5:4d:01:f8:c9:9c:2e:01:
23:dc:1a:7d:7c:ec:c2:54:8c:81:40:b3:01:fe:74:
fd:5a:08:fc:93:70:50:50:4f:c5:8d:bc:a5:21:98:
4b:8e:4b:b5:33:17:55:cd:1a:bb:e8:f7:1b:2c:26:
4f:da:9b:ee:68:1b:a4:a1:be:78:73:6e:59:63:ec:
01:13:2d:8b:77:d9:1c:ec:e6:b3:02:76:07:38:27:
1b:40:96:74:8d:1f:c7:91:48:08:9c:ab:bd:c8:26:
e7:35:83:6e:6f:20:d1:ac:b1:ef:58:75:70:d6:93:
f5:01:b4:cd:29:7b:17:a6:77:9d:3d:66:93:ab:25:
3b:1c:11:e3:1a:3c:c3:1b:31:78:e8:04:a7:cf:f1:
61:55:65:4b:93:bf:f8:b4:da:0c:45:7f:5d:04:5b:
cf:ac:4e:5a:3b:a8:ef:0a:d8:35:09:41:d8:60:37:
5d:9e:2b:83:b0:a9:49:e2:35:32:c5:65:99:ab:93:
db:0b:bd:b2:49:41:a5:f4:63:ac:ed:c2:a1:be:b8:
f6:f7:b8:a5:9f:84:c2:b2:73:64:de:27:fb:f1:5f:
d4:07:da:e8:3f:9a:77:18:c5:be:d2:b5:d0:2c:83:
b4:03:d1:9c:b2:d1:8d:49:52:60:7a:ad:25:c5:e2:
02:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:57:D7:5A:32:09:1D:54:85:78:66:F2:48:CF:27:D1:CC:01:C3:BE
X509v3 Authority Key Identifier:
keyid:7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/JFfXWjIJHVSFeGbySM8n0cwBw74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.12.0/23
IPv6:
2a06:8280::/43
Signature Algorithm: sha256WithRSAEncryption
2f:e5:5a:96:75:41:f7:f4:34:82:b7:de:be:84:d8:0b:2a:80:
08:44:d4:4f:e8:e8:56:b2:1b:72:0b:36:5e:70:8f:4d:6f:08:
bf:af:43:a4:6d:b1:ee:56:a5:9e:7a:58:66:fa:e5:72:a0:16:
4e:db:f7:5d:76:ee:2d:a8:9e:94:ef:ca:59:0a:fa:74:80:af:
2b:37:e5:e9:c5:01:5d:99:19:4d:2e:ea:c0:28:b9:f5:19:25:
e8:24:41:b7:e1:a7:62:65:d7:a6:d7:0e:c7:c3:bf:3e:97:7a:
c1:47:36:84:36:93:39:8b:34:ff:df:e0:a8:4e:5f:71:75:6d:
67:f7:ea:a4:49:c4:0c:a3:0d:c9:95:21:ef:20:7e:0d:4f:12:
25:7b:d2:35:95:c2:06:7c:39:82:8f:be:0c:28:94:fc:9f:f9:
f5:bf:8e:39:5c:5a:1a:60:95:e0:1b:1e:a5:04:65:ed:88:69:
c8:c2:2b:15:e2:5b:35:7c:ae:6b:6a:c9:f5:e6:49:ba:f3:13:
41:5c:4f:50:f3:86:26:c0:ba:b2:a5:2e:e1:6d:40:8e:68:08:
26:41:92:fb:b5:1b:2c:3c:f9:d0:d4:ac:9c:cb:09:85:49:b9:
50:75:65:37:05:48:6c:ad:c1:1c:69:a2:40:bb:5f:18:cf:de:
ab:5b:27:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:00:56 2025 by rpki-client