Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/jroy9jlLydh_Biwj_zTguA5aVf8.roa
File: jroy9jlLydh_Biwj_zTguA5aVf8.roa (raw, json)
Hash identifier: GawZyoe9YiXpBz92W3q8kAqplRmK1BuQpIXrK1pmC9g=
Subject key identifier: 8E:BA:32:F6:39:4B:C9:D8:7F:06:2C:23:FF:34:E0:B8:0E:5A:55:FF
Certificate issuer: /CN=02b610cd43bafced91480fabfdcaae82049fbf71
Certificate serial: 0194BCBD8CC0539BBB95C695CDB428CDA0B3
Authority key identifier: 02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/jroy9jlLydh_Biwj_zTguA5aVf8.roa
Signing time: Fri 31 Jan 2025 14:22:06 +0000
ROA not before: Fri 31 Jan 2025 14:22:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197068
IP address blocks: 195.43.92.0/24 maxlen: 24
2a03:70c1::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:bd:8c:c0:53:9b:bb:95:c6:95:cd:b4:28:cd:a0:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b610cd43bafced91480fabfdcaae82049fbf71
Validity
Not Before: Jan 31 14:22:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8eba32f6394bc9d87f062c23ff34e0b80e5a55ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bd:0f:3a:df:71:13:5d:e6:ba:f7:11:86:45:
8b:b6:01:8f:7f:78:86:07:46:d4:5f:1b:62:c1:c3:
db:b9:52:4d:dd:a4:51:67:9a:1d:b3:3c:1a:a9:2c:
94:80:51:da:24:25:5c:de:00:9d:51:75:8c:06:13:
24:b2:2c:d2:fe:c0:45:ac:95:0d:90:13:78:a7:77:
7e:c2:ff:64:26:bc:a4:cf:14:d0:35:87:0c:63:11:
61:82:64:b0:60:74:cd:71:e7:89:d8:c6:55:44:98:
22:8e:db:9f:ed:2e:96:1b:95:59:99:ab:b7:1b:71:
94:d0:e6:22:61:73:73:ad:fc:75:05:f5:f5:ac:81:
c6:a8:4f:9d:6a:58:4e:d5:bd:f4:67:bd:bf:40:d3:
1d:7a:f2:3c:88:ec:ad:9f:a0:59:88:55:c7:8f:bf:
84:c7:39:93:42:a0:aa:ca:59:e1:d9:7c:e8:c8:1c:
b6:c8:84:a0:d4:34:b0:f7:ad:e6:08:89:b8:38:e8:
e3:cc:fc:55:a6:f4:4f:80:e8:5e:35:1e:67:c8:bc:
e4:ee:52:b6:25:a4:23:71:e6:42:2d:9c:77:4c:81:
a3:64:3d:9d:28:7c:b0:88:22:ac:f3:95:6b:c4:11:
21:65:87:6d:82:78:6f:77:5a:92:14:d7:3e:0c:95:
0e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BA:32:F6:39:4B:C9:D8:7F:06:2C:23:FF:34:E0:B8:0E:5A:55:FF
X509v3 Authority Key Identifier:
keyid:02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/jroy9jlLydh_Biwj_zTguA5aVf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.43.92.0/24
IPv6:
2a03:70c1::/32
Signature Algorithm: sha256WithRSAEncryption
5b:48:0f:7b:59:9d:57:da:9c:29:0c:35:0a:a0:0c:ef:bb:b0:
ba:88:5a:a4:07:4f:cf:a0:d2:fd:34:b0:07:69:47:6e:43:cd:
78:ee:46:a4:a7:c2:76:88:ae:88:7c:63:45:8b:7d:93:9c:b4:
cf:0c:c7:7c:93:2e:f1:bc:6a:b0:2a:d3:36:8e:e2:ec:0a:08:
ba:4a:46:d5:96:27:2e:dd:1d:61:e7:b1:86:dd:5e:fa:9a:57:
33:27:82:52:c7:40:16:9a:d2:d4:e8:0f:94:fc:b8:b1:34:46:
3e:24:8a:56:89:bc:1f:d2:d2:16:2f:2a:54:76:f4:97:ab:cc:
16:63:05:e7:51:98:73:c1:94:8e:67:56:62:5d:5e:e7:ae:eb:
bd:6c:08:7b:09:e0:53:88:64:68:7b:71:30:09:90:78:7d:b6:
c2:6f:28:a7:8c:e3:f6:63:f4:c0:a9:fb:cc:bb:27:e9:c4:23:
c1:53:2f:dc:41:d0:84:ce:2f:8d:b6:f5:bf:d6:e0:32:18:5f:
27:36:cd:ec:c2:a0:6d:66:dc:b5:e2:5a:9c:ac:13:ab:13:79:
f5:82:37:51:80:5b:e2:a4:9d:57:67:d0:6f:88:ca:50:d8:24:
ba:b9:23:a2:7b:37:56:9b:16:85:6f:08:bb:55:e8:7e:b0:91:
c8:7e:23:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:46:06 2025 by rpki-client