Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/JKNWbouQzoruFwki9fjiu02Ceds.roa
File: JKNWbouQzoruFwki9fjiu02Ceds.roa (raw, json)
Hash identifier: HUJbBXvos0tzAFbMulw/ZH+VVZ/kGp1mQGDZrKa1ES8=
Subject key identifier: 24:A3:56:6E:8B:90:CE:8A:EE:17:09:22:F5:F8:E2:BB:4D:82:79:DB
Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial: 01941FFA3B9A8F24DBB7E59E020DFA06FDCD
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/JKNWbouQzoruFwki9fjiu02Ceds.roa
Signing time: Wed 01 Jan 2025 03:48:00 +0000
ROA not before: Wed 01 Jan 2025 03:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199418
IP address blocks: 2a13:1c47:ffa0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:3b:9a:8f:24:db:b7:e5:9e:02:0d:fa:06:fd:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
Validity
Not Before: Jan 1 03:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24a3566e8b90ce8aee170922f5f8e2bb4d8279db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a2:f5:c0:37:41:a8:23:bf:e3:b6:0b:d1:b0:
c4:53:9a:ba:7a:34:c2:df:04:4c:72:4e:ba:9e:7b:
ee:a6:3c:0b:01:5d:1a:b5:6f:06:c8:d0:31:5a:70:
66:2e:a0:28:e0:68:13:0c:e1:2d:81:be:45:7e:91:
63:31:24:45:92:20:64:ee:29:af:30:a4:8c:66:26:
d0:7a:37:c1:ec:e8:45:fa:48:8c:36:2e:98:23:bb:
ee:e6:52:0e:8f:44:d8:69:de:8c:7b:36:be:b0:a6:
e5:c8:fb:c0:e3:35:d6:51:a1:30:dc:50:ca:72:f9:
7f:bb:d0:0a:6b:36:c4:5f:a4:27:ea:4c:33:bb:c2:
dd:ae:cb:da:e0:6f:2d:0f:a8:09:ca:65:ba:15:37:
ed:bf:b5:44:5c:b9:4b:da:22:f4:67:d9:5a:ca:e8:
6b:3f:00:8d:40:c8:d7:e8:de:53:e0:b4:53:fa:4c:
4b:db:93:66:28:4a:98:f0:26:e8:4b:76:51:5f:91:
f5:8d:26:f1:69:43:bc:bb:c9:3d:b7:12:91:ed:2e:
b5:7c:bf:f4:39:13:38:43:a7:a3:39:13:e0:6b:c7:
f3:48:ca:5f:aa:5d:31:65:0a:7c:b4:b0:61:c7:6e:
64:90:fb:fd:3e:a6:28:01:23:4e:e2:82:92:2a:5a:
6d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A3:56:6E:8B:90:CE:8A:EE:17:09:22:F5:F8:E2:BB:4D:82:79:DB
X509v3 Authority Key Identifier:
keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/JKNWbouQzoruFwki9fjiu02Ceds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:1c47:ffa0::/44
Signature Algorithm: sha256WithRSAEncryption
1b:0e:14:05:98:88:39:4a:2b:c1:47:ed:8a:4c:5d:33:58:69:
56:76:bd:aa:c2:d6:f5:17:f2:ab:13:27:6d:7c:7b:8a:a3:22:
a5:39:ba:9b:53:f8:1c:42:74:e6:31:af:9f:57:f7:d7:ca:76:
f5:1b:ba:5c:56:27:ac:37:2f:14:04:d7:1a:43:96:f3:79:d5:
ce:0b:b4:41:ad:88:5a:65:cd:8d:28:99:ef:cb:58:e2:3b:73:
b2:d7:64:e3:d7:a0:d8:93:10:1b:ad:4d:b8:db:cd:0c:2d:c1:
25:f3:b1:4e:33:7b:b6:79:e9:f0:18:c9:67:d5:54:ae:a4:73:
3e:ee:ed:58:7d:9a:8e:50:31:7d:11:66:27:b8:ec:7a:ee:2a:
f4:4b:17:85:92:dc:63:ec:34:a3:3c:6b:f0:b4:02:f6:3d:56:
59:d9:7c:2b:7c:17:b0:a1:04:5f:bd:59:24:14:04:f3:2b:99:
0b:7a:4d:91:2b:41:7a:85:6f:91:96:f6:ed:df:1c:dd:6d:df:
33:d0:1d:f1:97:91:fe:dc:c7:48:b3:67:99:4e:1e:78:5f:7f:
72:bc:0b:70:da:21:0d:fc:d9:54:fd:52:ad:27:66:a9:76:b9:
7d:3b:76:4e:ee:b3:7b:eb:0b:4f:ad:bd:0a:9a:8f:5f:af:07:
eb:d0:c4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:58:34 2025 by rpki-client