Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/JifjCFTHwQfGjK32vaW76jlBuD0.roa
File: JifjCFTHwQfGjK32vaW76jlBuD0.roa (raw, json)
Hash identifier: h7HzreIgn1zkAe8+SyKhsfHeNQ03cg69awNyBY5xA1I=
Subject key identifier: 26:27:E3:08:54:C7:C1:07:C6:8C:AD:F6:BD:A5:BB:EA:39:41:B8:3D
Certificate issuer: /CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
Certificate serial: 019422FC4C285924FABF3457954F72B843A4
Authority key identifier: BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/JifjCFTHwQfGjK32vaW76jlBuD0.roa
Signing time: Wed 01 Jan 2025 17:49:07 +0000
ROA not before: Wed 01 Jan 2025 17:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12779
IP address blocks: 195.177.254.0/24 maxlen: 24
2a02:c480::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:4c:28:59:24:fa:bf:34:57:95:4f:72:b8:43:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
Validity
Not Before: Jan 1 17:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2627e30854c7c107c68cadf6bda5bbea3941b83d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:22:34:6d:07:3d:0c:d7:7d:2d:d2:43:70:28:
cf:42:cc:73:dc:70:e1:d9:0e:20:7b:b5:b1:14:a1:
8e:41:43:80:af:93:02:84:47:7d:45:47:c6:4f:2d:
43:1e:f3:57:da:9d:e6:93:71:fb:8f:04:90:c7:75:
fb:c2:5d:29:2d:11:c1:73:dd:00:2a:91:82:ef:a8:
9e:49:61:83:5d:b5:35:29:f2:95:4d:28:bf:64:7f:
44:fb:ba:43:95:01:89:be:9b:82:0a:f1:9d:dc:de:
e8:26:1c:3a:b6:fb:b1:be:e6:b3:c7:02:04:d2:de:
e3:9e:c1:3e:4e:f1:c0:de:e7:9a:94:27:b6:1d:2b:
85:09:9f:27:d5:24:e2:6b:df:03:3e:04:77:32:53:
e5:17:99:7b:20:57:fe:6a:88:e8:bb:91:90:08:74:
da:8c:63:18:26:2e:c8:ee:74:36:f7:ba:04:62:d1:
74:e6:8a:ef:db:e0:e8:a8:5a:dd:1c:54:f9:05:31:
f2:bc:a4:7a:05:04:9a:9c:88:14:3f:2b:5c:b8:eb:
eb:95:ba:ad:13:13:c8:3d:9b:fe:b2:77:1c:ad:79:
95:2a:ec:d9:d2:47:e4:59:95:de:9d:4f:7e:60:6f:
e0:06:83:db:bc:70:81:aa:86:df:60:c3:c7:0b:3d:
31:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:27:E3:08:54:C7:C1:07:C6:8C:AD:F6:BD:A5:BB:EA:39:41:B8:3D
X509v3 Authority Key Identifier:
keyid:BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/JifjCFTHwQfGjK32vaW76jlBuD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.254.0/24
IPv6:
2a02:c480::/32
Signature Algorithm: sha256WithRSAEncryption
37:84:82:d8:60:75:c2:cb:d7:07:80:e0:68:85:90:77:93:d6:
3d:37:65:18:fe:91:59:62:8f:7e:68:ba:17:78:e9:1c:18:f9:
df:58:56:57:31:01:c9:dc:1e:24:be:ad:e5:6d:00:a7:0d:c4:
fd:95:98:9c:2a:7e:fb:a0:0b:78:19:e7:aa:06:74:56:10:16:
24:8d:cf:96:db:fa:b5:db:75:8e:67:47:e0:4c:bb:42:d9:9a:
6b:21:d5:1e:fc:e2:f4:5e:98:8c:a7:f1:1c:a2:2d:ca:43:f9:
ba:1f:ae:34:d9:69:58:e8:6b:ac:3a:4a:11:ea:3d:37:80:86:
a2:70:eb:ee:15:b1:ad:8c:1c:cb:f3:dc:63:28:d5:ba:04:d8:
4c:30:23:48:92:d0:1c:75:1a:ea:25:ba:21:c8:2e:87:7a:8e:
47:4f:c7:7b:e8:60:1a:fb:df:68:a4:ea:0a:5f:ff:29:3e:b5:
4d:07:55:7b:97:04:35:c9:6d:77:d0:e4:a0:29:9b:0c:a7:ce:
3b:82:bd:77:2f:00:19:68:fe:33:4e:60:b8:bc:89:0d:2f:9b:
76:66:b2:b8:bc:4d:62:d3:b8:ea:c1:09:b0:cd:5c:2e:c0:42:
6f:f2:30:bc:d7:be:7b:a1:30:4f:05:db:5c:80:fb:ae:4d:02:
0d:3b:00:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:29:26 2025 by rpki-client