Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/fd8116-5e98-45ef-af74-073a5db0efb5/1/jAZ9TXopo_P_4C_FXjvo3LrR8II.roa
File: jAZ9TXopo_P_4C_FXjvo3LrR8II.roa (raw, json)
Hash identifier: ohtX71y5hM3Lm5IjLDjXf517zOnzK86kCaHV4kyIPyA=
Subject key identifier: 8C:06:7D:4D:7A:29:A3:F3:FF:E0:2F:C5:5E:3B:E8:DC:BA:D1:F0:82
Certificate issuer: /CN=63e24977993c15bcc134b174937f41b2129f56d1
Certificate serial: 0194206833377F8FF5C5D243443F89B59716
Authority key identifier: 63:E2:49:77:99:3C:15:BC:C1:34:B1:74:93:7F:41:B2:12:9F:56:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-JJd5k8FbzBNLF0k39BshKfVtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/fd8116-5e98-45ef-af74-073a5db0efb5/1/jAZ9TXopo_P_4C_FXjvo3LrR8II.roa
Signing time: Wed 01 Jan 2025 05:48:07 +0000
ROA not before: Wed 01 Jan 2025 05:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200845
IP address blocks: 185.208.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:33:37:7f:8f:f5:c5:d2:43:44:3f:89:b5:97:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e24977993c15bcc134b174937f41b2129f56d1
Validity
Not Before: Jan 1 05:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c067d4d7a29a3f3ffe02fc55e3be8dcbad1f082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8f:d3:ca:64:57:0a:c2:ac:3d:e8:c9:ac:a3:
20:90:77:10:01:90:d4:7e:3b:33:1a:6e:31:da:4d:
45:ba:e0:8c:98:a2:64:7c:a0:6f:6d:51:91:fe:ea:
ce:27:25:19:f1:42:c9:79:de:05:9c:6b:cf:9f:85:
9b:69:11:e8:e0:60:3d:73:12:c9:d5:e6:fa:f0:45:
f3:9a:07:ed:83:c0:04:ed:60:ae:75:f2:1f:8a:c4:
db:fb:cb:78:58:5d:6e:9f:db:f7:2a:2a:e6:c6:4c:
07:cc:4a:3a:34:d4:4a:40:b0:ef:ea:ba:b3:86:d0:
c1:14:2b:9a:5f:32:9e:ca:0d:14:89:29:dd:2f:95:
04:bb:64:4a:b3:36:08:2f:4c:e4:dd:46:cb:a6:8d:
4c:13:18:2d:e3:93:24:2f:da:8f:6c:a8:49:d6:97:
f4:3a:f8:62:65:d7:c9:7d:bc:47:fb:ac:95:79:5c:
0a:1f:fa:19:10:ab:3f:a7:cf:6f:d6:e2:1f:9d:b4:
f8:83:de:03:4a:1f:f3:4b:18:23:66:8b:e2:3a:d6:
ce:72:3d:fd:40:d3:76:51:56:7b:09:8a:35:ba:56:
5f:1c:4e:c8:6d:08:eb:e2:f9:b0:e4:a5:5c:bb:43:
82:81:16:e0:ed:95:4e:61:27:07:0c:75:28:7a:41:
a5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:06:7D:4D:7A:29:A3:F3:FF:E0:2F:C5:5E:3B:E8:DC:BA:D1:F0:82
X509v3 Authority Key Identifier:
keyid:63:E2:49:77:99:3C:15:BC:C1:34:B1:74:93:7F:41:B2:12:9F:56:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-JJd5k8FbzBNLF0k39BshKfVtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fd8116-5e98-45ef-af74-073a5db0efb5/1/jAZ9TXopo_P_4C_FXjvo3LrR8II.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fd8116-5e98-45ef-af74-073a5db0efb5/1/Y-JJd5k8FbzBNLF0k39BshKfVtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.144.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:4b:18:a6:11:b5:9a:8c:84:7a:0d:6f:6f:d6:4d:61:98:87:
64:5a:18:15:00:56:a5:65:77:6d:78:b3:13:57:53:b0:2b:36:
bf:47:7b:01:d5:0c:cf:d8:12:3e:6f:1f:d3:79:52:97:39:69:
46:05:a1:60:4e:37:79:6a:7a:d7:a6:a1:ed:6d:14:60:73:93:
75:56:70:a1:ab:59:9e:2e:52:15:8d:ee:30:2f:58:21:57:1a:
80:38:fd:e6:0c:83:db:36:f9:e2:52:57:a2:9e:ca:47:88:2a:
50:b3:32:4e:1e:71:d6:a8:20:b5:13:ba:03:17:ef:a4:4f:89:
ce:07:0c:9e:c5:4d:47:b6:96:a1:ef:83:96:7d:c9:1e:06:0d:
43:96:0b:49:69:22:13:72:19:89:02:6f:45:8f:8f:94:5a:c5:
a9:12:20:0a:57:54:5a:5c:2c:40:e8:c0:21:96:24:5e:dd:1e:
65:17:fc:c5:23:e1:63:2f:21:8e:86:d2:a8:bd:f2:71:aa:a1:
92:9c:dc:87:96:16:39:44:31:8e:7a:ca:37:cc:47:71:99:35:
3e:b3:ab:e9:42:2e:f0:d0:cf:49:35:89:cb:0c:c2:aa:c7:e6:
85:9a:9f:fa:10:b1:d6:ad:26:9b:58:0a:7f:f5:46:ec:c5:30:
d5:e7:4f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:26:14 2025 by rpki-client