Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/JQCJu_zj_dBb25hVe1CPLuILo-c.roa
File: JQCJu_zj_dBb25hVe1CPLuILo-c.roa (raw, json)
Hash identifier: ppq/kkdZOhkWPFmrOFoKNIk30mkp2cJ+7oYbrYYHQUY=
Subject key identifier: 25:00:89:BB:FC:E3:FD:D0:5B:DB:98:55:7B:50:8F:2E:E2:0B:A3:E7
Certificate issuer: /CN=8aaf78b69774a55507deabf8c4c96942e9ef0d20
Certificate serial: 019424B2CA22C0EDC36AF22D8F0151BDB4FA
Authority key identifier: 8A:AF:78:B6:97:74:A5:55:07:DE:AB:F8:C4:C9:69:42:E9:EF:0D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iq94tpd0pVUH3qv4xMlpQunvDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/JQCJu_zj_dBb25hVe1CPLuILo-c.roa
Signing time: Thu 02 Jan 2025 01:48:04 +0000
ROA not before: Thu 02 Jan 2025 01:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8735
IP address blocks: 193.227.203.0/24 maxlen: 24
194.59.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:ca:22:c0:ed:c3:6a:f2:2d:8f:01:51:bd:b4:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aaf78b69774a55507deabf8c4c96942e9ef0d20
Validity
Not Before: Jan 2 01:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=250089bbfce3fdd05bdb98557b508f2ee20ba3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4e:11:0b:1f:f9:64:e2:97:51:52:94:45:76:
a7:92:07:92:69:e6:69:31:24:16:61:4b:4f:2d:5b:
8f:6a:ee:40:e7:29:0f:a9:2d:76:ea:18:81:74:d8:
fe:60:0a:cc:59:86:46:f1:19:52:dd:a8:6d:ad:60:
23:f4:9c:a1:8f:1e:54:4d:2d:85:f0:5c:62:0d:35:
75:c5:ba:9d:e0:e0:3b:b6:98:4f:4a:d4:a7:fd:47:
f1:a6:61:f7:ee:d9:c2:3e:04:1e:3d:77:f3:fa:39:
88:4d:85:96:4e:d8:19:de:4c:21:2d:a7:1f:f6:05:
cf:93:78:d6:80:d2:be:12:05:f5:55:cd:a7:3c:2a:
6c:2a:36:5b:92:74:d8:a6:97:9e:64:0e:0d:66:d6:
2b:2a:9b:5e:aa:d2:7b:fa:fb:34:62:eb:fc:2b:59:
5d:c4:b7:ff:11:5b:16:c3:36:ed:c5:5c:c4:5d:35:
c9:f1:8d:2f:d4:50:7e:09:be:e1:19:e0:b3:9e:f7:
ba:6d:68:17:28:45:1b:65:ae:85:7b:89:c6:54:fa:
0b:c7:47:c2:46:39:4e:6c:ae:d9:d0:48:84:8a:99:
92:b3:ec:1a:56:d3:18:9b:d5:b4:7b:5f:85:f1:3b:
3f:7d:d4:82:a6:08:bb:17:d7:4e:37:5a:e8:ef:55:
bb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:00:89:BB:FC:E3:FD:D0:5B:DB:98:55:7B:50:8F:2E:E2:0B:A3:E7
X509v3 Authority Key Identifier:
keyid:8A:AF:78:B6:97:74:A5:55:07:DE:AB:F8:C4:C9:69:42:E9:EF:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iq94tpd0pVUH3qv4xMlpQunvDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/JQCJu_zj_dBb25hVe1CPLuILo-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.227.203.0/24
194.59.45.0/24
Signature Algorithm: sha256WithRSAEncryption
73:e4:eb:e2:5a:7f:4c:80:98:45:d1:b7:b5:70:da:27:96:d8:
a1:61:d5:2d:15:c6:40:22:ef:3a:d3:e0:bc:75:84:ce:da:3a:
7f:69:20:d7:0d:a2:73:e3:f1:18:26:35:be:19:ea:54:82:36:
72:5b:5b:ce:93:b1:d3:06:3b:52:ed:1c:63:8d:63:c5:bf:df:
d1:1e:68:30:75:98:be:85:f4:cd:83:6a:29:d2:4a:cd:4c:6d:
36:29:d0:d4:7f:fc:5c:95:75:ba:a0:b4:11:b0:53:84:7d:83:
82:e0:1e:ca:ac:79:39:0b:ee:72:92:a8:84:39:5f:66:ac:9c:
21:55:a0:cc:24:cb:61:8d:51:e7:06:f7:a3:8c:e6:f4:d5:fc:
4f:10:f1:5e:75:f0:ce:fa:8e:e0:51:38:2d:5e:29:67:76:18:
06:21:c0:83:9b:e3:68:ed:c7:35:b1:24:26:0f:e6:e5:bd:32:
8a:80:02:7c:a5:0f:12:45:e0:f7:bc:13:6e:8f:51:29:85:29:
cf:76:f2:76:49:04:d4:04:2a:36:42:be:fb:13:e8:57:db:f3:
9b:7d:80:1d:3b:c5:cd:2c:64:0a:cc:07:1e:ba:a5:84:0a:28:
88:d0:1d:98:2a:f3:08:59:be:ea:b2:7b:11:e8:95:65:87:f8:
6c:dc:fe:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:13:38 2025 by rpki-client