Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/jmxXPs-eFsLMyQfsEqQE-gTcJzg.roa
File: jmxXPs-eFsLMyQfsEqQE-gTcJzg.roa (raw, json)
Hash identifier: JMdb9ncK/VZi/Drly8ri6tbObrJ2pnr+vB9E79datFA=
Subject key identifier: 8E:6C:57:3E:CF:9E:16:C2:CC:C9:07:EC:12:A4:04:FA:04:DC:27:38
Certificate issuer: /CN=c11ab916821c5a3148ce1252ba7801caa2ab4914
Certificate serial: 01942444D4382A246DA3B95D309019EEAB69
Authority key identifier: C1:1A:B9:16:82:1C:5A:31:48:CE:12:52:BA:78:01:CA:A2:AB:49:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRq5FoIcWjFIzhJSungByqKrSRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/jmxXPs-eFsLMyQfsEqQE-gTcJzg.roa
Signing time: Wed 01 Jan 2025 23:47:58 +0000
ROA not before: Wed 01 Jan 2025 23:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21263
IP address blocks: 91.196.200.0/22 maxlen: 24
193.39.67.0/24 maxlen: 24
2a0c:7780::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:d4:38:2a:24:6d:a3:b9:5d:30:90:19:ee:ab:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11ab916821c5a3148ce1252ba7801caa2ab4914
Validity
Not Before: Jan 1 23:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e6c573ecf9e16c2ccc907ec12a404fa04dc2738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c9:7b:c1:bc:69:65:cd:5a:b0:3a:80:de:e5:
2a:5d:74:e7:98:f1:4f:1e:e9:fd:79:e6:45:d7:3c:
32:45:d0:c6:26:db:6c:74:5e:a2:8e:17:1d:a3:9f:
4d:87:35:aa:48:2c:7a:4e:58:7e:a3:72:4b:d7:2e:
28:4e:a4:2c:2e:a7:96:27:a9:4f:1c:82:61:0e:8e:
1a:d6:cd:a5:72:1d:35:a2:f5:f9:f7:ff:1c:41:50:
e3:ad:4d:1f:e3:eb:2c:01:c0:9f:c5:f9:45:4b:5e:
6f:a2:8b:7d:92:84:49:db:45:cb:25:0f:62:ef:ac:
3d:67:3a:03:d1:51:9e:80:00:e0:e2:78:d7:d8:41:
83:e9:f1:8b:e4:5c:ea:ea:f0:df:76:03:01:3e:f6:
f8:f1:8f:08:a9:1d:e2:a8:a9:75:77:ba:ea:ae:8b:
80:54:f6:27:48:a6:f0:01:90:2c:a3:e3:57:bc:fd:
87:67:55:f6:3b:d3:22:09:19:69:58:a5:ac:38:c4:
37:ed:d9:a7:a4:5b:11:e2:89:c9:c1:9c:69:69:be:
d3:56:96:0d:cb:80:24:f6:06:32:09:26:74:56:7b:
c6:68:2a:50:2f:ae:b6:20:92:35:14:de:94:13:d0:
7f:2c:98:80:5a:f2:b4:93:59:a6:70:d6:fe:15:e3:
35:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:6C:57:3E:CF:9E:16:C2:CC:C9:07:EC:12:A4:04:FA:04:DC:27:38
X509v3 Authority Key Identifier:
keyid:C1:1A:B9:16:82:1C:5A:31:48:CE:12:52:BA:78:01:CA:A2:AB:49:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRq5FoIcWjFIzhJSungByqKrSRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/jmxXPs-eFsLMyQfsEqQE-gTcJzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.200.0/22
193.39.67.0/24
IPv6:
2a0c:7780::/29
Signature Algorithm: sha256WithRSAEncryption
0d:47:0b:fb:03:51:40:81:d5:24:f1:ab:c9:12:bd:d6:7a:9c:
80:9b:96:43:7e:08:2c:52:af:b8:f8:5d:8d:92:27:14:03:f8:
5e:ef:2f:60:66:5b:03:54:13:33:89:ed:05:a2:62:cd:80:7e:
75:9e:72:3c:ff:bd:42:b9:50:c8:97:f3:06:fa:c6:35:af:fb:
ab:c5:45:66:57:10:25:68:8f:10:fe:d4:1d:4e:1f:d0:53:12:
fd:ab:e7:6f:cd:27:e1:d4:cd:3e:28:4e:e9:20:ab:b8:17:28:
2a:bb:73:b4:7f:06:3b:98:ba:d3:e1:27:b8:28:6e:82:6a:e4:
5b:60:25:e0:36:06:ee:92:63:64:4e:8a:4f:0a:2b:59:62:9a:
f1:7e:f5:ce:aa:32:ed:5b:f5:3f:4e:d7:89:bd:4a:1c:df:37:
cf:d5:f3:21:fc:d7:0c:da:c3:dc:1c:ed:83:23:05:02:a5:c5:
62:18:f0:60:df:ac:33:04:9a:96:65:6a:f9:e2:d3:df:b5:22:
15:82:4b:58:0e:bf:c2:bc:0e:15:52:99:e2:43:40:d5:98:e2:
38:fb:f7:81:9a:77:a3:4b:f8:fa:c9:dc:6c:a1:2d:19:cd:29:
23:97:72:c9:cb:62:05:7f:11:aa:f9:87:36:6b:84:ec:58:f6:
fb:72:c3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:08:12 2025 by rpki-client