Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/JR5xcAQWVgTPGyjPg7XJgFbWGnU.roa
File: JR5xcAQWVgTPGyjPg7XJgFbWGnU.roa (raw, json)
Hash identifier: 4C25vRmgSuVzjJ8c0h/sdLRJbeJ7vJx3vVEJHRg1ZU8=
Subject key identifier: 25:1E:71:70:04:16:56:04:CF:1B:28:CF:83:B5:C9:80:56:D6:1A:75
Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial: 01942369701541ED43AC830212743E65BD7E
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/JR5xcAQWVgTPGyjPg7XJgFbWGnU.roa
Signing time: Wed 01 Jan 2025 19:48:20 +0000
ROA not before: Wed 01 Jan 2025 19:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24806
IP address blocks: 80.211.192.0/19 maxlen: 24
194.182.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:70:15:41:ed:43:ac:83:02:12:74:3e:65:bd:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Validity
Not Before: Jan 1 19:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=251e717004165604cf1b28cf83b5c98056d61a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d4:5a:b2:55:15:b6:4b:51:68:8e:0f:15:77:
55:07:b9:00:37:1b:18:5c:d5:0b:cc:b3:9d:f2:55:
fc:d0:44:b1:79:71:8b:df:22:1e:b1:3b:f3:88:db:
4b:d9:f6:46:ca:93:b3:0e:ab:25:a8:54:ce:85:72:
4f:57:dc:0d:42:bc:2b:2a:96:64:20:81:93:c7:3b:
5c:68:ad:db:2f:7d:3f:ab:3b:0a:e6:a3:08:51:62:
da:42:67:96:e5:61:e2:12:48:78:8e:6b:d3:cf:45:
ff:08:6e:27:c4:b2:b4:cb:8c:f4:e4:7a:6c:e0:28:
c8:e8:a1:93:c1:c3:4b:2a:ff:68:75:6a:76:d6:a2:
9b:6a:64:d3:a4:cd:50:f4:d7:de:c1:ca:de:6e:ef:
72:fe:eb:2b:b2:a5:8e:49:2a:34:35:6d:f4:8e:a5:
97:b6:aa:5a:4c:51:78:2b:42:63:dc:aa:20:4c:b0:
f6:d8:6e:ed:75:48:a8:3b:d0:26:60:cb:06:43:9f:
83:87:f3:d3:a1:94:f7:a7:e4:cd:09:8f:71:0e:f6:
31:7e:cf:47:d4:1f:ac:5e:de:73:b1:7d:2d:0b:6a:
52:14:a3:c8:09:de:01:63:9d:0a:11:3c:b6:ae:ea:
56:50:80:7a:c2:a7:c3:c9:a6:40:21:52:dd:5b:c3:
77:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1E:71:70:04:16:56:04:CF:1B:28:CF:83:B5:C9:80:56:D6:1A:75
X509v3 Authority Key Identifier:
keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/JR5xcAQWVgTPGyjPg7XJgFbWGnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.211.192.0/19
194.182.64.0/19
Signature Algorithm: sha256WithRSAEncryption
02:a9:a7:7a:45:e2:5a:1c:ba:fa:9e:52:d1:59:54:53:7b:51:
ec:81:41:3c:e6:4f:16:48:97:1a:24:c6:7d:e0:ae:61:e1:f4:
4b:69:54:26:9a:ca:a4:5b:a2:82:5f:85:4a:e3:92:59:3d:26:
fa:f7:f4:48:6b:22:41:24:ab:f9:99:b7:7f:57:4e:19:90:2b:
32:17:4c:7e:9a:71:f3:a4:99:0a:b3:6a:bf:6a:75:3b:64:d4:
5c:13:d0:62:a9:9f:f1:ff:13:a1:81:6c:a9:aa:a9:94:d2:ed:
02:af:92:67:ab:63:12:86:1f:4f:6c:d4:3a:71:f1:04:b9:b3:
b7:22:ef:2f:2a:2d:18:6f:fe:0d:35:56:49:1d:3f:87:a5:2b:
e0:a2:77:fb:cc:fb:d7:1e:0c:8e:9c:45:2a:7e:90:13:51:c1:
0d:23:20:00:5f:63:b1:63:81:b3:ca:04:9f:57:fb:87:b1:b1:
2c:fe:ff:69:22:a6:57:ef:bb:b3:17:01:20:9f:25:81:27:db:
f5:0e:7d:d8:86:6c:a7:98:49:30:52:1e:b0:8f:b9:19:a2:90:
ed:eb:cf:94:10:b9:bf:51:fe:82:f5:11:5a:c8:a8:8e:f1:2a:
09:e5:a0:82:98:d7:cd:4d:2a:27:4b:b5:09:72:5c:a0:6f:2e:
0b:59:41:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:45:00 2025 by rpki-client