Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/JaJTfkcMlPavkQgIWd6Q5PErN44.roa
File: JaJTfkcMlPavkQgIWd6Q5PErN44.roa (raw, json)
Hash identifier: xdZi+om1DwYfwvuK4ikXRudvdwfTqYCO5L9ilWGS09U=
Subject key identifier: 25:A2:53:7E:47:0C:94:F6:AF:91:08:08:59:DE:90:E4:F1:2B:37:8E
Certificate issuer: /CN=03f3f8259b30ec03722f942035a94e209f882861
Certificate serial: 019424B3B2BB16D00761F0EF0D25E9FEC6BE
Authority key identifier: 03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/JaJTfkcMlPavkQgIWd6Q5PErN44.roa
Signing time: Thu 02 Jan 2025 01:49:03 +0000
ROA not before: Thu 02 Jan 2025 01:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43341
IP address blocks: 193.46.36.0/22 maxlen: 22
2a0c:d240::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:b2:bb:16:d0:07:61:f0:ef:0d:25:e9:fe:c6:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f3f8259b30ec03722f942035a94e209f882861
Validity
Not Before: Jan 2 01:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25a2537e470c94f6af91080859de90e4f12b378e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ea:9f:a3:4d:af:94:ea:ed:a9:d0:c1:c7:03:
7d:f7:ac:5c:28:a5:82:01:60:95:75:cb:12:c2:54:
b3:ab:db:27:f1:08:2a:43:0b:f2:f5:97:59:b7:97:
df:62:87:6c:58:9f:b3:cf:d2:72:12:f6:5d:4c:c7:
cb:1f:96:6b:67:f9:7a:d8:b9:a4:d0:5e:18:9b:09:
72:4d:65:f0:9b:48:a6:6b:9f:74:59:f1:99:62:c9:
50:21:83:eb:e5:d5:c9:07:2a:c3:70:cb:a1:c8:a1:
14:16:ac:f9:11:e1:78:9b:86:ca:ae:da:d0:df:83:
2b:aa:72:62:cf:bb:eb:6d:f5:4f:5f:21:da:12:19:
76:d9:cd:a2:42:df:1f:fc:14:d4:1e:0b:d8:dd:50:
3c:84:8b:82:5d:8d:d5:56:4a:6c:2f:c1:5f:55:a3:
5e:11:16:54:3c:f4:cc:36:dd:8b:11:7a:94:2d:b3:
45:70:45:98:6f:a0:d8:7f:5a:32:a3:60:16:35:f6:
b8:f3:e7:1a:75:fd:31:40:ac:c0:98:3e:3f:52:c3:
25:a7:a2:08:9f:6b:90:c2:24:b9:c4:dd:ea:49:08:
0c:66:3f:f1:74:0b:03:e0:f5:70:18:2b:6f:88:65:
4b:0b:9b:ad:06:a3:b9:ba:a1:cd:28:df:51:39:33:
01:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A2:53:7E:47:0C:94:F6:AF:91:08:08:59:DE:90:E4:F1:2B:37:8E
X509v3 Authority Key Identifier:
keyid:03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/JaJTfkcMlPavkQgIWd6Q5PErN44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.36.0/22
IPv6:
2a0c:d240::/29
Signature Algorithm: sha256WithRSAEncryption
8a:0b:ed:cd:90:9a:cf:b7:e7:76:f1:85:73:b0:ce:02:75:f7:
18:6b:e4:ca:4a:14:c5:7f:27:b8:84:d8:00:64:d7:c3:90:25:
67:e3:c5:81:3e:ea:cb:1e:02:7e:34:bc:d2:c3:7c:db:da:fc:
e3:36:32:69:52:1c:37:74:0c:ef:cb:2c:a8:a4:12:b1:7e:28:
1d:59:ad:60:1f:f2:ca:ac:54:32:4d:ae:cd:36:48:f6:2a:64:
2c:10:66:98:86:54:1c:a7:64:e0:8c:d5:e7:52:96:d0:40:b0:
3b:41:a1:b0:19:97:c7:be:3e:91:3c:76:32:9c:67:ae:3d:06:
6c:63:48:97:fe:12:f3:63:f9:61:84:ec:77:01:74:7e:a5:3f:
08:e3:82:02:f8:44:17:b5:5f:1e:0e:60:72:6f:03:99:bb:6f:
45:9d:be:f4:08:72:fa:49:6a:69:d2:a5:ee:ad:37:be:e1:51:
53:0a:55:90:af:fa:39:55:f4:c7:d6:8f:09:f6:9d:b0:fe:89:
06:f6:34:c9:c6:7d:df:ed:7c:e5:12:70:3b:3f:94:33:f2:42:
74:8a:ed:79:9a:4c:7c:07:c3:7f:d8:f9:3a:0e:7b:dc:dd:be:
a6:9a:81:bc:d5:09:8e:e6:f7:7b:24:74:23:e7:1e:b0:d0:69:
8b:b5:34:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:13:40 2025 by rpki-client