Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/jvHRud-0bfVZE35uo3ytxWpEsiQ.roa
File: jvHRud-0bfVZE35uo3ytxWpEsiQ.roa (raw, json)
Hash identifier: /JbTDkFvtTl5SlOmgYIpMzTAuGjpF4dmP37OC1pKU5o=
Subject key identifier: 8E:F1:D1:B9:DF:B4:6D:F5:59:13:7E:6E:A3:7C:AD:C5:6A:44:B2:24
Certificate issuer: /CN=07ffd290387dd34ac0790c6b9d7ee99fedb78149
Certificate serial: 0194228D5849A6D2ABB24816F69C972490A7
Authority key identifier: 07:FF:D2:90:38:7D:D3:4A:C0:79:0C:6B:9D:7E:E9:9F:ED:B7:81:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/jvHRud-0bfVZE35uo3ytxWpEsiQ.roa
Signing time: Wed 01 Jan 2025 15:47:55 +0000
ROA not before: Wed 01 Jan 2025 15:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43543
IP address blocks: 193.239.170.0/23 maxlen: 23
193.239.170.0/24 maxlen: 24
193.239.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:58:49:a6:d2:ab:b2:48:16:f6:9c:97:24:90:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ffd290387dd34ac0790c6b9d7ee99fedb78149
Validity
Not Before: Jan 1 15:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ef1d1b9dfb46df559137e6ea37cadc56a44b224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:78:25:d6:dd:6e:1a:a7:7a:e2:82:dd:72:7d:
1e:12:5f:a1:5e:8b:8b:ae:ec:a9:3e:ee:98:c5:bd:
18:80:7e:5d:9a:9b:8b:2c:69:04:63:70:65:86:d6:
42:20:08:2f:45:73:7c:49:96:7d:d2:28:2a:0c:38:
d8:e2:8e:a8:4c:33:a8:5a:27:fd:30:39:5e:13:d6:
e1:cf:0c:90:7a:3e:d1:c5:2c:9f:e3:9e:08:d2:00:
16:12:c4:9d:53:7d:4c:c7:5c:7a:48:04:e9:3b:95:
7f:ae:21:31:c4:78:35:3d:f5:51:cc:7e:5b:91:c2:
cb:41:92:31:40:05:93:4d:86:91:5a:2f:38:90:83:
a9:9d:bd:e1:f5:53:02:e3:bb:a3:68:18:ab:15:fb:
e0:99:7d:e6:94:37:c0:6e:78:86:0a:0a:be:38:2f:
24:be:06:f0:cd:e7:09:9d:ef:2f:55:0e:fe:7e:af:
41:d5:09:dc:84:ca:1f:9b:c2:ac:40:be:46:11:24:
5b:4e:2a:4a:e0:d7:93:68:7e:fe:31:69:69:1a:41:
0d:c2:95:1b:80:6b:1c:16:69:be:86:5f:0d:56:a8:
8c:b9:7f:42:4b:bb:3d:9e:f6:58:21:e5:54:9f:41:
5f:08:a9:04:8a:37:d4:e3:89:2f:45:ba:38:36:0b:
ca:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F1:D1:B9:DF:B4:6D:F5:59:13:7E:6E:A3:7C:AD:C5:6A:44:B2:24
X509v3 Authority Key Identifier:
keyid:07:FF:D2:90:38:7D:D3:4A:C0:79:0C:6B:9D:7E:E9:9F:ED:B7:81:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/jvHRud-0bfVZE35uo3ytxWpEsiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.170.0/23
Signature Algorithm: sha256WithRSAEncryption
19:7b:cc:97:de:fa:34:74:1f:e9:ce:aa:a2:03:84:7a:b3:61:
79:1c:56:d1:f7:69:e8:f3:00:2b:a3:17:f7:00:c5:c8:95:a3:
16:4f:81:c4:d4:39:95:c4:18:a4:24:86:0c:e4:d6:15:c0:b0:
fa:f2:ce:1b:78:93:1a:a2:41:12:a3:8d:0e:43:f1:be:e7:f8:
30:07:e1:c8:72:30:1a:cc:27:4a:ff:20:e3:08:c9:00:2f:06:
b4:38:fc:da:f9:cb:67:82:1e:65:f6:18:af:76:7e:85:c1:9e:
45:fc:64:18:cb:57:49:17:5d:ef:6f:eb:77:d9:33:2b:da:18:
1b:89:ab:ae:00:c0:c4:07:63:5e:0b:ac:57:0c:8e:b6:d7:80:
ba:63:b3:b2:86:7a:cf:25:13:45:53:94:f3:1d:44:f8:1f:c7:
5c:cb:5a:8b:d2:3b:01:84:1e:7f:7a:4e:9e:4b:d4:7d:3d:18:
a7:ef:a2:54:31:e4:04:6b:0c:62:8e:e0:c0:df:8b:eb:40:97:
e2:72:92:dc:70:51:87:38:7b:31:f2:30:d8:af:a7:da:f0:18:
6f:62:41:cb:f4:54:2e:22:9f:71:31:ac:31:e4:4b:18:0f:ee:
11:be:0a:37:ea:d1:3c:8e:52:f6:ea:1d:ff:1e:23:64:6d:0a:
86:15:87:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:28:52 2025 by rpki-client