Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/JbFTKsYCdYTemXtCMaoCGPCb_ts.roa
File: JbFTKsYCdYTemXtCMaoCGPCb_ts.roa (raw, json)
Hash identifier: 9MukSppM7ZP0dLRuUTCzbpAchMnqJZvzbwM4s+EOfAk=
Subject key identifier: 25:B1:53:2A:C6:02:75:84:DE:99:7B:42:31:AA:02:18:F0:9B:FE:DB
Certificate issuer: /CN=0f025fa357c20abbf118426234658e62d7dc7076
Certificate serial: 0194236A10F981D3DA20E2E7957599A19DD6
Authority key identifier: 0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/JbFTKsYCdYTemXtCMaoCGPCb_ts.roa
Signing time: Wed 01 Jan 2025 19:49:01 +0000
ROA not before: Wed 01 Jan 2025 19:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214294
IP address blocks: 123.100.225.0/24 maxlen: 24
2a01:ee80:1::/48 maxlen: 48
2a01:ee80:2::/48 maxlen: 48
2a01:ee80:77::/48 maxlen: 48
2a01:ee80:141::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:10:f9:81:d3:da:20:e2:e7:95:75:99:a1:9d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f025fa357c20abbf118426234658e62d7dc7076
Validity
Not Before: Jan 1 19:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25b1532ac6027584de997b4231aa0218f09bfedb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:36:6b:0f:6d:b4:04:66:4f:d1:b8:63:07:33:
c7:8a:ca:a2:ba:dc:b6:90:ea:9a:8f:cd:0d:3e:f8:
a6:22:e1:94:35:d4:44:0b:91:2d:b5:0f:84:39:6e:
74:71:bb:b5:46:2c:ef:91:6a:27:a9:34:39:b1:a1:
37:de:c5:51:6d:4a:91:f8:1d:7e:8e:88:18:d1:6b:
55:69:67:df:54:74:1e:4e:bf:e5:bd:a5:bd:f4:f4:
4e:8e:d5:4d:3b:87:2f:89:e5:0e:95:55:34:44:e0:
6b:bd:e7:22:d9:80:d4:fb:a7:d5:6f:be:98:74:2a:
8b:5c:22:10:ea:f8:bd:a3:05:b4:8f:f7:64:32:3c:
d7:9b:1a:ce:67:e6:f5:d6:6e:2d:8c:24:82:0e:73:
20:bf:e7:17:46:9e:51:81:d0:19:03:10:b0:d4:a1:
e9:9b:ee:1f:22:d8:8e:e4:44:c5:31:f5:4b:51:1b:
df:d4:7f:de:56:25:8d:3d:f3:4a:55:63:17:4e:4a:
a3:62:dc:49:2e:95:35:36:2e:9a:27:dd:a8:c6:a6:
a3:4c:98:d7:24:12:93:b0:4e:b0:cb:89:80:f6:4c:
d7:45:d4:11:61:21:03:a6:92:35:ec:09:16:e5:59:
96:9a:7c:7c:c4:c0:1c:1e:47:40:22:85:66:f7:f9:
58:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B1:53:2A:C6:02:75:84:DE:99:7B:42:31:AA:02:18:F0:9B:FE:DB
X509v3 Authority Key Identifier:
keyid:0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/JbFTKsYCdYTemXtCMaoCGPCb_ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.100.225.0/24
IPv6:
2a01:ee80:1::-2a01:ee80:2:ffff:ffff:ffff:ffff:ffff
2a01:ee80:77::/48
2a01:ee80:141::/48
Signature Algorithm: sha256WithRSAEncryption
39:3e:79:c3:a2:84:6d:80:34:9d:46:aa:0c:df:b1:d8:61:9a:
5d:17:e0:2f:d8:14:e4:41:5b:48:d4:e5:53:de:ce:7b:ca:a2:
15:cd:70:f3:62:92:e4:a5:1b:3c:f7:ce:41:ef:e2:97:fb:91:
4d:ca:fd:e4:64:74:ed:68:db:72:db:85:5f:c1:ac:e0:81:57:
ef:33:46:ba:f7:4e:d6:63:d1:0c:25:23:b9:3c:b1:c5:21:da:
9d:27:dd:ad:18:a0:20:59:93:1a:19:b1:b4:a4:76:55:c9:b8:
93:57:57:08:50:12:c4:1f:52:a1:7c:ac:ad:5f:49:63:2e:be:
1c:05:60:75:cc:4e:5e:c1:47:a5:65:8a:37:f9:f7:a0:20:b6:
eb:04:f3:a3:18:e5:ee:3e:ed:f6:6e:48:8b:a2:cf:83:56:38:
0a:b7:6c:63:9d:4c:9d:ca:8e:a0:a6:64:2c:e2:70:ef:88:3b:
2e:ab:dc:00:ca:9d:7a:3b:71:e3:19:b5:e2:16:c1:2a:95:e2:
71:fe:7a:8b:4e:5c:70:c4:32:f7:69:5d:27:4b:83:af:77:d2:
9b:76:41:25:8e:40:d4:1a:13:12:c0:d7:b4:8b:38:d4:af:62:
a3:0c:8b:9d:f6:4f:59:d3:3f:ad:99:f7:68:06:2a:0d:04:ca:
3c:65:d6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:52:31 2025 by rpki-client