Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/1-J2GOXt84t6tSsUvN6SzYODsM14.roa
File: 1-J2GOXt84t6tSsUvN6SzYODsM14.roa (raw, json)
Hash identifier: z8eYv5B023TelbPYrwzQ1iKaFGt6xVRZj+H2E/7ShQM=
Subject key identifier: F8:9D:86:39:7B:7C:E2:DE:AD:4A:C5:2F:37:A4:B3:60:E0:EC:33:5E
Certificate issuer: /CN=08759158de234b754b7150f21933096c1094aac4
Certificate serial: 019425FDB067D0C98914BB257420803D0C24
Authority key identifier: 08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/1-J2GOXt84t6tSsUvN6SzYODsM14.roa
Signing time: Thu 02 Jan 2025 07:49:30 +0000
ROA not before: Thu 02 Jan 2025 07:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12906
IP address blocks: 188.65.0.0/21 maxlen: 24
2a00:eea0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:b0:67:d0:c9:89:14:bb:25:74:20:80:3d:0c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08759158de234b754b7150f21933096c1094aac4
Validity
Not Before: Jan 2 07:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f89d86397b7ce2dead4ac52f37a4b360e0ec335e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:6a:e4:dc:99:8c:25:08:5e:80:d4:3d:57:7b:
b5:02:37:ac:79:40:e0:3a:59:07:e5:0b:5b:b9:70:
5f:51:6f:09:39:f0:96:33:66:03:d6:fb:09:9a:3b:
7f:51:5b:3a:fd:79:72:47:e4:52:62:5b:df:84:f4:
2c:ce:ce:89:ac:5c:f1:73:aa:92:52:d9:90:95:45:
91:5a:36:a3:28:5a:25:7c:a9:d0:42:76:4f:be:3e:
26:ec:b8:58:6c:6e:47:66:fb:41:3e:ad:37:b9:4d:
79:d0:56:de:89:cf:78:fe:7b:e9:5c:2a:ff:31:9e:
f2:10:79:10:c8:2b:37:cb:ae:71:a0:ea:e7:e4:08:
4c:c4:90:77:a3:69:1e:ad:52:65:bb:9c:b6:04:50:
7c:d0:8e:5c:5a:8e:d4:20:6f:ee:1b:71:f4:71:78:
0e:91:70:80:be:dd:db:d6:85:95:b6:a8:74:b6:d3:
aa:e2:1c:b1:72:f8:97:a2:37:09:b0:d9:ca:b4:f4:
82:c3:71:e4:95:5b:a9:ea:bc:ad:81:08:52:a7:8b:
03:55:ec:79:9f:36:08:a2:d1:c8:0f:5c:6f:a4:a6:
e3:2b:7c:49:c5:94:31:95:d2:02:20:0b:cb:b6:33:
f4:e4:63:6d:be:d2:3a:28:ac:77:c3:d4:43:30:ce:
c4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9D:86:39:7B:7C:E2:DE:AD:4A:C5:2F:37:A4:B3:60:E0:EC:33:5E
X509v3 Authority Key Identifier:
keyid:08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/1-J2GOXt84t6tSsUvN6SzYODsM14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.65.0.0/21
IPv6:
2a00:eea0::/29
Signature Algorithm: sha256WithRSAEncryption
35:dc:bd:1f:52:41:15:24:fc:7d:ee:36:0c:a1:c1:7d:f0:dd:
d7:06:a7:ce:f4:7b:ff:3b:0f:ee:ec:96:37:3e:05:eb:7c:27:
f4:9b:31:a8:34:6d:09:12:2f:0b:df:b4:8a:a1:73:b4:73:2b:
9d:29:f7:c3:1b:04:01:38:f2:86:f6:31:f7:d0:55:85:55:89:
b1:ee:dc:3d:6e:34:03:f8:fe:2a:a1:d6:53:e5:4c:e3:0a:ac:
5f:c2:35:84:5c:a7:0f:fe:22:c9:e1:d5:21:b1:e4:70:8b:65:
66:75:87:cc:dc:46:a6:60:d6:5a:19:28:2c:3b:0b:5f:60:4f:
4c:ef:35:7d:8d:f0:4a:ce:c8:71:2e:5b:1d:03:36:9b:d9:6a:
50:6e:34:05:ec:fe:07:4d:84:e3:f1:3e:01:3e:28:4b:fa:f9:
1f:b1:9d:fb:5b:8e:0a:0e:eb:1a:00:7c:84:9f:f6:1a:6d:46:
69:0b:3f:4a:03:63:ed:db:09:2d:f9:a7:37:58:28:d7:66:4d:
af:ca:97:7c:72:ae:94:10:41:0a:34:fc:cb:1f:94:53:0c:d6:
3e:13:0c:75:06:4d:c9:a8:f6:e6:0a:e8:16:8b:92:c5:cd:b4:
7d:15:ce:60:6e:d0:a1:6e:e3:95:8b:4b:1c:9a:2c:8b:6e:84:
15:eb:4a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:12:05 2025 by rpki-client