Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/C-CN_JaiRgSKbzPlXi0Jj-g5PhY.roa
File: C-CN_JaiRgSKbzPlXi0Jj-g5PhY.roa (raw, json)
Hash identifier: ZM7c9sV798W9KVJ3kQt3+KcxqmeF+wXg6yCfeTfvBKg=
Subject key identifier: 0B:E0:8D:FC:96:A2:46:04:8A:6F:33:E5:5E:2D:09:8F:E8:39:3E:16
Certificate issuer: /CN=4a8095927ee57ccee256aa439f163686b58c570c
Certificate serial: 019423D8039A7AD987E81562AB12B1A3CE98
Authority key identifier: 4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/C-CN_JaiRgSKbzPlXi0Jj-g5PhY.roa
Signing time: Wed 01 Jan 2025 21:49:06 +0000
ROA not before: Wed 01 Jan 2025 21:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60537
IP address blocks: 185.29.192.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d8:03:9a:7a:d9:87:e8:15:62:ab:12:b1:a3:ce:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8095927ee57ccee256aa439f163686b58c570c
Validity
Not Before: Jan 1 21:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0be08dfc96a246048a6f33e55e2d098fe8393e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:aa:b9:8d:37:7b:d6:16:4b:61:17:da:c1:3e:
51:30:a1:23:3a:1c:42:e5:0c:f8:77:0a:fd:f2:eb:
4c:a2:75:9a:dc:f0:30:56:13:c6:95:01:61:55:85:
5f:4f:d9:b8:8a:da:10:26:e9:3f:8c:56:20:52:09:
ee:cd:bf:e6:c7:80:03:00:0d:33:df:c5:7c:3b:a5:
0f:30:69:58:7a:18:6e:bb:ad:00:1e:bd:d9:31:14:
4e:1a:d7:b1:b7:60:6f:0a:5b:b7:b6:5a:1c:61:52:
a0:33:e2:99:53:27:10:c1:81:e0:69:6c:b3:2b:0f:
e9:76:a6:ca:fc:46:fd:d7:85:4c:53:4b:96:3b:e1:
ce:ab:19:1e:ff:08:1f:ab:1e:e1:55:8b:dc:fa:04:
a0:ab:c8:48:b7:22:67:2c:c1:d5:28:83:4d:45:71:
7f:ab:0f:9a:db:65:a1:8e:6e:80:11:e5:a4:8d:6c:
b2:2c:25:e0:79:2f:eb:f2:8d:35:c1:f6:58:d4:c0:
0d:fd:ca:48:8c:c1:e4:ea:ad:9b:b2:44:92:86:3a:
7b:dd:58:56:dd:b4:21:82:08:73:a3:6d:0f:fe:b2:
0e:b0:fa:9d:9e:3a:52:89:96:da:58:c9:c3:a3:f7:
ab:1d:71:71:04:fd:49:d5:4c:78:c5:ab:9f:a4:c7:
9a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E0:8D:FC:96:A2:46:04:8A:6F:33:E5:5E:2D:09:8F:E8:39:3E:16
X509v3 Authority Key Identifier:
keyid:4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/C-CN_JaiRgSKbzPlXi0Jj-g5PhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.192.0/22
Signature Algorithm: sha256WithRSAEncryption
17:83:0b:9f:b4:9b:a9:fd:9b:22:72:22:c6:82:e9:fc:23:67:
29:9c:f6:6d:8e:ee:6b:38:fe:d4:f2:d6:00:4c:61:b1:4b:c3:
02:bd:99:90:d7:ae:43:e9:19:1b:9d:67:6e:1f:75:af:0a:92:
96:bd:e8:62:77:e1:15:64:b1:c1:df:7e:b2:75:ba:e6:e5:b3:
90:0e:9d:68:91:91:59:75:24:75:c1:91:d5:41:19:2f:aa:bd:
10:7a:32:65:14:a0:6c:b9:73:ab:08:d8:c8:60:f0:ac:37:e1:
0f:40:c7:85:d6:4b:d8:d4:61:e4:8f:fc:7a:cb:ca:bf:c4:a1:
1b:ea:26:18:5e:4b:59:84:af:5b:a4:ac:35:5f:70:1a:5b:2e:
53:78:ad:5d:20:f4:11:36:ce:6e:9a:61:32:21:73:d0:f5:4f:
e9:d7:86:9c:73:63:d5:06:9b:11:4f:1b:4b:2c:79:b3:97:48:
1a:43:07:24:5c:cd:f0:20:2f:6b:f2:76:95:fa:c2:e3:a0:34:
40:b0:1a:0a:7a:3a:7b:79:e5:22:00:e5:9f:ce:3c:e5:dc:0f:
d0:7a:e2:d7:41:98:81:66:02:02:03:32:f5:b0:f7:82:70:f0:
ef:97:13:3e:07:d6:35:82:d1:75:c7:d2:65:79:47:66:9f:e2:
fb:a8:e7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:05:38 2025 by rpki-client