Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/Jfp2BkUryUy6473OSd5t9xfZXek.roa
File: Jfp2BkUryUy6473OSd5t9xfZXek.roa (raw, json)
Hash identifier: /yj9OMbKiB1Ji+Udov4fFjS1PqdNa09sKJHlaeP3Vq8=
Subject key identifier: 25:FA:76:06:45:2B:C9:4C:BA:E3:BD:CE:49:DE:6D:F7:17:D9:5D:E9
Certificate issuer: /CN=96c56c5ea5478f4d37b30f3682e43b7e2ef90d98
Certificate serial: 019422FC25684B6F298621FB423028F51724
Authority key identifier: 96:C5:6C:5E:A5:47:8F:4D:37:B3:0F:36:82:E4:3B:7E:2E:F9:0D:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsVsXqVHj003sw82guQ7fi75DZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/Jfp2BkUryUy6473OSd5t9xfZXek.roa
Signing time: Wed 01 Jan 2025 17:48:57 +0000
ROA not before: Wed 01 Jan 2025 17:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31534
IP address blocks: 193.16.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:25:68:4b:6f:29:86:21:fb:42:30:28:f5:17:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96c56c5ea5478f4d37b30f3682e43b7e2ef90d98
Validity
Not Before: Jan 1 17:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25fa7606452bc94cbae3bdce49de6df717d95de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9f:0c:5f:05:cc:4b:97:26:e2:0d:d1:b1:f1:
10:18:c3:bd:bf:c4:c6:2e:ea:11:d9:06:11:07:a2:
31:04:d8:91:e5:ae:aa:39:bb:2d:ee:85:4f:cc:b6:
bb:e5:07:cb:56:6a:27:fd:b1:02:60:06:59:99:0f:
aa:cf:fc:17:11:86:5d:29:3d:0b:d6:3e:68:c1:22:
30:60:0b:91:fb:78:96:9e:59:fa:ce:54:48:9e:44:
c2:e4:9e:26:0f:06:32:8c:07:bb:0c:70:af:4b:47:
a0:f4:76:a0:c8:47:a9:84:59:b4:af:1a:9f:6c:17:
ad:15:60:f1:8c:9d:06:2e:2a:4e:0a:ee:fe:94:2c:
e4:ef:57:12:14:4a:c4:68:2f:3c:36:dd:ce:6c:59:
d6:63:e8:3a:10:bd:ed:e8:f1:07:4c:39:78:05:cb:
8a:b1:4f:88:e1:1c:cb:ca:a9:0c:e3:64:cd:08:ac:
35:75:61:b5:ca:8d:71:7b:0c:15:59:b6:6c:45:b8:
92:11:4f:2a:bb:98:2f:34:f7:fd:98:22:87:74:39:
51:c4:02:92:8b:2c:13:0c:ce:27:64:36:5d:b4:68:
7a:a6:87:17:f7:c2:5a:f6:2c:2a:35:25:f7:c3:78:
5a:7f:41:42:2e:68:1c:8b:3e:8e:61:64:09:0c:49:
83:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FA:76:06:45:2B:C9:4C:BA:E3:BD:CE:49:DE:6D:F7:17:D9:5D:E9
X509v3 Authority Key Identifier:
keyid:96:C5:6C:5E:A5:47:8F:4D:37:B3:0F:36:82:E4:3B:7E:2E:F9:0D:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsVsXqVHj003sw82guQ7fi75DZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/Jfp2BkUryUy6473OSd5t9xfZXek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.102.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:96:e4:a8:65:2e:6f:e3:d5:50:3a:83:18:6c:61:77:ab:9b:
ba:99:5e:09:27:cf:78:c1:a2:9d:6a:29:b0:79:33:39:63:f8:
f2:9b:4c:9a:7e:e5:e2:45:14:47:5b:dd:99:6c:22:75:94:ca:
06:cf:cc:56:8e:a1:9d:bd:7d:01:51:c2:b1:fb:19:a1:d4:42:
e7:50:14:2e:c3:b3:3b:34:c3:bf:ec:4a:93:75:8c:e0:af:e5:
2c:7c:12:16:02:21:e2:a0:66:0a:22:ea:f1:3e:0f:39:5c:f2:
a1:a0:9c:6a:e6:b6:60:27:4e:cc:25:12:21:f8:a8:9c:30:33:
af:88:06:fa:7c:f9:52:c9:d0:21:0f:8c:96:93:86:be:e4:0e:
53:d9:60:38:a4:d3:50:98:8c:b2:9a:d2:04:34:45:e3:3a:8c:
50:12:86:13:63:a3:90:6c:b9:e1:2d:39:18:a5:48:f6:9f:1d:
f4:43:17:72:6c:f3:2f:22:fc:aa:5c:c0:16:92:ba:74:ab:4c:
e2:01:13:ff:cc:38:84:a6:4f:a2:26:6c:07:db:db:01:f0:d5:
74:40:c4:45:c3:ef:86:e2:04:db:8d:eb:55:cb:dc:08:27:33:
ba:99:79:98:56:70:a9:f4:bb:4b:7a:13:92:17:41:6b:03:27:
0d:93:84:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:26:20 2025 by rpki-client