Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/jbzxZYmQPO4lVh_5XWCn7tDn4rY.roa
File: jbzxZYmQPO4lVh_5XWCn7tDn4rY.roa (raw, json)
Hash identifier: cL3utd2QLzcDLl61jDEDa8thzTSW3ILE3u54VZ6FafA=
Subject key identifier: 8D:BC:F1:65:89:90:3C:EE:25:56:1F:F9:5D:60:A7:EE:D0:E7:E2:B6
Certificate issuer: /CN=c2370cf1809b7bc663ad4143c08976b48102efb9
Certificate serial: 01941FFAA86D9135929194A32C1186FF6BFD
Authority key identifier: C2:37:0C:F1:80:9B:7B:C6:63:AD:41:43:C0:89:76:B4:81:02:EF:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjcM8YCbe8ZjrUFDwIl2tIEC77k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/jbzxZYmQPO4lVh_5XWCn7tDn4rY.roa
Signing time: Wed 01 Jan 2025 03:48:28 +0000
ROA not before: Wed 01 Jan 2025 03:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211356
IP address blocks: 193.163.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a8:6d:91:35:92:91:94:a3:2c:11:86:ff:6b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2370cf1809b7bc663ad4143c08976b48102efb9
Validity
Not Before: Jan 1 03:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8dbcf16589903cee25561ff95d60a7eed0e7e2b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:28:3f:ec:52:46:93:c6:2a:e1:cb:d5:4c:55:
95:e1:89:ef:3d:83:ba:83:e6:a1:c0:41:f7:f2:03:
a0:f0:eb:34:25:49:41:83:7b:f7:97:5e:f2:b6:53:
d7:38:cb:ce:34:7f:f6:f9:56:f2:ed:41:6a:e2:3e:
a1:b9:ed:0b:9f:b0:c0:90:22:51:7f:a0:b1:7c:2c:
2f:9a:ba:32:b0:f9:0d:e5:d9:e6:60:4f:34:1d:ae:
ac:c2:dc:0e:ce:77:21:6f:8e:ed:44:e2:d8:d9:58:
28:31:19:0a:15:e8:fb:ab:c6:85:cd:50:99:4f:ed:
01:2e:3f:1d:59:80:5c:29:e2:cf:0e:75:c3:dc:c8:
92:35:fb:8d:ac:44:36:b1:e3:6d:67:29:23:81:a4:
46:69:f1:7c:ee:dc:9c:70:12:e6:7a:89:a2:2e:f1:
49:9c:95:aa:9d:b8:7e:a6:fb:ee:2e:bd:ef:22:1d:
e7:7f:17:b5:9b:1f:8e:59:70:21:0e:8c:b8:c0:c4:
0c:e2:29:fe:73:58:fc:61:a0:e6:d6:d2:8e:07:29:
45:0c:02:e4:f7:6c:4a:8c:50:67:e0:9b:5c:7f:2b:
0f:c2:30:a8:a3:96:e1:e3:90:30:e9:14:69:a0:55:
5b:ad:dc:bf:a9:35:f9:a5:5b:a2:c5:6e:b9:15:ab:
67:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BC:F1:65:89:90:3C:EE:25:56:1F:F9:5D:60:A7:EE:D0:E7:E2:B6
X509v3 Authority Key Identifier:
keyid:C2:37:0C:F1:80:9B:7B:C6:63:AD:41:43:C0:89:76:B4:81:02:EF:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjcM8YCbe8ZjrUFDwIl2tIEC77k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/jbzxZYmQPO4lVh_5XWCn7tDn4rY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/wjcM8YCbe8ZjrUFDwIl2tIEC77k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.187.0/24
Signature Algorithm: sha256WithRSAEncryption
32:d5:17:c6:e9:34:cf:2c:0d:56:03:fa:2d:c1:f7:54:14:53:
77:c2:83:40:f4:5a:95:3c:ff:1d:06:ab:97:95:2a:a3:90:c6:
43:c4:4f:4a:dc:ac:a0:9f:0b:fd:bf:61:51:4d:ec:63:b4:b0:
77:e3:3d:ab:09:ec:ee:97:7e:2d:2e:d2:fd:bb:b9:81:d9:b1:
84:5f:4d:25:38:a2:8f:9f:35:11:a4:f9:ea:3e:fe:76:ad:a9:
7b:33:45:b8:53:be:f2:16:d7:f3:fe:e1:76:b4:d2:e5:d3:66:
33:72:9a:b4:01:6c:82:c6:3a:2d:14:78:20:71:1f:09:8c:f0:
4b:83:f6:28:dc:96:2d:6a:f5:9b:c8:31:ac:b9:b8:45:32:2c:
d3:47:ea:22:f0:02:78:26:0b:3f:35:ce:df:a5:01:1e:0d:5c:
ad:62:d0:4d:22:e1:ad:44:3d:07:f7:a1:53:15:e2:59:29:fa:
51:c8:e7:22:58:0a:b2:f9:f8:a1:3d:e0:e0:64:78:93:fc:ad:
f1:c7:51:57:71:ff:4c:79:40:3e:a8:bd:e5:45:d8:3a:62:8d:
52:5b:c7:dc:6e:19:ed:cd:23:92:11:33:5e:bb:89:73:6a:eb:
b9:45:83:f9:7c:5f:b3:9f:66:94:c8:62:3a:1d:4e:39:6d:50:
3f:dd:65:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:14 2025 by rpki-client on console.sobornost.net