Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/jJkmu95ExwTShGBJvsJR7aBhoPU.roa
File: jJkmu95ExwTShGBJvsJR7aBhoPU.roa (raw, json)
Hash identifier: nz14VG6Wmam+OFYqgavV7ACmkDO4KpLptIyk8PePgL8=
Subject key identifier: 8C:99:26:BB:DE:44:C7:04:D2:84:60:49:BE:C2:51:ED:A0:61:A0:F5
Certificate issuer: /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Certificate serial: 019427479797507C14575044DF2B48D62FF9
Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/jJkmu95ExwTShGBJvsJR7aBhoPU.roa
Signing time: Thu 02 Jan 2025 13:49:50 +0000
ROA not before: Thu 02 Jan 2025 13:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207185
IP address blocks: 213.162.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:97:97:50:7c:14:57:50:44:df:2b:48:d6:2f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Validity
Not Before: Jan 2 13:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c9926bbde44c704d2846049bec251eda061a0f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:84:0e:fe:8d:d3:d8:3f:e9:8a:27:83:1f:24:
3b:24:5c:9e:ba:f4:1c:92:00:ac:55:71:69:13:e9:
c6:20:d6:7c:1e:55:30:11:4d:c9:aa:43:a0:66:9c:
60:05:f3:6d:6f:3c:e1:ed:ce:3e:fa:2d:2f:d5:42:
48:bb:48:6f:77:9a:96:ce:77:9a:ee:84:94:62:58:
62:ae:ce:65:91:01:3c:52:f5:0e:c5:93:db:be:1d:
00:5f:11:61:1b:cf:24:cc:66:29:c9:d9:df:c3:2e:
b9:c8:f8:82:af:e4:c6:d0:fa:d4:00:b0:da:76:05:
b7:e5:fd:6e:fe:8f:e6:ef:cb:89:79:e5:02:7b:e6:
1a:e7:c3:9e:61:59:35:9f:c6:ea:14:2b:fc:06:4f:
71:73:4d:60:5e:b9:69:88:3e:13:45:4f:33:ca:25:
64:1a:2f:44:ff:23:6a:b4:fc:fa:9b:b6:b5:af:1a:
37:22:11:68:68:7d:c0:fa:f9:ed:0c:a5:1e:d8:c8:
81:9a:3e:3a:8b:30:ed:5f:3a:db:1a:63:b1:f9:4e:
24:93:81:3e:62:ed:ae:64:c0:4b:f3:da:ed:97:0b:
08:8f:4f:45:d1:46:96:ab:07:8e:aa:65:04:ab:b0:
06:16:c4:09:d9:22:67:c5:62:ac:d7:12:e6:80:9c:
a5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:99:26:BB:DE:44:C7:04:D2:84:60:49:BE:C2:51:ED:A0:61:A0:F5
X509v3 Authority Key Identifier:
keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/jJkmu95ExwTShGBJvsJR7aBhoPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.162.213.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:72:6a:4d:ed:bc:58:ba:6d:b9:37:ab:e5:e3:47:f3:e0:93:
ae:bb:94:2d:44:d7:a2:fc:16:4b:fa:1a:96:d0:0a:0d:77:bb:
1c:e0:94:a4:87:51:c7:c2:e0:e0:5d:8a:3b:12:bf:fb:58:25:
8d:39:bd:4c:25:ad:49:01:47:7d:24:88:35:f7:1c:af:7d:6a:
46:0d:dc:b9:b6:78:55:f2:20:a7:35:a8:cc:55:3e:b1:fe:ce:
0f:c5:b1:7c:c1:d8:38:6d:c2:bf:39:43:b7:7b:9b:bf:9b:e5:
e2:da:70:19:5a:f6:f4:f4:80:20:be:ca:aa:e3:0e:a8:6d:da:
47:b8:a3:34:c6:2e:c1:3d:99:79:13:41:87:34:d1:40:dc:d5:
ed:1c:46:6b:d2:04:39:33:f9:22:fd:8d:e0:5a:17:a0:a2:53:
3e:f4:e8:48:93:8f:67:bd:52:d1:fb:8d:10:7e:f7:ac:89:a5:
32:89:5c:f2:a9:50:3b:3d:d7:06:11:0a:bf:ad:16:9a:46:3b:
d9:af:19:bf:92:af:a7:d8:9f:fa:62:50:c8:b5:d4:55:9f:29:
c8:a2:13:85:98:f0:72:5c:b8:f5:e5:14:b5:cf:46:4e:2a:9d:
60:a4:23:80:14:a9:e3:aa:2f:6d:dd:54:38:d9:12:fd:33:fb:
e8:b0:4d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:16 2025 by rpki-client on console.sobornost.net