Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/sJLQX0xj_JXH1h41N6UVjiWKBII.roa
File: sJLQX0xj_JXH1h41N6UVjiWKBII.roa (raw, json)
Hash identifier: +Hmj+iesuGr60ujxMyJDlZF5PIcV2l7P1ugWqsp11rI=
Subject key identifier: B0:92:D0:5F:4C:63:FC:95:C7:D6:1E:35:37:A5:15:8E:25:8A:04:82
Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial: 019424B3CD12BAD17CDDDFEE022466100676
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/sJLQX0xj_JXH1h41N6UVjiWKBII.roa
Signing time: Thu 02 Jan 2025 01:49:10 +0000
ROA not before: Thu 02 Jan 2025 01:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212193
IP address blocks: 188.132.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:cd:12:ba:d1:7c:dd:df:ee:02:24:66:10:06:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Validity
Not Before: Jan 2 01:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b092d05f4c63fc95c7d61e3537a5158e258a0482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4c:67:97:2b:f0:35:82:32:0f:6c:49:f1:31:
63:db:c4:81:ab:8e:66:42:0f:07:7b:3d:51:56:8e:
44:5f:7e:9b:f6:4b:f5:1a:3b:c4:ec:87:d5:31:77:
49:ab:ae:1a:c4:6d:10:e8:81:16:e2:3c:b6:5f:32:
89:80:59:a3:84:1c:6d:50:84:6e:e0:59:07:c7:53:
b3:94:ac:61:99:6d:6f:61:58:7e:1d:4f:27:ba:05:
df:0c:6c:9b:c2:7d:20:5b:eb:06:85:ff:51:a9:74:
27:18:2b:fa:cc:30:b3:15:87:ba:9d:c3:f7:5e:d6:
1b:ee:91:bb:71:09:15:57:ed:c8:f3:f7:1a:02:10:
a7:e1:cb:16:5a:47:ce:71:07:03:20:4c:87:13:11:
7b:c3:be:03:ff:c5:ea:94:fd:c8:e5:f5:a5:43:95:
fe:51:11:29:fe:5b:67:f9:62:21:e4:e8:88:e4:4b:
4a:e0:c3:da:d5:a1:7c:ac:cb:d9:d4:6a:04:1b:60:
f7:73:2e:75:2f:55:a9:1c:a0:85:f9:c7:26:b3:f5:
d2:95:5f:2d:88:76:0f:58:85:a3:5c:d8:7a:ed:e4:
5b:80:5d:10:dc:70:e2:1a:f3:f7:0b:79:ed:f2:37:
d3:46:a7:cf:a8:cb:be:8d:96:11:86:db:5c:ad:76:
b0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:92:D0:5F:4C:63:FC:95:C7:D6:1E:35:37:A5:15:8E:25:8A:04:82
X509v3 Authority Key Identifier:
keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/sJLQX0xj_JXH1h41N6UVjiWKBII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.195.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:5d:e3:cb:95:e2:77:2f:4d:28:d2:14:b6:68:d9:a1:32:d9:
3e:39:b0:f8:a7:2a:ae:af:81:29:2f:f6:b1:a3:b2:87:52:25:
12:f6:19:f1:e7:9a:1c:46:53:f1:91:41:3b:cd:d3:ec:67:a7:
6d:d2:b7:06:e7:58:4a:d6:7d:73:70:2a:0c:ff:f9:76:96:64:
73:3f:3a:19:33:a2:ca:57:b4:9b:3f:fb:ec:2c:01:d0:a5:e8:
e9:82:30:aa:97:64:0f:f0:57:db:1a:8d:d1:43:c4:5b:62:b4:
7d:e9:60:c1:52:f0:bf:5a:57:97:73:12:fb:11:83:ec:17:0d:
52:c0:d3:61:21:ea:57:3f:aa:cd:07:2c:d7:d5:d9:c5:30:43:
b9:6b:e5:71:fc:81:9a:c4:71:00:b8:96:ff:ed:af:89:3f:b8:
3f:35:89:90:cf:84:42:af:b6:30:10:f9:93:37:9b:0a:32:51:
64:2f:35:7f:86:f1:96:52:f4:65:d3:7e:c3:71:d0:f1:84:3b:
c0:f4:1e:bc:c9:14:8f:f4:df:9c:bc:b2:8f:72:19:f8:89:5b:
60:f6:9e:75:59:2b:86:0b:7b:06:62:f5:b0:48:01:2f:35:e2:
d6:de:58:ba:22:38:8d:73:38:4f:3b:68:94:7b:3d:e8:76:4c:
10:24:3a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:28 2025 by rpki-client on console.sobornost.net