Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/jd_503cYp9J1Yr70UbKTG77Aqxc.roa
File: jd_503cYp9J1Yr70UbKTG77Aqxc.roa (raw, json)
Hash identifier: qwDT1Ct+oslN/8BPXMvqksfhpk0lZ7kUcCGDQcwDgzc=
Subject key identifier: 8D:DF:F9:D3:77:18:A7:D2:75:62:BE:F4:51:B2:93:1B:BE:C0:AB:17
Certificate issuer: /CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8
Certificate serial: 0193715A19373F127CCF3DC2CAB810BD9F12
Authority key identifier: D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/jd_503cYp9J1Yr70UbKTG77Aqxc.roa
Signing time: Thu 28 Nov 2024 05:59:10 +0000
ROA not before: Thu 28 Nov 2024 05:59:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29056
IP address blocks: 195.88.238.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:71:5a:19:37:3f:12:7c:cf:3d:c2:ca:b8:10:bd:9f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8
Validity
Not Before: Nov 28 05:59:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ddff9d37718a7d27562bef451b2931bbec0ab17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b7:3e:ef:4e:99:84:a1:7f:e1:99:2a:bf:8f:
50:3a:ad:e7:c0:88:05:74:ec:e7:78:52:94:d4:f7:
60:b3:92:42:c7:aa:c3:7a:6f:e1:b3:7c:34:a8:57:
e8:20:63:bf:42:39:5c:46:3e:2a:da:75:e0:94:12:
81:9f:51:41:83:45:25:c7:ea:6f:29:55:89:aa:4c:
7e:b1:8e:5c:0f:2a:1e:e3:ef:22:bd:3f:bb:8a:8f:
b8:b8:17:d9:7f:e7:50:f0:64:db:33:c5:3b:47:a0:
3d:0b:05:8e:b0:87:67:7c:77:a7:14:e6:89:e0:3a:
59:f0:1d:88:12:e5:42:60:f3:d0:bb:4e:15:45:d2:
b0:7d:57:00:c0:82:4e:f5:d6:1f:b2:ab:e8:9b:17:
f1:12:47:f2:1b:f6:fe:70:53:a0:ad:6f:c7:17:ca:
92:36:21:0c:dc:ad:73:17:00:50:cc:94:f6:16:89:
84:25:c0:96:83:ef:0c:b1:0b:20:4f:d1:6e:09:1d:
33:6a:93:c1:f0:53:7d:83:41:67:32:cd:2d:81:0d:
87:82:79:a1:e4:0b:ac:7b:63:cc:ad:15:9f:89:79:
d3:05:fe:d0:72:c0:53:55:5f:dc:e0:45:54:31:de:
5a:3f:89:11:9d:94:0b:9b:6a:02:34:4f:bb:fe:01:
b4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:DF:F9:D3:77:18:A7:D2:75:62:BE:F4:51:B2:93:1B:BE:C0:AB:17
X509v3 Authority Key Identifier:
keyid:D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/jd_503cYp9J1Yr70UbKTG77Aqxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.238.0/23
Signature Algorithm: sha256WithRSAEncryption
96:0d:e2:1e:5c:62:74:77:52:48:96:71:68:70:61:53:4a:5c:
2a:e1:b0:64:88:9d:79:ed:32:88:8d:0a:3a:70:75:0a:79:e5:
3d:51:73:50:0a:15:a8:d0:24:58:b3:f3:c8:aa:cd:12:92:c5:
78:79:0d:58:8b:62:6c:73:de:01:fd:14:eb:41:96:af:81:a9:
cd:a6:36:44:36:b2:a8:89:88:87:f6:3c:0d:d7:90:0d:b4:64:
82:b1:e7:a5:b4:66:80:6e:c7:aa:fe:95:52:0c:07:52:c8:b8:
92:9b:01:26:69:0c:6e:fe:ae:8d:51:fc:4f:58:df:c8:85:40:
b0:93:ac:79:83:60:48:fb:6b:77:59:42:55:ef:88:9c:7b:91:
9f:16:f7:e4:ef:ca:16:18:a9:e8:f1:da:52:2b:3d:1d:b2:a3:
ae:30:04:65:83:d1:8d:a8:3c:d3:cd:28:ea:2d:96:43:49:a3:
cb:ba:00:b5:16:fb:6d:8d:e1:3f:90:55:8c:1c:8f:c5:91:a1:
d0:b9:95:c3:0d:8b:f9:82:43:1a:fc:c0:36:da:41:08:77:ef:
6f:f5:43:31:52:95:ab:8c:ff:f8:d3:5d:75:d4:cf:6b:c7:30:
74:e6:cd:9e:88:70:e8:86:74:88:7b:ab:d3:2e:98:1c:d4:60:
2b:5e:e6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:33 2024 by rpki-client on console.sobornost.net