Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/025122-5b87-40de-858b-0731a526211d/1/jLYpFXTK1MV_3zEnHvYbp4CO10c.roa
File: jLYpFXTK1MV_3zEnHvYbp4CO10c.roa (raw, json)
Hash identifier: xdyu/ecRyTuNBDk/VEjzQhqHrwdQRBbBnQQ0PeVME4o=
Subject key identifier: 8C:B6:29:15:74:CA:D4:C5:7F:DF:31:27:1E:F6:1B:A7:80:8E:D7:47
Certificate issuer: /CN=85bb7b75b26dfe13e8583ea7c1ae621944c8ce30
Certificate serial: 01821F82D1FA0C98D888EEF3699F18F0CB03
Authority key identifier: 85:BB:7B:75:B2:6D:FE:13:E8:58:3E:A7:C1:AE:62:19:44:C8:CE:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbt7dbJt_hPoWD6nwa5iGUTIzjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/025122-5b87-40de-858b-0731a526211d/1/jLYpFXTK1MV_3zEnHvYbp4CO10c.roa
Signing time: Thu 21 Jul 2022 06:47:23 +0000
ROA not before: Thu 21 Jul 2022 06:47:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 194.26.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1f:82:d1:fa:0c:98:d8:88:ee:f3:69:9f:18:f0:cb:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85bb7b75b26dfe13e8583ea7c1ae621944c8ce30
Validity
Not Before: Jul 21 06:47:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8cb6291574cad4c57fdf31271ef61ba7808ed747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c9:1e:ce:3d:fd:61:17:2f:7f:48:6d:83:96:
bb:d3:30:75:40:c6:62:7e:e4:d9:07:83:9f:92:77:
a0:ac:d4:89:a4:1b:d5:8d:ef:dc:47:9e:69:e8:2e:
a6:d5:df:27:bc:78:02:e2:cf:20:c3:20:cd:3b:07:
f8:3a:9c:d7:67:01:b1:a7:8a:d2:ad:68:d4:10:88:
60:ef:aa:d2:f2:6f:fa:cf:a8:92:c5:c5:86:8e:a6:
f0:94:c2:e4:55:b2:49:8c:ae:1b:fc:e5:a3:5a:93:
cb:c1:f6:d5:1f:56:6d:d5:48:73:31:ea:5a:94:c9:
a7:df:95:49:63:05:a2:08:78:b5:96:f9:f7:7c:6f:
d5:93:13:b8:d7:bf:00:f1:7e:b6:80:80:24:66:c6:
91:c9:2d:6b:03:b0:6d:10:0a:db:bc:68:44:87:25:
96:ac:8a:dd:a9:35:75:78:0b:ec:1c:71:7b:f8:74:
9c:14:38:a7:2c:bc:60:4f:d2:4a:cb:da:76:a0:59:
85:49:06:93:21:cc:da:07:86:6f:a6:91:36:f9:72:
32:bf:d5:97:61:a6:c9:51:f6:1b:ba:aa:22:8f:f5:
04:a1:a2:c8:65:47:1f:de:d8:ba:48:1a:91:1c:e6:
31:60:4b:a8:6d:a7:08:f2:d2:57:97:4b:39:d1:f6:
18:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B6:29:15:74:CA:D4:C5:7F:DF:31:27:1E:F6:1B:A7:80:8E:D7:47
X509v3 Authority Key Identifier:
keyid:85:BB:7B:75:B2:6D:FE:13:E8:58:3E:A7:C1:AE:62:19:44:C8:CE:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbt7dbJt_hPoWD6nwa5iGUTIzjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/025122-5b87-40de-858b-0731a526211d/1/jLYpFXTK1MV_3zEnHvYbp4CO10c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/025122-5b87-40de-858b-0731a526211d/1/hbt7dbJt_hPoWD6nwa5iGUTIzjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.202.0/24
Signature Algorithm: sha256WithRSAEncryption
91:a6:46:18:0a:22:fd:65:07:98:09:7a:d3:b3:83:69:fa:86:
47:c5:43:cb:71:c9:40:e1:13:35:6a:6b:83:af:e3:0b:64:1c:
4a:67:a8:01:d6:26:85:05:ca:10:e7:e8:ef:17:d9:b1:74:e6:
3e:9d:77:d6:a8:d8:9c:03:37:ff:a6:2d:42:b7:ac:b5:16:08:
bf:71:66:69:3a:b6:e2:93:26:a6:85:6f:66:a7:f2:d5:dc:90:
9c:11:b0:a7:fb:f6:11:3e:a6:01:7b:c7:8b:ee:ce:9e:5c:51:
b1:c5:8b:e3:03:c3:d5:cc:6e:de:13:dd:37:ee:2d:ab:e1:4f:
dc:96:0d:ad:52:da:1a:b6:11:0c:b9:f2:ec:38:ca:ad:cb:bd:
09:cd:74:73:01:34:77:db:bb:7e:e6:1f:be:43:58:c3:fa:34:
d7:11:c8:0d:c1:bb:21:b1:f8:ed:33:d3:81:b1:fc:f6:c7:60:
40:bc:2a:51:8d:e3:74:7a:44:25:de:eb:15:d8:17:29:76:b2:
52:93:b9:a0:85:3f:87:ae:6b:ef:15:00:02:43:6c:c8:f1:09:
9e:ef:3c:34:a7:c5:e8:8b:1f:80:65:51:59:30:c1:4c:6c:bc:
af:c3:ed:48:b5:82:70:c1:2f:f8:d0:46:2d:45:a4:80:3d:89:
33:f5:8a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:03:50 2025 by rpki-client