Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/808471-7daa-4cd2-a860-069da9c84785/1/J1L0NCRBRrTcVw6vMmsVGug33ic.roa
File: J1L0NCRBRrTcVw6vMmsVGug33ic.roa (raw, json)
Hash identifier: R2s71XcgJeOgVTMCw2uoPd3f26i6r0wZ8CRKVSu8c3k=
Subject key identifier: 27:52:F4:34:24:41:46:B4:DC:57:0E:AF:32:6B:15:1A:E8:37:DE:27
Certificate issuer: /CN=20d617bdb5d768e395e49b41cd81217bd3163ab3
Certificate serial: 018AD156492DA7552D2E5C683AAB92331185
Authority key identifier: 20:D6:17:BD:B5:D7:68:E3:95:E4:9B:41:CD:81:21:7B:D3:16:3A:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INYXvbXXaOOV5JtBzYEhe9MWOrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/808471-7daa-4cd2-a860-069da9c84785/1/J1L0NCRBRrTcVw6vMmsVGug33ic.roa
Signing time: Tue 26 Sep 2023 11:53:27 +0000
ROA not before: Tue 26 Sep 2023 11:53:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30870
IP address blocks: 171.25.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d1:56:49:2d:a7:55:2d:2e:5c:68:3a:ab:92:33:11:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d617bdb5d768e395e49b41cd81217bd3163ab3
Validity
Not Before: Sep 26 11:53:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2752f434244146b4dc570eaf326b151ae837de27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e2:dd:82:03:e3:37:df:a8:2c:2f:23:88:e4:
08:e4:39:7c:42:92:a0:ef:a6:17:1f:54:91:6d:58:
82:47:a8:fa:8c:3a:33:fe:55:4c:46:78:ad:73:9e:
b8:5e:1e:c5:bf:37:5a:4b:af:f5:12:76:d4:2c:d4:
5d:92:28:af:c6:c7:9d:87:88:26:f1:03:6a:e7:3f:
4e:15:b4:cb:a0:69:48:a3:b8:81:05:8b:a9:fd:16:
6d:40:e4:99:e1:2c:51:ab:56:41:38:2f:0a:95:2b:
3a:39:0a:b1:ed:ae:fa:3f:5c:95:b8:a6:cb:1e:28:
91:0e:2e:7a:b0:21:14:87:f5:ad:e5:0f:b3:14:1e:
72:4f:b1:86:56:10:0c:e2:ad:39:27:86:09:7f:d2:
3a:fa:b7:34:af:49:55:41:a6:b8:61:4e:a6:29:8c:
bb:a4:47:64:52:6c:4a:36:c6:4b:bf:f3:80:b9:88:
d7:8a:bd:bb:e0:86:99:7c:20:78:81:57:2f:41:72:
11:17:a6:09:de:5e:63:01:83:43:93:f0:17:0a:24:
39:7d:fd:23:7f:52:37:45:a4:85:fc:14:3c:d1:b0:
61:e6:47:cf:3f:a9:c7:a7:5e:f9:45:28:44:e6:97:
e6:0e:6b:f5:d5:1c:58:e5:10:c0:0e:67:79:56:3e:
4d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:52:F4:34:24:41:46:B4:DC:57:0E:AF:32:6B:15:1A:E8:37:DE:27
X509v3 Authority Key Identifier:
keyid:20:D6:17:BD:B5:D7:68:E3:95:E4:9B:41:CD:81:21:7B:D3:16:3A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INYXvbXXaOOV5JtBzYEhe9MWOrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/808471-7daa-4cd2-a860-069da9c84785/1/J1L0NCRBRrTcVw6vMmsVGug33ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/808471-7daa-4cd2-a860-069da9c84785/1/INYXvbXXaOOV5JtBzYEhe9MWOrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.25.179.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:7a:cc:cf:e7:5a:5f:b8:63:61:c0:d2:cc:10:91:81:e4:97:
cf:70:7e:ab:e9:df:09:98:17:34:ee:c5:06:12:e7:e9:78:62:
ad:e7:67:77:93:85:3c:39:c2:94:2d:3b:35:0e:3a:86:98:5e:
3a:aa:d1:94:73:15:ad:b3:3b:46:ac:7b:fe:97:73:50:3b:88:
ce:c2:e0:b9:42:25:cb:77:53:d4:65:fc:a1:fa:47:4f:05:e6:
11:fe:65:96:02:be:77:26:bb:7f:95:b3:ca:7d:0c:f6:2d:03:
bb:8b:b5:18:d0:18:08:4d:e2:c4:89:ce:aa:15:91:ab:26:95:
65:a4:04:67:4d:62:12:95:19:c2:96:58:a7:64:68:49:0c:88:
ea:e7:32:6d:cc:16:46:23:35:23:3d:14:44:f8:e7:20:93:08:
2b:2e:41:30:37:b8:72:df:3f:4f:6d:c5:01:e8:2c:66:1d:0b:
da:96:d5:e0:f4:88:0a:73:0f:8e:94:5d:24:1a:56:6f:6a:c0:
ba:4a:a6:b0:54:6c:2d:a0:1f:33:fb:b6:8e:2d:99:fb:9f:18:
84:a2:91:22:d8:d0:8c:b4:ae:f9:bc:8c:3d:50:66:89:e0:57:
ce:c7:f2:94:90:5d:c9:b4:34:a4:84:68:d2:fa:b7:85:ef:9d:
63:32:8c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:57:51 2025 by rpki-client