Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/JDL_bTLQliD0VZtakowkUoox7IM.roa
File: JDL_bTLQliD0VZtakowkUoox7IM.roa (raw, json)
Hash identifier: pVZ5cOlZpd+7ZJKDVw7S4J8Ok1Mj30Rz2dcGh5Ypgvc=
Subject key identifier: 24:32:FF:6D:32:D0:96:20:F4:55:9B:5A:92:8C:24:52:8A:31:EC:83
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0194258FB4139E27705A7359BA99B8F46D16
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/JDL_bTLQliD0VZtakowkUoox7IM.roa
Signing time: Thu 02 Jan 2025 05:49:22 +0000
ROA not before: Thu 02 Jan 2025 05:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214466
IP address blocks: 185.177.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b4:13:9e:27:70:5a:73:59:ba:99:b8:f4:6d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 2 05:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2432ff6d32d09620f4559b5a928c24528a31ec83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:1a:ca:9b:7a:ac:7f:06:ab:84:95:a4:71:09:
ca:a8:76:76:48:62:6c:de:34:ac:ea:af:98:db:fd:
48:b1:77:80:54:5f:92:f4:7e:79:b0:2f:3a:2b:f1:
85:6e:b5:3e:97:a9:34:07:e3:d2:a4:b2:cd:d7:46:
e9:42:67:94:d2:68:77:17:bd:27:71:9e:b3:4c:b1:
ab:5d:42:d3:9a:3f:ff:ff:29:9b:d8:46:58:ec:1d:
06:5e:76:00:03:a7:3a:3a:23:7f:16:e7:ff:29:73:
e5:94:90:34:22:0d:9e:98:0c:fd:85:24:e8:10:4d:
9d:7c:25:f8:fd:3e:21:a4:a5:9f:b5:7d:85:96:9c:
c8:b6:ef:87:d8:98:54:db:01:d1:d3:67:63:3c:8f:
e2:b0:c7:ad:00:9c:09:c2:85:f7:22:98:34:25:56:
08:2a:90:95:4e:72:39:83:4d:ed:c2:12:28:ae:7b:
fd:bb:9e:13:19:cc:ff:1b:2e:f6:5e:cf:e4:01:90:
eb:99:87:b6:33:0c:c2:65:6b:01:d9:f7:67:48:14:
ef:c8:22:23:2c:ee:07:f9:a5:fb:86:41:61:9c:f2:
ac:2c:82:34:0b:99:34:01:e7:fa:2e:8b:0a:31:63:
39:b8:f0:4d:93:89:c4:69:0e:50:46:09:2a:56:fc:
c0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:32:FF:6D:32:D0:96:20:F4:55:9B:5A:92:8C:24:52:8A:31:EC:83
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/JDL_bTLQliD0VZtakowkUoox7IM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.27.0/24
Signature Algorithm: sha256WithRSAEncryption
59:dd:eb:89:34:98:1f:6a:83:b3:53:67:d5:bf:88:52:4a:0a:
c0:8f:27:30:15:92:b1:4a:e6:e0:43:9c:05:93:66:66:48:25:
b0:db:dd:1f:97:6a:4a:b1:55:01:99:f1:0d:51:df:6b:1b:42:
08:40:0b:5a:a6:86:c2:4b:6d:bc:ac:e2:6f:0c:1e:76:66:4e:
fa:e1:2f:ae:a5:6e:3e:c9:8c:00:c2:4d:dd:59:77:dd:0b:95:
c4:2a:d1:2d:63:af:00:ff:4a:38:5e:81:eb:6b:99:1d:5b:39:
3a:ed:28:a1:68:6d:d7:2b:0f:08:58:9c:e5:e8:b0:07:e6:f6:
b3:b5:1c:29:af:ea:cc:d4:a1:dd:31:c0:01:dd:1f:c2:bf:c3:
40:e0:62:bf:d2:cc:b4:95:c6:46:e4:d0:80:50:cb:d2:f7:37:
2e:2b:a3:db:d3:a7:2d:8a:13:ad:2e:fa:e0:51:12:fa:58:52:
27:09:6e:97:75:cb:af:51:e3:eb:95:3b:21:16:bd:13:5d:4b:
85:c3:0f:04:6e:ad:a2:d5:4c:f4:db:3e:ad:de:13:44:8e:d7:
08:02:8a:f2:1f:0e:66:20:9f:74:7d:a6:81:71:02:14:a0:fe:
fa:7c:9c:04:ed:df:bd:43:6a:8b:92:73:81:fd:d1:f2:4d:d3:
cf:05:91:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 22:06:38 2025 by rpki-client