Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/jDbnCgLzOMoh_-prUYRyopQON3Q.roa
File: jDbnCgLzOMoh_-prUYRyopQON3Q.roa (raw, json)
Hash identifier: 6fIT6hQqx2VPBEO30KN0TuzIAeq1d3a3aNS/Vq7UDzI=
Subject key identifier: 8C:36:E7:0A:02:F3:38:CA:21:FF:EA:6B:51:84:72:A2:94:0E:37:74
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 019427B67B99B3F52D1056C6407E3C20492D
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/jDbnCgLzOMoh_-prUYRyopQON3Q.roa
Signing time: Thu 02 Jan 2025 15:50:58 +0000
ROA not before: Thu 02 Jan 2025 15:50:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12389
IP address blocks: 2.16.20.0/24 maxlen: 24
2.16.21.0/24 maxlen: 24
2.16.53.0/24 maxlen: 24
2.17.144.0/24 maxlen: 24
2.17.145.0/24 maxlen: 24
2.17.146.0/24 maxlen: 24
2.19.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:7b:99:b3:f5:2d:10:56:c6:40:7e:3c:20:49:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 2 15:50:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c36e70a02f338ca21ffea6b518472a2940e3774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:66:f1:5b:cc:bc:5a:c8:7e:b5:09:89:a0:39:
a8:96:1f:f6:f6:1c:77:6e:fb:cd:32:53:c9:83:c6:
e3:15:bb:28:7b:a7:ce:89:9e:8d:f5:30:ac:b8:0e:
b8:c1:ff:98:ec:28:a1:1a:ba:ec:54:66:3a:8e:18:
c9:0d:e2:b1:7e:95:73:c6:6e:d1:6f:94:ee:46:f2:
d6:35:1b:aa:03:ea:6f:55:e0:71:13:86:30:b2:ad:
84:1e:98:ef:53:7d:1b:dd:6a:60:71:b2:09:d6:bd:
f6:5d:f3:d7:7f:d5:00:7f:34:c2:55:22:d5:66:53:
17:7b:f9:6a:a6:c1:18:0e:52:a7:d6:a0:6a:9d:2f:
4f:95:4d:0b:c1:3e:9b:52:a9:cb:48:1f:ae:75:fb:
53:90:5c:76:fa:eb:95:e6:43:5b:4a:5c:c3:76:b0:
0c:7e:ab:3c:c5:ed:a0:89:c5:d6:97:61:da:de:91:
d6:8c:39:87:da:64:e9:f4:14:f7:4f:8f:77:ba:3b:
ef:92:93:75:76:43:6a:e4:9c:42:9b:e1:25:42:15:
d5:c6:05:b7:38:20:36:d0:bc:3f:8c:b7:5c:67:84:
17:c6:cf:ba:9d:f3:77:ab:78:22:62:8a:a9:6f:98:
99:ee:38:48:bc:fa:03:02:64:f3:f7:2f:7b:52:66:
e9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:36:E7:0A:02:F3:38:CA:21:FF:EA:6B:51:84:72:A2:94:0E:37:74
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/jDbnCgLzOMoh_-prUYRyopQON3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.16.20.0/23
2.16.53.0/24
2.17.144.0-2.17.146.255
2.19.181.0/24
Signature Algorithm: sha256WithRSAEncryption
26:1a:78:37:08:59:5f:fd:ec:c6:9d:73:6c:c4:b9:a9:b5:18:
c2:ac:82:0b:d7:d3:9b:53:43:ca:d7:5e:dd:4c:79:81:7d:86:
9c:c2:0b:88:94:e8:a1:88:e2:6c:4c:04:7d:89:69:7d:42:66:
fa:22:cb:a7:86:58:0a:6b:80:38:37:64:4e:9f:32:ce:7a:99:
1e:32:72:8b:4f:aa:20:9d:9f:83:b8:72:24:e2:a7:57:87:9d:
1d:d3:e0:b8:5b:3e:23:b1:d7:df:4d:50:df:8a:16:af:ab:a0:
22:bf:c2:d3:c3:05:63:7b:a6:45:c4:0c:4c:8a:af:de:51:8f:
62:79:51:9f:8e:43:2e:72:55:7c:41:41:e4:b6:a4:de:5f:9a:
71:92:78:61:99:ef:34:d7:c8:0e:92:a4:0a:04:18:28:90:79:
d5:a8:02:71:e6:82:26:08:e9:53:d8:8a:f1:8d:c2:ef:bf:b6:
d7:d5:6d:7a:d1:68:c8:72:7d:69:85:35:5e:db:b5:0e:08:11:
97:03:4c:65:d1:91:7f:ad:63:cf:9e:a5:76:35:ac:19:23:a5:
38:76:45:76:ad:41:a9:cf:62:a8:b6:73:2b:39:1b:82:bd:af:
97:73:75:d5:fa:61:64:d0:c2:f3:08:47:41:92:3d:0f:c6:75:
03:0a:47:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:46:43 2025 by rpki-client