Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/jzrvK-bgXnpFKZtkluSwDEQbp08.roa
File: jzrvK-bgXnpFKZtkluSwDEQbp08.roa (raw, json)
Hash identifier: ZM3tthCJVaSjXclzoJDdeWjLh7O5ICpnIBuMTiMEL9g=
Subject key identifier: 8F:3A:EF:2B:E6:E0:5E:7A:45:29:9B:64:96:E4:B0:0C:44:1B:A7:4F
Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Certificate serial: 019425FD5E3D0A56EAB634305A671A3B077D
Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/jzrvK-bgXnpFKZtkluSwDEQbp08.roa
Signing time: Thu 02 Jan 2025 07:49:09 +0000
ROA not before: Thu 02 Jan 2025 07:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208650
IP address blocks: 185.202.134.0/24 maxlen: 24
185.202.135.0/24 maxlen: 24
2a0a:d6c0:134::/48 maxlen: 48
2a0a:d6c0:135::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:5e:3d:0a:56:ea:b6:34:30:5a:67:1a:3b:07:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Validity
Not Before: Jan 2 07:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f3aef2be6e05e7a45299b6496e4b00c441ba74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d3:87:2f:29:8d:77:ce:b5:b8:39:ab:fe:a6:
4a:d5:9f:ca:58:1d:a6:34:b3:fb:07:0e:e4:db:c8:
40:3a:f0:8d:47:28:80:97:05:e7:9f:32:40:ff:83:
65:8e:ea:5b:77:ab:b3:58:e7:4f:4c:e5:67:5e:1e:
1b:f4:09:f1:68:b8:6f:24:81:5c:ae:a3:6e:f6:e7:
a3:73:24:ee:fc:88:cd:0e:e3:ff:0c:f1:e1:2a:87:
44:7d:2a:94:34:11:38:97:b8:75:4a:2b:ce:e6:61:
5f:75:a8:55:55:4f:5b:fd:04:fe:ae:19:cf:6c:af:
c1:2a:80:44:a3:13:55:8b:00:50:d0:1f:81:df:ba:
6d:08:9d:53:fb:59:1d:e0:70:aa:ae:88:81:61:67:
e8:40:6c:d6:ab:10:63:0d:a9:e6:5d:49:4b:8a:6f:
21:7b:9e:6f:9d:97:44:f5:96:7a:2c:95:5b:98:f3:
a4:53:69:9d:08:5b:f2:ed:db:0a:3a:87:7c:33:45:
27:cb:11:8b:25:fe:8e:af:e9:62:11:1f:1c:a3:74:
5e:c1:d8:dd:ce:18:74:e2:1a:99:8e:98:6b:3e:ef:
92:19:fd:6d:e5:74:f6:15:be:5f:55:73:b3:80:4b:
16:84:a0:b4:50:9b:fd:4c:97:3d:e8:b4:bc:e8:84:
59:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:3A:EF:2B:E6:E0:5E:7A:45:29:9B:64:96:E4:B0:0C:44:1B:A7:4F
X509v3 Authority Key Identifier:
keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/jzrvK-bgXnpFKZtkluSwDEQbp08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.134.0/23
IPv6:
2a0a:d6c0:134::/47
Signature Algorithm: sha256WithRSAEncryption
2d:45:9a:74:f6:e2:a7:e3:c4:16:3c:ac:21:a0:8f:a8:d5:29:
15:e0:0c:78:61:71:20:43:a1:5f:58:be:bc:c8:0a:ff:6c:d2:
7b:1f:24:cd:2a:95:57:c0:1e:a1:38:91:aa:0c:b0:58:b8:2f:
13:e7:48:a2:fc:76:f8:1f:5c:53:e7:6b:fc:01:7e:c9:7b:fc:
95:07:1e:8b:70:3e:3e:40:37:98:0f:44:28:2d:db:e6:3d:92:
16:c9:2e:ff:fb:55:56:b0:4f:a8:eb:c4:bd:9e:41:ae:e9:46:
db:04:c5:46:2b:2b:3d:db:14:d1:ce:bd:3d:34:c6:5f:98:f3:
f3:7a:d7:2d:33:4f:2f:5c:0a:20:6b:06:fe:5c:37:c5:b1:3f:
5f:32:21:20:16:da:cd:f1:0c:42:7f:db:7c:21:24:01:6a:a5:
a1:28:ee:3d:d8:5e:7e:d5:9b:d0:c2:f1:11:bb:0b:3a:1f:2e:
25:20:22:88:43:be:39:8e:a9:7a:1a:7b:68:7b:4d:f3:0a:7d:
90:70:89:25:11:e3:2f:ec:9c:69:90:20:05:a3:f7:21:d8:37:
50:cf:c2:11:68:60:3d:73:21:1c:99:9f:47:95:37:80:5c:32:
a5:04:ea:4d:44:ea:86:88:2e:ee:ef:80:c5:d7:09:07:c0:99:
83:a6:37:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:02:25 2025 by rpki-client