Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/jmak-v64GTqjWb3T6uni0jUVvgQ.roa
File: jmak-v64GTqjWb3T6uni0jUVvgQ.roa (raw, json)
Hash identifier: LaiPSip8vv2wVJJCjgMSAkXTT9RIlduD3tqgEaKNcpw=
Subject key identifier: 8E:66:A4:FA:FE:B8:19:3A:A3:59:BD:D3:EA:E9:E2:D2:35:15:BE:04
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 0192C3584E156192BFFD745D7C7702833493
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/jmak-v64GTqjWb3T6uni0jUVvgQ.roa
Signing time: Fri 25 Oct 2024 11:03:17 +0000
ROA not before: Fri 25 Oct 2024 11:03:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197706
IP address blocks: 31.171.152.0/24 maxlen: 24
31.171.153.0/24 maxlen: 24
31.171.154.0/24 maxlen: 24
31.171.155.0/24 maxlen: 24
31.171.156.0/24 maxlen: 24
31.171.157.0/24 maxlen: 24
31.171.158.0/24 maxlen: 24
31.171.159.0/24 maxlen: 24
45.142.24.0/24 maxlen: 24
45.142.25.0/24 maxlen: 24
45.142.26.0/24 maxlen: 24
45.142.27.0/24 maxlen: 24
103.93.40.0/24 maxlen: 24
103.93.41.0/24 maxlen: 24
103.93.42.0/24 maxlen: 24
103.93.43.0/24 maxlen: 24
103.111.0.0/24 maxlen: 24
103.111.1.0/24 maxlen: 24
103.111.2.0/24 maxlen: 24
103.111.3.0/24 maxlen: 24
109.104.132.0/24 maxlen: 24
109.104.135.0/24 maxlen: 24
109.104.136.0/24 maxlen: 24
109.104.137.0/24 maxlen: 24
109.104.138.0/24 maxlen: 24
109.104.139.0/24 maxlen: 24
109.104.140.0/22 maxlen: 22
109.104.140.0/24 maxlen: 24
109.104.141.0/24 maxlen: 24
109.104.142.0/24 maxlen: 24
109.104.143.0/24 maxlen: 24
109.104.156.0/24 maxlen: 24
109.104.157.0/24 maxlen: 24
109.104.158.0/24 maxlen: 24
109.104.159.0/24 maxlen: 24
144.48.52.0/24 maxlen: 24
144.48.53.0/24 maxlen: 24
144.48.54.0/24 maxlen: 24
144.48.55.0/24 maxlen: 24
185.53.100.0/22 maxlen: 24
185.153.124.0/22 maxlen: 24
185.153.124.0/24 maxlen: 24
185.153.125.0/24 maxlen: 24
185.153.126.0/24 maxlen: 24
185.153.127.0/24 maxlen: 24
185.233.124.0/24 maxlen: 24
185.233.125.0/24 maxlen: 24
185.233.126.0/24 maxlen: 24
194.113.94.0/24 maxlen: 24
194.113.95.0/24 maxlen: 24
2a04:27c0::/29 maxlen: 48
2a09:6e40::/29 maxlen: 48
2a09:6e47::/48 maxlen: 48
2a09:6ec0::/29 maxlen: 48
2a0d:27c0::/29 maxlen: 48
2a0d:42c0::/29 maxlen: 48
2a0d:4a40::/29 maxlen: 48
2a0e:3f00::/29 maxlen: 48
2a0e:3f01::/48 maxlen: 48
2a0e:4f00::/29 maxlen: 48
2a0e:d4c0::/29 maxlen: 48
2a0f:42c0::/29 maxlen: 48
2a0f:a880::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c3:58:4e:15:61:92:bf:fd:74:5d:7c:77:02:83:34:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Oct 25 11:03:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e66a4fafeb8193aa359bdd3eae9e2d23515be04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e2:90:00:94:df:73:70:43:39:59:6b:d1:75:
69:ce:9d:3c:81:25:43:90:e6:6b:1c:fb:f7:55:60:
d7:45:7e:9a:99:64:45:a3:f3:cb:d4:85:3f:b3:42:
1d:16:4b:5a:d3:58:9c:44:2e:10:70:11:07:57:d9:
d4:9c:16:6b:77:b1:f2:80:f5:79:b8:69:39:0e:cb:
98:de:15:c6:5a:59:06:4e:75:8f:0f:2b:52:f6:4c:
37:83:ae:05:b0:f6:26:51:04:b4:33:2e:1d:ff:e6:
75:4f:48:cb:4d:48:e3:8a:ba:ea:15:69:e6:79:23:
7b:ea:3a:de:01:ea:fb:52:01:cd:6c:8d:55:34:1d:
e8:c7:33:4b:ea:a9:36:a7:b3:31:19:0b:3d:67:11:
c0:06:7f:bd:7c:3b:a1:dd:31:7f:9f:39:75:e3:40:
1f:4d:2c:1e:48:ad:e5:ed:d3:9d:8f:99:59:b8:21:
a1:1e:23:d1:82:1f:ad:21:5e:0f:77:a8:c4:6f:ad:
48:da:92:41:69:d5:39:7f:8d:2d:86:b4:bb:a7:28:
58:9c:82:78:69:49:9c:62:e8:4d:6d:8d:9f:ec:0d:
7a:e8:b0:0c:9e:05:fb:78:b7:de:81:28:44:5f:cb:
23:30:e0:f0:91:e0:51:63:f0:21:6a:51:48:4d:85:
a7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:66:A4:FA:FE:B8:19:3A:A3:59:BD:D3:EA:E9:E2:D2:35:15:BE:04
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/jmak-v64GTqjWb3T6uni0jUVvgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.152.0/21
45.142.24.0/22
103.93.40.0/22
103.111.0.0/22
109.104.132.0/24
109.104.135.0-109.104.143.255
109.104.156.0/22
144.48.52.0/22
185.53.100.0/22
185.153.124.0/22
185.233.124.0-185.233.126.255
194.113.94.0/23
IPv6:
2a04:27c0::/29
2a09:6e40::/29
2a09:6ec0::/29
2a0d:27c0::/29
2a0d:42c0::/29
2a0d:4a40::/29
2a0e:3f00::/29
2a0e:4f00::/29
2a0e:d4c0::/29
2a0f:42c0::/29
2a0f:a880::/29
Signature Algorithm: sha256WithRSAEncryption
5d:c7:98:57:2c:ca:a4:4f:fb:25:36:09:f7:e9:73:3a:d1:42:
23:b0:77:b6:4d:12:d9:3c:e5:9f:bb:8c:ea:e6:b7:45:d5:4c:
5e:24:f4:a5:bf:b9:d5:19:fa:f9:42:af:69:99:59:ee:e8:ce:
9b:81:91:19:3f:21:c7:b8:b7:10:01:42:69:5c:db:5d:48:45:
0e:c1:c9:28:1f:72:c4:8d:97:ef:9c:68:d9:4e:00:5b:3f:a3:
26:a5:65:a9:cb:ce:e6:57:ef:41:c3:cc:0d:4d:0c:d2:ef:71:
b6:2a:75:fc:76:e4:f3:b9:a7:67:20:e2:a5:88:8a:c8:90:59:
27:90:0f:0a:8d:31:63:16:c8:16:72:28:dd:18:7c:f6:96:2b:
5c:41:21:60:13:eb:6f:17:1d:3d:3f:a4:42:ea:0e:89:d8:8d:
87:ea:fa:37:6c:eb:90:ff:44:27:d0:20:35:88:62:2b:09:54:
03:49:56:ea:5d:c9:1e:21:9f:37:20:39:e7:c8:47:eb:e6:dd:
97:42:10:af:2b:ed:17:87:e4:b5:c5:41:13:c6:c7:fa:0f:74:
03:ab:0a:9e:dd:e2:43:bb:bb:d9:a6:7d:28:e7:bd:be:3d:71:
32:32:5d:80:f1:8c:f2:99:31:46:37:f9:06:e4:30:26:08:06:
07:ab:98:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:27 2025 by rpki-client