Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jgAEaPHnyoaBJmcuMYNiEGA6YlA.roa
File: jgAEaPHnyoaBJmcuMYNiEGA6YlA.roa (raw, json)
Hash identifier: HnzofKGWd1U7xf+oupV7nBbZLiP4FmqLsn4j19NfdjI=
Subject key identifier: 8E:00:04:68:F1:E7:CA:86:81:26:67:2E:31:83:62:10:60:3A:62:50
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194DC22FB2C7B30586BE2B010E7B5AA559D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jgAEaPHnyoaBJmcuMYNiEGA6YlA.roa
Signing time: Thu 06 Feb 2025 16:41:07 +0000
ROA not before: Thu 06 Feb 2025 16:41:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26383
IP address blocks: 2.58.95.0/24 maxlen: 24
31.13.248.0/24 maxlen: 24
94.156.116.0/24 maxlen: 24
193.58.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:dc:22:fb:2c:7b:30:58:6b:e2:b0:10:e7:b5:aa:55:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 6 16:41:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e000468f1e7ca868126672e31836210603a6250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c1:31:92:17:c7:76:6e:cf:c2:19:2e:0c:2c:
97:91:54:19:d9:d6:fe:98:d9:e2:21:d9:a9:0f:c0:
45:82:39:1a:1e:c7:cf:98:40:f9:c7:3c:f1:e1:46:
d3:2b:08:07:42:18:94:73:18:17:32:ca:fa:ae:a9:
29:b3:84:a8:e6:24:fc:60:96:8d:35:37:5e:d5:39:
a4:c2:14:92:24:39:f5:85:af:61:0f:31:73:85:6b:
5a:07:f8:8b:29:9e:6e:60:e6:ce:e1:69:fd:19:37:
a6:ef:bb:e1:20:fc:d3:1c:11:37:17:87:dd:bc:b2:
4e:68:01:33:33:6f:b8:bd:1a:d5:e6:7f:08:07:eb:
ec:e8:a5:0c:45:bb:3b:f1:b8:51:20:a3:0c:c5:ed:
c7:d9:e0:d7:74:e9:6c:8a:85:ea:c9:90:98:e2:21:
c8:8c:64:b9:21:17:d3:0d:a2:53:03:37:17:ee:6f:
10:d4:cb:8c:95:90:3c:16:9f:1c:84:43:41:cb:8a:
bf:da:a8:df:3c:98:a7:8b:6e:5d:60:c0:ce:0b:53:
c3:a7:66:cf:fa:95:8d:29:14:9e:9a:48:33:7e:06:
43:7f:a8:a6:60:fd:8a:ec:ec:32:35:25:d1:a6:71:
c6:6e:ed:cc:fe:e9:a6:f3:23:a0:f8:3f:2d:2c:ea:
67:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:00:04:68:F1:E7:CA:86:81:26:67:2E:31:83:62:10:60:3A:62:50
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jgAEaPHnyoaBJmcuMYNiEGA6YlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.95.0/24
31.13.248.0/24
94.156.116.0/24
193.58.120.0/24
Signature Algorithm: sha256WithRSAEncryption
17:f8:1c:08:db:57:dc:4a:71:74:ca:0e:3a:13:18:1d:28:da:
da:b5:ad:65:46:4e:bd:da:2c:f6:0a:38:10:b4:5d:73:a9:2c:
d8:43:0b:ca:8b:6f:49:4a:5d:ed:3e:7a:a3:31:58:c0:b9:61:
ed:ca:f6:33:de:2f:98:b7:e7:94:f9:c9:65:15:36:92:79:7f:
4b:77:7a:22:c9:cb:00:0e:f0:da:7a:20:80:a4:b2:0b:5e:3c:
32:ac:73:af:2f:d8:ed:47:cf:a9:b8:18:22:23:ad:db:08:e1:
ae:3b:54:7a:c3:49:cc:22:11:e9:6d:d6:e5:6a:89:c6:af:01:
27:eb:93:12:da:f1:18:82:01:43:a0:86:fc:a7:bc:d1:eb:a1:
fd:ff:33:ca:74:d5:3a:9a:99:ce:08:4a:23:9e:72:91:73:e8:
97:db:6f:6d:a0:e7:04:86:97:3a:91:85:91:e7:67:18:01:8d:
b4:cf:b5:31:07:ea:e2:d9:ec:a0:61:a6:f5:63:4d:3c:74:4f:
ce:7e:21:46:7c:4f:70:62:13:5d:df:10:9d:69:3f:3c:41:37:
97:be:7b:cb:cd:29:46:7e:d9:f5:ea:6c:ed:52:42:15:eb:da:
1e:3b:d8:73:39:65:bb:3a:38:b1:0e:d4:a7:d2:62:d6:d6:c8:
fe:93:10:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:34:36 2025 by rpki-client