Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/JTjIGaNjpzftNO-kFk1BOWWIlR0.roa
File: JTjIGaNjpzftNO-kFk1BOWWIlR0.roa (raw, json)
Hash identifier: QhcjtouUn5V8upOm/6e13CmIXaLDrm57wRtRFJI8pfQ=
Subject key identifier: 25:38:C8:19:A3:63:A7:37:ED:34:EF:A4:16:4D:41:39:65:88:95:1D
Certificate issuer: /CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Certificate serial: 019423D6FDE178A673E0DFC11B27EA5520D8
Authority key identifier: 83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/JTjIGaNjpzftNO-kFk1BOWWIlR0.roa
Signing time: Wed 01 Jan 2025 21:47:59 +0000
ROA not before: Wed 01 Jan 2025 21:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207990
IP address blocks: 2.58.76.0/22 maxlen: 32
45.67.4.0/22 maxlen: 32
92.119.168.0/22 maxlen: 32
213.173.60.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:fd:e1:78:a6:73:e0:df:c1:1b:27:ea:55:20:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Validity
Not Before: Jan 1 21:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2538c819a363a737ed34efa4164d41396588951d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4f:82:c9:97:55:3c:5a:9d:a7:ad:2b:b2:93:
3c:ee:4e:c4:cc:33:67:b4:c7:0d:21:dc:80:61:e7:
45:79:80:c0:9b:a3:47:84:36:88:16:98:62:1c:ad:
8f:10:2a:55:f1:33:52:82:b7:df:bf:6e:53:89:db:
d3:55:69:c7:53:97:02:a0:b8:5d:06:b2:92:45:ed:
3e:97:26:2c:4b:07:b1:38:ab:ed:8b:c4:60:de:3b:
5b:7e:6a:da:44:e2:a3:41:e2:c7:7e:6a:e3:1a:09:
ad:9f:ca:8d:87:24:1d:51:37:fa:1e:c5:86:ef:6c:
ed:45:fb:64:bc:4d:3b:a7:6d:2a:8a:bf:7b:38:51:
d0:15:c0:76:3e:11:e7:1e:20:f5:7b:49:49:d5:ed:
4b:16:d3:46:2a:8b:f7:40:35:8f:88:9a:e5:12:54:
44:b5:22:00:4d:64:3d:0b:fc:65:7f:41:0d:24:a2:
61:8a:17:b0:dc:b0:12:27:61:07:ac:2d:85:e9:a4:
9e:d5:84:00:b9:59:c3:bc:5b:29:88:54:38:1f:d2:
08:8f:b9:dd:3d:fe:b0:7a:52:ad:e6:d5:55:c5:5a:
87:cd:25:e1:41:f8:62:9a:3d:d5:ea:7f:d1:47:37:
52:43:11:3c:5f:dc:c2:a9:2a:46:2f:a8:7b:1d:a6:
b7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:38:C8:19:A3:63:A7:37:ED:34:EF:A4:16:4D:41:39:65:88:95:1D
X509v3 Authority Key Identifier:
keyid:83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/JTjIGaNjpzftNO-kFk1BOWWIlR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.76.0/22
45.67.4.0/22
92.119.168.0/22
213.173.60.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:98:4d:9f:0b:bd:6b:18:2a:f8:f3:42:f7:6e:55:a4:6a:25:
2c:4e:c1:df:0d:f4:bb:12:92:9f:e6:fb:55:43:2c:d9:13:23:
a1:fc:28:55:c7:38:cb:ef:ff:81:c9:96:76:46:6d:d1:11:6c:
5b:ad:9b:38:6d:db:98:c6:44:ba:65:1c:d8:09:a4:1a:37:fd:
c9:2c:cc:75:c5:8b:f1:ff:fb:66:4e:89:a4:c7:32:fb:de:ff:
ce:a7:c4:49:29:9d:f2:4f:73:4e:f1:45:9f:00:68:19:84:ca:
b4:1e:56:f0:52:2f:48:16:15:4b:d5:2e:04:64:1d:a2:78:82:
75:cc:53:7b:3b:25:4d:91:52:9f:39:8d:5b:d7:0f:d8:85:d9:
96:8d:d6:df:6e:e1:ce:92:14:a8:21:4f:a7:c7:8a:1c:b5:19:
cc:a0:b8:90:e9:5d:cb:3e:d8:30:71:47:ae:5e:3e:e5:83:be:
ac:1d:ed:45:be:83:d1:f1:66:4d:88:93:b7:e6:a3:b4:ec:bb:
38:2d:63:2a:d9:f9:9f:d7:e3:ca:97:26:87:e3:a2:86:a3:d1:
68:e0:a0:12:db:cc:18:78:8a:c5:8e:cb:77:4c:a2:39:18:da:
84:63:dd:30:20:d4:7a:5f:97:39:dc:f4:6e:07:0d:8e:7e:a9:
26:00:e7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:10:54 2025 by rpki-client