Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/pjqTP4jfQfsNA8tjYi42Sc1-S88.roa
File: pjqTP4jfQfsNA8tjYi42Sc1-S88.roa (raw, json)
Hash identifier: H5/YZQfh0J/SWAF5xqrnL8j1DdrlYslU+4bEkRfwqM8=
Subject key identifier: A6:3A:93:3F:88:DF:41:FB:0D:03:CB:63:62:2E:36:49:CD:7E:4B:CF
Certificate issuer: /CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390
Certificate serial: 0195B4FACCE300BDF0D8ECC0CF075FE89A3B
Authority key identifier: 9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/pjqTP4jfQfsNA8tjYi42Sc1-S88.roa
Signing time: Thu 20 Mar 2025 19:14:49 +0000
ROA not before: Thu 20 Mar 2025 19:14:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213035
IP address blocks: 185.28.37.0/24 maxlen: 24
185.28.39.0/24 maxlen: 24
185.126.34.0/24 maxlen: 24
2a10:1440::/29 maxlen: 29
2a10:1440:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b4:fa:cc:e3:00:bd:f0:d8:ec:c0:cf:07:5f:e8:9a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390
Validity
Not Before: Mar 20 19:14:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a63a933f88df41fb0d03cb63622e3649cd7e4bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4f:00:b9:04:6d:42:00:12:3d:3c:3c:0c:91:
6c:59:58:42:8d:d7:2f:f7:a4:67:c2:4b:74:33:84:
f6:cc:b1:65:4a:00:92:94:29:88:28:bf:e5:a9:b0:
b1:83:d3:17:a4:6a:12:fd:0b:79:7c:8d:1e:b1:84:
5a:15:d0:03:2e:18:9d:2d:4c:86:7e:ae:22:fe:ae:
92:cb:35:d7:ed:f2:36:26:ce:f3:69:00:ca:39:d1:
3c:0a:82:37:e5:53:a8:4e:ba:a1:1d:de:56:18:94:
57:42:57:02:ea:3c:a6:7a:5e:09:cb:02:b7:41:b5:
93:05:4f:16:f0:71:5c:5b:64:ec:17:b7:22:10:3c:
68:48:38:0e:30:7c:7d:27:ec:ca:59:01:e0:49:93:
0b:ea:aa:6e:a9:6c:bc:d7:6d:b0:3e:d2:6a:c9:f3:
b1:65:57:7f:2f:5c:68:c1:60:06:30:f7:f3:eb:ae:
9d:a5:50:e2:2c:8a:25:0a:ec:a3:e8:b1:1d:0b:f5:
e6:8e:cb:6a:83:63:8b:fd:c9:db:97:3d:a9:70:8c:
99:53:e7:81:d7:b2:31:76:8e:98:d2:7f:60:5c:10:
03:63:16:03:34:a4:38:25:01:60:c9:2b:30:15:ea:
80:65:bb:73:d2:2b:fb:00:1b:65:31:e1:d1:eb:53:
ef:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3A:93:3F:88:DF:41:FB:0D:03:CB:63:62:2E:36:49:CD:7E:4B:CF
X509v3 Authority Key Identifier:
keyid:9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/pjqTP4jfQfsNA8tjYi42Sc1-S88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.37.0/24
185.28.39.0/24
185.126.34.0/24
IPv6:
2a10:1440::/29
Signature Algorithm: sha256WithRSAEncryption
24:7d:fa:0b:a8:95:0e:cb:b4:50:e8:e6:93:ec:81:dd:bd:e1:
3d:8a:64:6d:81:18:5a:28:ef:61:17:d9:b7:d9:9f:96:1e:50:
9c:77:91:11:ca:74:0f:49:1e:79:48:25:c9:bf:8c:28:d7:41:
e8:96:b5:d8:cc:33:af:c6:6b:74:16:73:26:32:19:1f:96:81:
bc:cc:78:09:86:aa:1d:d2:01:8b:fd:6b:9f:09:fe:fa:d6:00:
b0:10:90:55:a3:f2:6f:ab:2e:92:0d:ce:3b:14:fd:96:5a:36:
50:03:1d:08:c4:9b:96:bb:4b:8e:17:30:91:14:13:2a:3b:4a:
c2:80:8d:71:ae:11:c5:20:05:fa:e9:8b:c8:cb:23:ab:51:0c:
0c:71:f0:6c:05:fd:4d:80:9b:a3:8d:5b:c3:2d:a6:a1:35:bd:
e8:69:3d:0c:e7:4c:c3:c8:4d:bc:f7:6b:87:51:4e:af:80:2c:
00:14:88:c2:d4:52:b8:fb:0e:17:d4:32:16:0a:b4:ba:75:81:
ee:ac:16:82:6f:81:30:2c:ef:5e:a7:b4:0b:25:d2:4a:44:10:
7d:78:49:ec:a2:d0:9c:47:c2:08:83:f9:60:6b:cd:bf:e2:f4:
41:a3:b4:45:6a:2c:f2:4b:95:4f:a4:de:3b:bb:76:7f:75:a6:
49:2f:a3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:03:45 2025 by rpki-client