Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/jnyTmD1DxoXGsX8QKO4GFLyk0hU.roa
File: jnyTmD1DxoXGsX8QKO4GFLyk0hU.roa (raw, json)
Hash identifier: VHKaN5/CfBmdBMdYUm6aa5suZnMbN/eE/uaYAJ9tsUM=
Subject key identifier: 8E:7C:93:98:3D:43:C6:85:C6:B1:7F:10:28:EE:06:14:BC:A4:D2:15
Certificate issuer: /CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710
Certificate serial: 019421445866ADA1E9A8664E95E306B54D34
Authority key identifier: FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/jnyTmD1DxoXGsX8QKO4GFLyk0hU.roa
Signing time: Wed 01 Jan 2025 09:48:34 +0000
ROA not before: Wed 01 Jan 2025 09:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39256
IP address blocks: 46.254.80.0/21 maxlen: 21
92.43.0.0/21 maxlen: 21
185.17.88.0/22 maxlen: 22
188.93.24.0/21 maxlen: 21
2a03:7dc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:58:66:ad:a1:e9:a8:66:4e:95:e3:06:b5:4d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710
Validity
Not Before: Jan 1 09:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e7c93983d43c685c6b17f1028ee0614bca4d215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b5:35:df:fc:2b:69:8f:21:26:a0:7f:02:d5:
3e:c6:ed:a9:ef:24:cc:24:61:31:50:a4:0a:85:24:
06:72:12:75:f9:b3:1a:03:58:af:6c:84:2a:f9:91:
2c:83:5c:13:88:07:d8:0e:ce:b5:83:31:93:9f:38:
99:5e:8b:32:71:37:32:7c:38:b3:0b:91:69:01:d3:
8a:c0:ca:71:f8:82:5a:10:d4:5b:61:7a:d6:89:a2:
be:2c:0a:cf:84:17:58:b1:42:be:4d:c6:a1:20:81:
db:f2:3c:fe:9b:35:bc:f3:30:a4:3d:6f:36:46:c5:
4f:e4:3c:a9:28:93:6c:16:6f:c1:bb:f9:1b:13:10:
db:7c:6f:be:06:a9:ab:89:31:46:73:bf:94:03:cd:
21:b4:e7:2e:ee:21:d8:45:ea:9f:20:3f:58:3e:d0:
27:3c:ef:22:4a:5a:ef:16:85:3a:22:89:cf:6e:dd:
1a:d1:4f:a2:5b:6f:c1:d3:25:71:38:b4:45:91:5c:
9e:b3:c0:40:08:2b:ac:f9:2d:73:79:38:f0:92:d3:
6e:c0:8b:d5:df:aa:1f:a0:64:96:42:69:fe:e5:53:
d0:89:99:a5:91:be:5e:bf:32:24:89:da:11:d4:28:
78:62:ea:d4:2b:8c:66:1d:cb:2d:0d:f9:e8:1f:10:
1c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7C:93:98:3D:43:C6:85:C6:B1:7F:10:28:EE:06:14:BC:A4:D2:15
X509v3 Authority Key Identifier:
keyid:FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/jnyTmD1DxoXGsX8QKO4GFLyk0hU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.80.0/21
92.43.0.0/21
185.17.88.0/22
188.93.24.0/21
IPv6:
2a03:7dc0::/32
Signature Algorithm: sha256WithRSAEncryption
94:04:be:82:44:ca:e6:8b:6f:7f:53:37:3d:67:57:fa:40:22:
ec:f1:8e:b9:44:0f:f7:a6:49:6e:8b:f2:1b:35:94:9a:90:e1:
9d:c5:85:0d:11:7a:8d:4f:b2:0c:7e:19:34:19:15:13:67:21:
c2:46:72:4a:8f:24:5c:73:40:89:80:6b:b3:ae:30:e1:79:41:
7c:3f:38:2d:65:0e:11:92:94:76:dc:77:f5:90:fe:db:ef:9d:
fb:4f:8f:90:9e:a3:e4:bf:be:cb:67:f6:c0:81:fd:06:df:b4:
8f:8f:26:30:f6:c9:22:0c:4c:e3:7a:aa:2e:fc:ee:0b:c7:89:
77:01:50:a6:b0:a7:61:fb:b7:16:8e:d2:18:11:25:e9:fd:73:
64:af:9a:f6:8c:b7:69:62:16:bd:41:ee:fb:2b:9b:71:2d:95:
52:eb:80:ae:e7:67:ff:b9:db:81:dc:85:32:44:7f:60:52:ff:
de:a3:f5:8a:6a:7c:63:1e:a7:6b:a8:a9:72:d6:7b:72:98:66:
91:b5:ac:f2:3c:d7:60:6b:5f:6e:01:12:85:9e:f2:ae:9b:e2:
ad:39:e9:8d:d9:70:97:d2:9a:5b:1c:84:7a:9a:d6:e2:fc:7f:
b6:ab:7e:de:81:7e:f6:c5:45:dc:ee:dd:d2:b4:ff:5e:87:73:
95:d4:93:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:25 2025 by rpki-client