Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/jwLmMS4u1oaUe3bt6AKLX5dQ9Tk.roa
File: jwLmMS4u1oaUe3bt6AKLX5dQ9Tk.roa (raw, json)
Hash identifier: yvucEZOK6Wdo+TtXItOStPmeGXJ69eNCb6e6l4mUAlg=
Subject key identifier: 8F:02:E6:31:2E:2E:D6:86:94:7B:76:ED:E8:02:8B:5F:97:50:F5:39
Certificate issuer: /CN=5389ab9b7fd5fdfd04f51af8873cdf9b24d08380
Certificate serial: 37D0A4C3
Authority key identifier: 53:89:AB:9B:7F:D5:FD:FD:04:F5:1A:F8:87:3C:DF:9B:24:D0:83:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4mrm3_V_f0E9Rr4hzzfmyTQg4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/jwLmMS4u1oaUe3bt6AKLX5dQ9Tk.roa
Signing time: Sat 01 Jan 2022 14:54:38 +0000
ROA not before: Sat 01 Jan 2022 14:54:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8282
IP address blocks: 80.252.112.0/20 maxlen: 20
194.70.36.0/24 maxlen: 24
84.246.192.0/21 maxlen: 21
93.188.176.0/21 maxlen: 21
2a01:2c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 936420547 (0x37d0a4c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5389ab9b7fd5fdfd04f51af8873cdf9b24d08380
Validity
Not Before: Jan 1 14:54:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f02e6312e2ed686947b76ede8028b5f9750f539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:37:e1:54:87:f5:f2:31:03:7e:86:a1:ce:2b:
26:9d:25:0b:62:ae:bb:20:78:71:20:46:8f:c2:df:
44:3f:45:49:68:8e:df:96:5e:bd:dd:09:69:e8:dd:
68:83:f2:29:f1:b5:d1:f0:28:62:ab:da:fc:06:23:
20:08:84:d5:11:5c:85:8d:04:fc:3c:41:f4:7b:09:
c2:97:2d:f6:57:d7:cb:c2:8c:3b:60:5f:46:a3:d9:
d4:17:f5:9d:93:2b:12:57:28:d8:40:94:d0:bc:0d:
ca:f7:b2:b7:e4:94:1b:35:89:34:d9:69:cf:a2:14:
dd:c9:ed:96:10:88:7d:6a:81:f0:df:7a:cd:b0:8d:
23:df:87:e6:a6:40:9d:37:59:54:bd:11:17:3e:1b:
6b:5c:b6:43:34:89:79:6b:20:5a:bd:5f:77:b8:ed:
f8:e4:a1:6f:08:6c:be:ac:ea:9f:c8:b2:38:10:41:
ac:2f:fc:67:22:fb:70:85:62:36:f3:55:8d:ee:fd:
27:64:09:6b:fc:c5:89:57:f1:f4:81:f7:0d:ce:77:
b6:57:3e:04:29:38:6f:f1:e3:48:0b:44:56:44:27:
e2:98:ab:96:63:52:ed:12:54:ed:bf:4c:6a:a7:93:
5c:00:ab:85:4a:5e:bf:64:e9:3a:b9:87:c6:82:c6:
b6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:02:E6:31:2E:2E:D6:86:94:7B:76:ED:E8:02:8B:5F:97:50:F5:39
X509v3 Authority Key Identifier:
keyid:53:89:AB:9B:7F:D5:FD:FD:04:F5:1A:F8:87:3C:DF:9B:24:D0:83:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4mrm3_V_f0E9Rr4hzzfmyTQg4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/jwLmMS4u1oaUe3bt6AKLX5dQ9Tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/U4mrm3_V_f0E9Rr4hzzfmyTQg4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.252.112.0/20
84.246.192.0/21
93.188.176.0/21
194.70.36.0/24
IPv6:
2a01:2c0::/32
Signature Algorithm: sha256WithRSAEncryption
03:ca:99:78:79:53:89:f2:7f:c4:96:23:14:0f:17:b9:7d:c1:
35:7f:49:f1:a3:7b:80:cd:93:0a:08:0c:33:46:5c:8f:76:f0:
9c:de:3b:da:82:0b:bf:86:bd:c7:ee:25:1b:c4:0c:30:eb:04:
7e:a1:ac:77:5e:94:2c:f2:c4:8d:36:e0:9e:a4:d0:85:c1:22:
0a:40:7f:53:96:f4:78:14:de:27:aa:a1:40:9a:f3:ac:c5:48:
e2:3c:e1:11:9e:b5:49:ff:9c:ce:50:f3:e1:de:c7:0c:b1:da:
43:8e:bf:25:44:7d:1f:ef:ed:d8:6a:9a:ef:ef:1d:d4:35:43:
5d:1b:72:45:ea:ee:6d:df:00:05:46:a4:10:2a:b9:47:79:bc:
17:dd:5a:86:b5:ec:3e:65:1e:41:65:99:c2:28:0b:2e:f1:0f:
00:a7:f4:c0:01:24:be:2a:6b:bb:5c:be:78:43:89:80:e2:57:
af:6e:3a:16:51:b7:3a:1e:55:7f:f7:1f:c2:9d:d0:a9:64:3a:
11:f2:e9:31:09:fc:2c:b9:3c:ee:b8:b8:2f:8d:be:72:6c:1b:
6c:d1:49:98:5a:4f:01:29:4c:94:2b:b8:2a:08:4f:f7:2e:d9:
e2:73:74:74:e3:ee:55:d1:3d:d3:a0:51:67:de:6c:9e:1f:cc:
7e:e4:0a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:06:43 2025 by rpki-client