Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/395224-8ca2-444f-985b-5f0b4ce64867/1/jk2LkeYqf-B80r8KbLLl1FHL2GY.roa
File: jk2LkeYqf-B80r8KbLLl1FHL2GY.roa (raw, json)
Hash identifier: QurvF2g3qQliTmeoi7VE28z+XRbhQPF/h5uTySnCiH0=
Subject key identifier: 8E:4D:8B:91:E6:2A:7F:E0:7C:D2:BF:0A:6C:B2:E5:D4:51:CB:D8:66
Certificate issuer: /CN=c66479bdf7edb90b51aa729634104c0d2802ac9f
Certificate serial: 018262E2703D82490A65A643C1E0976226CC
Authority key identifier: C6:64:79:BD:F7:ED:B9:0B:51:AA:72:96:34:10:4C:0D:28:02:AC:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmR5vfftuQtRqnKWNBBMDSgCrJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/395224-8ca2-444f-985b-5f0b4ce64867/1/jk2LkeYqf-B80r8KbLLl1FHL2GY.roa
Signing time: Wed 03 Aug 2022 08:46:23 +0000
ROA not before: Wed 03 Aug 2022 08:46:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200780
IP address blocks: 93.177.69.0/24 maxlen: 24
93.177.70.0/23 maxlen: 23
185.144.24.0/22 maxlen: 22
185.73.206.0/24 maxlen: 24
185.73.204.0/22 maxlen: 22
185.73.204.0/24 maxlen: 24
185.73.205.0/24 maxlen: 24
2a05:46c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:62:e2:70:3d:82:49:0a:65:a6:43:c1:e0:97:62:26:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66479bdf7edb90b51aa729634104c0d2802ac9f
Validity
Not Before: Aug 3 08:46:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e4d8b91e62a7fe07cd2bf0a6cb2e5d451cbd866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0f:5f:55:a4:20:de:7e:60:f8:d2:0d:e3:5e:
52:bb:58:d2:fa:99:55:f4:37:07:66:4c:24:f5:23:
31:22:e9:5c:a2:9c:ac:72:63:fe:de:ef:a9:59:fb:
49:4e:a4:5a:ba:aa:e5:4a:5a:b9:e9:90:42:3e:44:
71:1f:8a:e0:e5:90:5f:ed:99:f9:ab:fd:57:eb:0e:
b6:2e:03:94:a0:ea:7f:2b:52:62:0c:ac:07:3c:a1:
a7:4c:4e:93:0f:6b:30:bc:12:53:e3:22:9e:79:37:
cd:9b:96:80:55:93:d7:20:8c:6b:cd:e4:f8:36:85:
3f:80:9c:ef:b4:cd:ce:24:24:78:b3:c8:55:b1:fa:
b7:48:00:d4:3c:3c:41:8c:99:1f:26:ab:1a:0c:83:
71:d6:a8:cd:7c:0c:b4:20:7d:6e:1a:0e:7e:17:38:
0c:91:27:ff:70:cc:e3:30:c9:b3:7d:8f:dc:31:67:
30:a9:70:72:c6:32:8b:4f:f3:cf:80:71:ff:30:42:
84:39:92:73:98:38:17:f8:5b:43:66:2a:05:de:ba:
c4:bc:05:a4:aa:1d:cf:34:ff:fd:78:68:18:71:59:
11:5a:d7:f8:a6:cf:9a:6d:11:ee:78:64:20:70:ef:
1a:92:13:84:11:b3:1a:c4:16:cf:b1:c5:84:a7:24:
d8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4D:8B:91:E6:2A:7F:E0:7C:D2:BF:0A:6C:B2:E5:D4:51:CB:D8:66
X509v3 Authority Key Identifier:
keyid:C6:64:79:BD:F7:ED:B9:0B:51:AA:72:96:34:10:4C:0D:28:02:AC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmR5vfftuQtRqnKWNBBMDSgCrJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/395224-8ca2-444f-985b-5f0b4ce64867/1/jk2LkeYqf-B80r8KbLLl1FHL2GY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/395224-8ca2-444f-985b-5f0b4ce64867/1/xmR5vfftuQtRqnKWNBBMDSgCrJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.69.0-93.177.71.255
185.73.204.0/22
185.144.24.0/22
IPv6:
2a05:46c0::/29
Signature Algorithm: sha256WithRSAEncryption
85:be:27:61:b0:b5:28:57:eb:41:4e:3a:bf:38:01:91:0c:46:
7a:be:e9:ae:03:4d:f8:c7:d2:7d:51:cc:65:2c:d3:0f:34:db:
4e:21:14:02:9f:29:4d:29:b2:9f:0c:a6:33:cb:ba:c5:6e:3d:
0b:63:92:49:a2:cf:85:ce:a2:3f:c9:3d:2d:f0:6f:f8:7e:28:
98:16:1f:6b:95:62:88:74:28:cf:84:99:b2:91:27:cb:d4:86:
85:7b:97:76:9a:f8:57:0e:92:f4:a5:cf:cb:7c:2d:8b:4c:eb:
9b:eb:56:06:ee:42:0c:f1:4e:7c:8e:d9:d6:19:cd:cd:0d:52:
2c:0e:82:6d:15:72:68:37:3e:34:31:37:56:42:bf:ac:e8:64:
d5:b7:33:6a:31:fe:a0:41:a7:61:c6:75:7c:28:d4:36:93:8f:
6b:b7:de:e4:01:9c:cf:13:08:67:bb:ea:c6:ce:7f:f3:37:1e:
8b:fb:c0:73:75:1f:17:bc:1d:b7:52:54:4b:72:3b:8b:d0:2f:
ca:d2:36:4c:af:f5:37:62:75:71:20:f3:41:db:80:bf:65:a8:
d6:e4:5a:e2:1d:52:6e:8d:a2:bd:ea:bb:db:06:8a:fb:19:d0:
c6:95:bc:06:78:17:3f:f3:83:f7:ab:c4:b0:ef:4c:75:8e:8c:
11:b1:28:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:40:15 2025 by rpki-client