Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/jHLMDKTDkCvGGepmqfjsQHrwXzM.roa
File: jHLMDKTDkCvGGepmqfjsQHrwXzM.roa (raw, json)
Hash identifier: BqDjJaZKtErJWsbpAAzS90okkDobMarnjSfr8SaCuPQ=
Subject key identifier: 8C:72:CC:0C:A4:C3:90:2B:C6:19:EA:66:A9:F8:EC:40:7A:F0:5F:33
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019422FC256F1EE45770E969CB3BCE19F133
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/jHLMDKTDkCvGGepmqfjsQHrwXzM.roa
Signing time: Wed 01 Jan 2025 17:48:57 +0000
ROA not before: Wed 01 Jan 2025 17:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 265753
IP address blocks: 91.242.71.0/24 maxlen: 24
91.242.81.0/24 maxlen: 24
91.242.107.0/24 maxlen: 24
95.214.152.0/22 maxlen: 24
193.37.200.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:25:6f:1e:e4:57:70:e9:69:cb:3b:ce:19:f1:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 17:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c72cc0ca4c3902bc619ea66a9f8ec407af05f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:60:3d:67:dc:e0:f2:0a:82:01:10:49:24:e1:
7c:b1:7c:33:99:bd:89:a0:c2:43:4a:d6:71:c9:f1:
87:68:30:e6:d9:43:18:31:7c:4b:04:8e:d1:bc:7c:
21:de:36:64:a3:e6:49:76:5d:05:ed:a1:b9:2e:75:
5d:e6:d8:d8:a9:57:09:c0:b3:69:a4:b0:bb:f0:73:
85:26:e6:8e:f1:d8:61:86:0a:6b:75:0b:03:c1:c0:
e8:30:43:f9:fb:dd:6c:d6:f7:ba:7b:d0:92:bf:74:
c0:c2:f0:33:db:81:35:1c:3b:7c:37:95:a7:3c:46:
f9:9e:d2:f4:6c:1c:65:2d:37:1f:a3:93:3a:0d:32:
37:07:ce:f5:3e:fa:b5:fe:ec:00:ce:5f:3b:7d:0d:
8c:02:37:0f:8c:e9:77:2e:94:59:16:15:63:26:30:
0d:32:71:75:3b:48:fa:85:53:9e:46:b0:1a:c3:2f:
6b:c4:35:d6:5d:21:d1:16:3e:b6:ec:77:c9:a0:7a:
ed:cc:1c:ca:73:54:01:48:32:57:52:78:3b:b0:ba:
a4:39:ba:84:40:db:b5:98:c2:5d:69:c4:bc:bd:2e:
a2:fd:e3:98:80:b8:47:d8:6f:cf:c1:57:11:57:6a:
e7:7c:a4:e9:97:70:8d:e3:38:68:2a:a9:c2:c0:22:
bb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:72:CC:0C:A4:C3:90:2B:C6:19:EA:66:A9:F8:EC:40:7A:F0:5F:33
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/jHLMDKTDkCvGGepmqfjsQHrwXzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.71.0/24
91.242.81.0/24
91.242.107.0/24
95.214.152.0/22
193.37.200.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:ff:51:f6:24:8d:7a:09:95:2b:bd:e0:58:4a:3e:4c:40:3c:
df:93:6b:7e:1a:0a:f3:d5:25:80:d3:a8:6d:cf:0c:ba:b0:aa:
74:bc:35:c8:9f:38:fe:fd:b3:7b:78:22:2b:3b:5d:04:b9:a7:
18:3e:95:11:07:0b:6c:9e:03:3d:84:93:8b:f6:1e:b4:91:65:
1c:3d:d8:84:fd:46:e5:46:34:68:b9:b6:7b:80:ad:79:3f:90:
7b:7b:5e:84:ac:df:34:6c:53:8c:90:c3:21:29:dc:fe:7a:ab:
5a:1b:c8:25:a2:84:b3:45:25:f2:0b:75:56:3e:3d:f7:1b:f2:
57:73:3e:45:a0:ff:77:b2:1d:b3:bd:09:2d:3e:7c:ef:9f:8f:
e0:11:ae:e7:df:db:0a:7a:88:e5:da:88:83:e1:6c:e3:f1:d3:
47:ca:6e:d6:43:23:f9:2d:98:aa:4c:b1:0d:a6:25:ff:bb:17:
4f:71:d1:6f:ec:3a:b4:1f:c0:87:77:0a:bf:6a:ac:da:81:48:
d7:78:ad:36:08:34:8b:e7:a1:ff:e7:f6:9c:d5:d5:c8:ea:c9:
48:c6:78:f5:dd:47:2f:db:80:5d:76:d5:86:00:26:10:eb:a9:
20:6b:13:0e:fe:15:6f:25:3e:7f:dd:27:22:d2:90:89:4e:89:
2e:d4:c3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:22:08 2025 by rpki-client