Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/JDBUM70-c7AYQMUJmJKmeBIBVGA.roa
File: JDBUM70-c7AYQMUJmJKmeBIBVGA.roa (raw, json)
Hash identifier: UEwCkcQmMqxSheFkiCoFAwbsMZAUK526iksHIaLZjIA=
Subject key identifier: 24:30:54:33:BD:3E:73:B0:18:40:C5:09:98:92:A6:78:12:01:54:60
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 018519B3D8F6795B46295E0F779B5FEC4F7A
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/JDBUM70-c7AYQMUJmJKmeBIBVGA.roa
Signing time: Fri 16 Dec 2022 06:51:34 +0000
ROA not before: Fri 16 Dec 2022 06:51:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212669
IP address blocks: 194.113.227.0/24 maxlen: 24
152.89.249.0/24 maxlen: 24
193.151.182.0/24 maxlen: 24
195.206.230.0/24 maxlen: 24
195.20.104.0/24 maxlen: 24
194.113.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:19:b3:d8:f6:79:5b:46:29:5e:0f:77:9b:5f:ec:4f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Dec 16 06:51:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24305433bd3e73b01840c5099892a67812015460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:94:2e:18:b8:19:43:32:5b:34:92:a9:2a:
d3:e9:11:82:6b:9b:c4:44:70:91:4b:e3:d6:7e:d7:
15:dd:80:c4:e7:47:59:29:22:6b:be:da:ba:04:e8:
67:38:3f:d2:f6:64:64:9f:44:1f:98:1b:b0:f4:40:
6b:f6:e0:6e:fc:38:55:ea:85:45:dc:0d:0d:95:a6:
49:ff:08:9b:82:cf:42:9d:ca:68:ae:ad:89:f1:55:
bc:ca:e7:22:ca:3f:f8:b0:60:18:97:16:08:e7:5c:
4e:0f:5d:b1:ff:fa:c3:13:09:a2:24:10:a3:a3:a0:
f8:eb:57:4c:23:8b:37:d4:6d:a2:90:73:54:be:60:
51:f9:6b:50:f7:fc:5d:28:91:d7:32:f0:b5:f3:2b:
ff:d2:7c:45:0b:1d:0e:c4:a8:33:04:51:ac:31:1b:
37:1c:7f:d8:57:b5:5c:79:20:68:40:3a:3e:8d:00:
ae:c4:25:2f:1d:5e:a4:d7:90:26:2b:95:cc:f5:ca:
6c:fc:ca:b4:f7:09:af:16:24:a7:a9:29:08:f2:11:
41:fa:c6:1d:d4:55:02:03:f4:9c:a1:5d:7b:ca:9f:
1c:94:4f:ea:04:52:31:54:13:72:2d:ef:5e:d1:cb:
10:4b:79:88:f4:10:8c:b7:3b:16:4c:62:a1:86:a2:
3a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:30:54:33:BD:3E:73:B0:18:40:C5:09:98:92:A6:78:12:01:54:60
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/JDBUM70-c7AYQMUJmJKmeBIBVGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.249.0/24
193.151.182.0/24
194.113.222.0/24
194.113.227.0/24
195.20.104.0/24
195.206.230.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:fe:93:44:0e:15:5c:de:e9:ac:78:6b:93:f1:e2:26:5d:7d:
87:dd:48:fb:23:83:68:78:4f:4b:f5:3e:24:04:69:45:1b:18:
95:c3:76:ac:02:f3:89:85:d0:44:77:cc:82:56:df:71:0b:17:
bf:aa:38:da:a8:e1:c3:65:2c:40:bd:2f:0f:b3:a0:95:a5:d1:
11:bf:23:d2:14:07:34:6d:60:15:3b:7e:14:7d:24:de:8a:15:
6e:c0:8a:72:b7:2f:49:44:ed:42:b1:0b:f1:7e:ad:31:b5:5e:
c7:b9:58:b4:4f:20:ec:56:18:55:e6:a5:f7:81:79:24:ec:2f:
b2:20:7c:42:33:8e:a7:56:3d:00:88:54:3d:13:1c:b4:d6:a6:
7a:f6:d2:c5:c4:1a:02:f3:97:52:e9:1c:e4:e2:91:f5:00:bf:
c5:bb:dd:44:9d:93:2a:4b:e5:69:f1:91:38:8e:55:d6:b7:8f:
86:0c:b5:b8:ce:d1:4b:87:cb:b9:f6:9c:06:01:eb:1d:6f:70:
2b:40:b9:51:61:b6:a9:be:1d:87:db:52:58:09:aa:cd:66:20:
bf:73:9c:76:5a:72:5a:c7:a6:c1:8c:b2:6e:66:88:71:14:86:
28:d9:5e:a1:4b:55:3d:70:ff:8c:d5:e8:2c:45:3d:9d:cc:b5:
29:cb:81:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org