Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/kjjmj3_M89wAaSRBkczk1njDNSI.roa
File: kjjmj3_M89wAaSRBkczk1njDNSI.roa (raw, json)
Hash identifier: dWOfnCb6lmXwSX8QD5pO5gwpjqkbkqa9qW8b5CDCAF4=
Subject key identifier: 92:38:E6:8F:7F:CC:F3:DC:00:69:24:41:91:CC:E4:D6:78:C3:35:22
Certificate issuer: /CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Certificate serial: 01941FFA014B9615EAE15D8E8484C942530B
Authority key identifier: 4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/kjjmj3_M89wAaSRBkczk1njDNSI.roa
Signing time: Wed 01 Jan 2025 03:47:45 +0000
ROA not before: Wed 01 Jan 2025 03:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51175
IP address blocks: 46.148.80.0/20 maxlen: 20
178.219.128.0/20 maxlen: 20
185.11.108.0/22 maxlen: 22
185.101.188.0/22 maxlen: 22
194.29.180.0/22 maxlen: 22
195.110.50.0/23 maxlen: 23
213.5.0.0/21 maxlen: 21
2a00:c020::/32 maxlen: 32
2a03:22c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:01:4b:96:15:ea:e1:5d:8e:84:84:c9:42:53:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Validity
Not Before: Jan 1 03:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9238e68f7fccf3dc0069244191cce4d678c33522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b0:68:29:d1:98:2c:4e:e1:74:43:5e:fa:a9:
ed:49:4d:07:09:33:3e:b3:45:d8:73:de:8f:e5:11:
b9:47:b8:6b:39:3a:ca:f3:1e:7e:2a:91:64:c9:0b:
a5:33:fa:e6:3e:7e:8a:b1:18:82:2c:21:a4:2a:4b:
29:0a:8d:8d:bf:d8:63:c1:f4:07:fa:da:62:b5:f9:
ed:29:be:f1:0a:5a:35:63:d8:f4:60:a7:54:00:70:
ce:58:8f:d5:51:3e:8b:52:a8:9a:44:fa:28:19:e6:
68:87:0a:b5:46:45:25:5e:76:f4:f3:97:09:17:9f:
00:1a:8b:bb:f8:f1:ea:f8:77:1f:9b:7a:e4:29:fc:
bb:1a:0b:fe:ee:59:ec:19:76:a7:3d:b1:4b:50:92:
31:b9:3c:cf:26:2b:31:86:f8:72:53:13:5b:e5:e6:
09:f3:97:5f:23:6f:04:8a:2b:09:dc:83:95:09:5e:
6a:fd:96:c3:df:28:f2:df:c3:cd:90:5b:21:a0:0a:
5e:3f:94:1f:60:7f:7e:75:d2:31:7c:7d:93:2b:3d:
a9:17:67:57:40:4c:90:01:c6:9d:c7:ac:70:01:cd:
08:ee:ca:de:da:8c:9c:72:3a:4c:42:1e:1e:48:3b:
d3:c4:61:c9:4c:28:49:65:29:e6:ca:93:15:c2:c9:
43:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:38:E6:8F:7F:CC:F3:DC:00:69:24:41:91:CC:E4:D6:78:C3:35:22
X509v3 Authority Key Identifier:
keyid:4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/kjjmj3_M89wAaSRBkczk1njDNSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.80.0/20
178.219.128.0/20
185.11.108.0/22
185.101.188.0/22
194.29.180.0/22
195.110.50.0/23
213.5.0.0/21
IPv6:
2a00:c020::/32
2a03:22c0::/32
Signature Algorithm: sha256WithRSAEncryption
9a:c9:c4:29:53:8b:f5:a5:c1:36:39:b4:e0:e1:5d:f1:cf:7d:
85:07:13:d9:35:60:1c:c9:4c:1b:8c:96:9b:b2:5c:ad:28:05:
38:15:1c:a5:80:7d:13:22:9c:cb:0f:95:f9:e7:ef:1d:8f:01:
5c:86:7d:21:90:ef:e6:b5:5c:71:70:9a:c6:6e:ef:19:88:1c:
02:5e:93:be:af:2e:f5:b1:78:f5:e5:41:0a:c3:3e:88:ab:4c:
ae:69:6a:c9:f7:e1:87:ed:8b:49:36:fe:8f:79:c2:20:10:40:
c0:17:d5:e6:34:91:4f:67:1c:97:05:09:d3:b7:94:e6:84:88:
e2:7b:05:7d:07:48:e3:36:33:71:14:1a:b2:60:62:75:ac:d7:
20:ac:a4:e9:4a:d9:27:5a:89:a1:64:a9:90:c4:6c:27:e1:78:
22:22:fe:31:43:10:ca:8f:c1:c8:e2:c2:4d:b8:9e:77:f6:8e:
28:5d:15:fe:fb:2a:90:43:1d:e1:d2:7f:30:48:79:4c:3e:59:
5a:b2:b1:a0:56:a5:b2:33:dc:59:24:4f:00:ac:91:d2:95:95:
21:2f:f4:b8:54:a4:45:ab:d4:94:61:21:97:f9:8e:90:41:92:
77:ed:30:2b:d0:cf:5b:4a:5e:ca:7e:fc:76:8c:78:11:82:85:
ff:89:bb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:46 2025 by rpki-client