Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/JSL62z4GvlDVCxFtXqMcE2_z_yc.roa
File: JSL62z4GvlDVCxFtXqMcE2_z_yc.roa (raw, json)
Hash identifier: VeYjk4FRg7K8EDGi1nRh8I5XXmdT7mbnzfab5NAJF6U=
Subject key identifier: 25:22:FA:DB:3E:06:BE:50:D5:0B:11:6D:5E:A3:1C:13:6F:F3:FF:27
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019424452253D789670795BA432C09482274
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/JSL62z4GvlDVCxFtXqMcE2_z_yc.roa
Signing time: Wed 01 Jan 2025 23:48:18 +0000
ROA not before: Wed 01 Jan 2025 23:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57013
IP address blocks: 31.222.255.0/24 maxlen: 24
45.159.86.0/24 maxlen: 24
185.187.18.0/24 maxlen: 24
194.26.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:22:53:d7:89:67:07:95:ba:43:2c:09:48:22:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2522fadb3e06be50d50b116d5ea31c136ff3ff27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9a:dd:90:c4:f4:96:0a:2d:12:37:b3:6e:72:
8d:11:21:b6:96:93:f2:d6:f1:80:a2:ee:66:30:8c:
bf:16:6c:bd:2f:67:10:a8:0d:64:a4:2d:f5:fd:10:
37:22:63:80:65:63:3b:d5:7b:49:48:75:1e:f8:eb:
ca:a5:29:22:b6:d5:ee:7e:6c:be:9c:90:ac:08:ce:
c4:9c:bb:91:9c:0a:f6:57:7f:0e:92:f2:cc:10:06:
b7:56:f2:dd:f1:9b:dd:fe:3e:ca:d6:4c:c9:42:f6:
96:bc:79:09:69:d5:0c:1b:4b:1d:c3:17:13:2f:19:
b6:a7:6d:21:a4:04:d0:d1:c9:52:af:e9:27:fa:ca:
5c:bd:1b:79:79:47:cc:ae:c2:01:6f:ff:41:b0:38:
88:c0:f1:75:ee:9f:4c:ac:8b:d4:79:b3:bd:d4:89:
5d:53:22:d9:eb:25:ec:70:d5:16:8e:d1:79:1e:3e:
f4:cf:ce:54:90:59:51:20:7b:dc:68:5d:b5:81:df:
9d:52:83:af:87:e3:b8:05:85:0c:d1:dd:17:4e:f2:
a1:fb:31:6d:3b:8a:78:b3:58:2a:66:f8:a6:64:c3:
3e:1b:e3:e1:13:76:4a:b3:69:3c:8f:f2:25:5e:fc:
7d:5f:41:8e:6c:b8:59:41:15:d3:e9:5a:01:1e:9e:
c5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:22:FA:DB:3E:06:BE:50:D5:0B:11:6D:5E:A3:1C:13:6F:F3:FF:27
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/JSL62z4GvlDVCxFtXqMcE2_z_yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.255.0/24
45.159.86.0/24
185.187.18.0/24
194.26.220.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:3c:00:61:23:47:f9:ec:a8:21:72:4d:2f:e4:9b:75:0e:43:
c7:8c:8c:42:6f:9d:39:60:74:ce:20:75:92:89:1d:b5:c0:cf:
a9:8f:ea:a6:e7:34:f5:04:a9:c2:13:f0:3c:08:9f:b4:97:10:
d8:2b:86:40:d8:62:e7:11:a4:a6:0e:32:bf:46:9d:e1:c8:05:
82:c6:0b:93:cc:76:04:8e:f4:05:8d:5e:28:46:13:0f:09:3f:
d0:4a:8c:b1:a6:92:73:04:9e:98:44:bc:cf:61:c7:d5:ed:64:
77:07:f4:1f:ec:fe:5c:b8:d7:32:ab:06:87:c0:2e:68:e1:5a:
a0:a5:46:af:d5:68:8e:3c:d0:65:17:c2:f3:e9:f8:ef:c2:39:
a5:c7:78:5a:45:6f:9b:9e:f4:f0:04:8d:30:3d:90:b8:0d:52:
16:6b:13:8d:c3:69:26:a8:4a:40:38:8d:35:de:1a:05:c5:0e:
7b:9a:b5:06:00:60:fd:20:bd:1c:7a:60:94:16:27:95:53:fb:
e0:e0:b5:d6:14:57:9d:47:24:1b:26:80:73:09:04:ab:69:6e:
85:7d:6d:80:d2:d2:31:ff:57:a1:ca:94:d3:90:15:be:66:95:
0f:f7:38:1e:2f:68:c0:70:62:0a:8d:67:ea:27:7c:e6:25:4a:
37:12:75:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:36:44 2025 by rpki-client