Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/jpSH-vSi25cnTBjU562ec1BziHI.roa
File: jpSH-vSi25cnTBjU562ec1BziHI.roa (raw, json)
Hash identifier: +zyuTVf9t8/9uqUKbZMxSMuJ+OlUKQglndZhLlTs3Mw=
Subject key identifier: 8E:94:87:FA:F4:A2:DB:97:27:4C:18:D4:E7:AD:9E:73:50:73:88:72
Certificate issuer: /CN=852ece9c9a324d45c35f9559f329d8869dab53ba
Certificate serial: 097B6ABF
Authority key identifier: 85:2E:CE:9C:9A:32:4D:45:C3:5F:95:59:F3:29:D8:86:9D:AB:53:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/jpSH-vSi25cnTBjU562ec1BziHI.roa
Signing time: Sat 01 Jan 2022 13:07:18 +0000
ROA not before: Sat 01 Jan 2022 13:07:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196705
IP address blocks: 188.191.20.0/22 maxlen: 24
188.191.20.0/24 maxlen: 24
188.191.21.0/24 maxlen: 24
188.191.22.0/24 maxlen: 24
188.191.23.0/24 maxlen: 24
188.191.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159083199 (0x97b6abf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852ece9c9a324d45c35f9559f329d8869dab53ba
Validity
Not Before: Jan 1 13:07:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e9487faf4a2db97274c18d4e7ad9e7350738872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:db:4e:01:a2:cf:a1:81:79:7b:57:0f:79:18:
e3:c5:44:43:a8:a0:d2:bb:93:26:55:0d:6a:ec:42:
bb:60:21:fc:0d:07:89:ad:dd:02:6a:26:c8:7b:6f:
bd:cb:23:b7:02:75:71:b1:92:49:b4:7a:94:d5:67:
a3:ee:0e:a4:a9:9e:ad:e6:0d:43:10:1c:b9:65:46:
b9:f1:5c:68:d2:96:83:f0:9b:55:07:f3:19:5f:87:
f5:44:69:93:22:6e:67:a2:07:51:88:3f:8c:e9:9c:
2b:3e:7c:4e:6d:42:84:2c:6b:b9:b9:bc:ed:1d:4b:
b9:68:82:54:e7:1a:36:cb:a0:65:de:41:06:f2:4a:
5c:9d:53:0d:85:28:a2:69:d9:34:8c:41:ec:df:d9:
32:a6:4e:ef:b6:30:a0:15:40:06:25:0a:b8:b7:b0:
66:25:9f:35:ca:7e:d4:5b:3c:36:05:76:14:9d:3a:
67:48:9a:ae:c6:e5:3c:e8:9a:4e:f6:1b:ec:d4:45:
e1:c6:0f:50:6d:43:b5:83:bc:44:3f:8f:c1:70:57:
37:b5:1f:35:b9:a0:e8:e7:f7:6a:c0:df:cf:49:21:
2b:64:e1:da:0b:2c:31:67:6b:a1:c3:7f:ed:20:56:
63:bd:36:39:be:c7:7c:5b:76:12:fa:84:fc:fe:8f:
42:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:94:87:FA:F4:A2:DB:97:27:4C:18:D4:E7:AD:9E:73:50:73:88:72
X509v3 Authority Key Identifier:
keyid:85:2E:CE:9C:9A:32:4D:45:C3:5F:95:59:F3:29:D8:86:9D:AB:53:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/jpSH-vSi25cnTBjU562ec1BziHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.20.0/22
188.191.28.0/22
Signature Algorithm: sha256WithRSAEncryption
68:fc:da:fd:2b:53:4a:65:fd:ac:08:52:44:af:8f:f7:cd:00:
51:48:e1:c4:39:4c:00:2a:b8:9c:26:86:67:2f:6a:5b:98:a7:
23:5b:d1:6b:a2:55:0d:72:74:6c:12:9c:9b:9c:87:2c:77:a4:
f9:1d:86:fd:30:6a:84:ad:9f:10:e3:b1:37:9a:3f:9c:bc:33:
4e:14:ac:bd:ea:c3:34:39:02:14:a7:6a:0b:b0:76:05:09:6e:
95:b7:5f:ec:d3:2b:92:43:d6:81:e3:6c:53:45:cf:bd:26:8c:
77:fe:9b:f5:a6:97:96:c4:f1:5a:78:ca:65:b9:32:26:14:05:
ec:6e:4a:e5:b0:3c:c1:5c:0f:cd:d0:0d:80:e8:b1:97:4d:74:
74:79:30:eb:62:db:0a:9c:ce:7a:cd:0e:79:c1:11:89:0e:43:
37:45:db:60:fa:e8:4a:ec:ed:06:1d:aa:3f:ab:c4:af:e3:fd:
7e:b1:0a:02:04:d4:e0:19:3a:62:a2:4e:cb:a9:63:29:ff:d9:
80:97:d9:c3:26:5f:10:4c:d9:c3:46:76:ff:9c:7d:9f:98:f1:
91:b5:86:24:02:0e:fd:b2:da:b2:31:01:ea:d2:ea:4c:82:08:
a3:f5:07:b6:02:04:cf:e2:ce:b3:4d:dc:4c:fb:a1:ee:69:a6:
bb:61:71:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:53:14 2025 by rpki-client