Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/JhyOMYsYocvVqxQhLK_Rr143Yl4.roa
File: JhyOMYsYocvVqxQhLK_Rr143Yl4.roa (raw, json)
Hash identifier: D5et6ikl0ESFL5b58JCC0EoY+mZ1iOis6weM043v4DE=
Subject key identifier: 26:1C:8E:31:8B:18:A1:CB:D5:AB:14:21:2C:AF:D1:AF:5E:37:62:5E
Certificate issuer: /CN=20ccf6dfa709573a821b63c4cb695605fd26680b
Certificate serial: 01942521B2F3BE505E6E4FA6CBD170BC6D37
Authority key identifier: 20:CC:F6:DF:A7:09:57:3A:82:1B:63:C4:CB:69:56:05:FD:26:68:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/JhyOMYsYocvVqxQhLK_Rr143Yl4.roa
Signing time: Thu 02 Jan 2025 03:49:13 +0000
ROA not before: Thu 02 Jan 2025 03:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58282
IP address blocks: 185.128.228.0/22 maxlen: 22
185.153.152.0/22 maxlen: 22
185.153.152.0/23 maxlen: 23
185.153.154.0/23 maxlen: 23
188.64.152.0/21 maxlen: 21
188.64.152.0/22 maxlen: 22
188.64.156.0/22 maxlen: 22
194.182.109.0/24 maxlen: 24
194.182.156.0/23 maxlen: 23
194.182.156.0/24 maxlen: 24
194.182.157.0/24 maxlen: 24
194.182.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:b2:f3:be:50:5e:6e:4f:a6:cb:d1:70:bc:6d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ccf6dfa709573a821b63c4cb695605fd26680b
Validity
Not Before: Jan 2 03:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=261c8e318b18a1cbd5ab14212cafd1af5e37625e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:90:17:51:4a:2f:45:7a:76:30:a7:af:ea:55:
07:7d:97:f2:b9:c1:90:a0:04:80:67:e7:25:74:c7:
a0:04:27:1e:42:71:04:68:60:4b:54:69:85:11:6a:
f6:93:21:1b:fd:c4:b2:df:6c:32:47:b5:e4:02:bf:
4d:7e:b1:89:b3:83:b4:b6:43:cd:de:b7:80:d7:aa:
57:04:14:ad:71:1e:84:e0:0c:f1:b5:ad:22:09:71:
67:d5:b7:4f:40:8a:fa:06:43:6f:cb:bf:f0:91:6d:
63:13:74:28:37:9a:ce:ae:4c:a0:93:f5:02:37:1e:
54:34:d4:90:1f:28:a6:ef:9d:bf:7c:d7:01:3c:b1:
1d:9d:0d:78:24:60:2d:8c:c0:b9:aa:a8:61:7d:c5:
ff:29:af:8e:ab:1e:7f:ce:45:2f:d9:b1:ab:dd:e0:
59:b9:ca:dd:c4:27:7a:ab:14:e6:29:dc:85:3b:cd:
7e:50:33:aa:a0:0f:a3:04:d6:60:0f:89:3d:f1:93:
eb:22:41:95:15:7c:98:b6:57:93:a2:8d:de:dd:ab:
ef:3c:8f:e4:16:0a:37:56:28:24:1c:2d:f0:0d:41:
2b:04:c0:fe:b5:b5:68:ee:c7:aa:bb:2f:ed:8f:01:
26:fe:21:5c:30:23:ba:4d:93:3d:54:0b:61:d9:8f:
15:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:1C:8E:31:8B:18:A1:CB:D5:AB:14:21:2C:AF:D1:AF:5E:37:62:5E
X509v3 Authority Key Identifier:
keyid:20:CC:F6:DF:A7:09:57:3A:82:1B:63:C4:CB:69:56:05:FD:26:68:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/JhyOMYsYocvVqxQhLK_Rr143Yl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.228.0/22
185.153.152.0/22
188.64.152.0/21
194.182.109.0/24
194.182.156.0/23
194.182.159.0/24
Signature Algorithm: sha256WithRSAEncryption
54:a2:91:96:24:84:58:5f:b0:22:f0:12:55:9a:94:61:3f:4b:
73:20:e4:70:9f:8e:4e:d3:52:78:4f:ba:6f:6a:c1:75:3d:f7:
f5:8b:bb:c5:65:78:51:f5:7b:a6:0e:8f:be:88:67:8c:0f:f9:
f1:a0:69:3a:e0:bc:7d:f6:2c:29:3b:d3:58:3d:ef:1a:4b:4a:
41:ef:1f:c2:32:8f:46:a6:1c:e5:87:a1:0f:c7:c8:01:5b:8c:
64:f4:d2:09:10:c2:0b:4f:c3:60:d7:e0:65:25:cd:14:2e:aa:
73:3e:9c:87:65:1b:6f:27:ec:56:c3:02:73:81:7f:f5:a2:70:
d2:d8:db:1b:4e:ba:49:33:0d:81:71:ec:58:3a:1c:e3:91:0f:
00:88:36:32:7f:02:40:99:9a:b4:d1:a8:99:76:f1:ce:d1:83:
82:6f:53:b5:c1:1f:22:10:8d:d4:bc:66:5c:ef:03:3a:86:70:
35:d3:20:4d:91:a2:e3:87:4b:64:36:18:41:cf:db:6e:17:7b:
df:1c:b1:a7:d6:40:1b:f8:24:b7:c4:e8:2b:fb:5d:30:ea:b1:
18:20:3c:d0:ac:28:59:25:03:37:e0:37:d8:9b:7c:90:87:36:
49:99:88:ba:d2:d8:37:ae:27:a0:07:47:82:d5:4f:48:a3:ae:
83:19:2c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:15 2025 by rpki-client