Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/J9QY7yh1pdc4gxwkKHvbRdbJ5Hc.roa
File: J9QY7yh1pdc4gxwkKHvbRdbJ5Hc.roa (raw, json)
Hash identifier: FqRH6xGeGokOrR3y4N/PmTYLTqphdEbs3zKWJDOiox8=
Subject key identifier: 27:D4:18:EF:28:75:A5:D7:38:83:1C:24:28:7B:DB:45:D6:C9:E4:77
Certificate issuer: /CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146
Certificate serial: 019423D6C9A3DC12151E33B3B7EC718E1AE5
Authority key identifier: 74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/J9QY7yh1pdc4gxwkKHvbRdbJ5Hc.roa
Signing time: Wed 01 Jan 2025 21:47:46 +0000
ROA not before: Wed 01 Jan 2025 21:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 83.151.192.0/24 maxlen: 24
83.151.193.0/24 maxlen: 24
83.151.194.0/24 maxlen: 24
83.151.195.0/24 maxlen: 24
88.202.208.0/23 maxlen: 23
88.202.208.0/24 maxlen: 24
88.202.209.0/24 maxlen: 24
88.202.210.0/24 maxlen: 24
88.202.211.0/24 maxlen: 24
88.212.156.0/24 maxlen: 24
88.212.157.0/24 maxlen: 24
88.212.158.0/24 maxlen: 24
88.212.159.0/24 maxlen: 24
185.8.132.0/24 maxlen: 24
185.8.133.0/24 maxlen: 24
185.8.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:c9:a3:dc:12:15:1e:33:b3:b7:ec:71:8e:1a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146
Validity
Not Before: Jan 1 21:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27d418ef2875a5d738831c24287bdb45d6c9e477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:09:e3:b0:bb:ec:85:2c:41:86:00:f3:47:38:
ff:24:d7:55:da:4c:89:e0:53:96:a3:41:b1:a7:a2:
9c:a6:a4:c7:2a:24:b4:82:0d:38:59:97:c6:50:93:
31:36:3d:7d:a6:30:02:44:96:19:66:ba:fe:27:71:
2f:e2:1a:15:f9:65:06:86:4c:8e:71:5d:ac:c2:53:
21:6b:a0:8a:c3:b7:20:f9:59:80:53:d2:fd:7b:4a:
48:89:d0:01:e8:db:cb:37:23:11:33:2a:fb:d4:ba:
9a:c9:6f:f4:4b:c8:8d:b8:ae:34:e7:c1:8d:20:54:
f7:15:7f:23:fc:32:e9:97:62:5f:69:02:35:39:ae:
66:19:56:09:fd:3b:e0:8b:89:af:1e:d9:93:8b:14:
52:b6:cb:0a:0a:0e:bd:b3:33:1c:9e:33:7d:b1:41:
c7:b3:9c:5d:79:11:fc:10:42:db:e8:6a:7e:78:f5:
b8:f5:63:f7:a8:22:17:c5:bf:4d:99:c4:00:1f:f0:
4e:11:0a:61:59:5d:a1:8b:53:70:46:73:57:b1:ea:
17:be:7a:a3:52:58:15:67:f5:54:94:29:48:7b:26:
5d:0c:d1:79:60:99:31:c3:27:e8:18:58:02:e0:4c:
67:7d:7a:79:52:56:13:c8:77:33:9a:bf:fd:f0:57:
95:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D4:18:EF:28:75:A5:D7:38:83:1C:24:28:7B:DB:45:D6:C9:E4:77
X509v3 Authority Key Identifier:
keyid:74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/J9QY7yh1pdc4gxwkKHvbRdbJ5Hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.151.192.0/22
88.202.208.0/22
88.212.156.0/22
185.8.132.0/23
185.8.135.0/24
Signature Algorithm: sha256WithRSAEncryption
67:23:47:d0:ec:88:63:a4:a0:57:25:93:6b:60:eb:f7:28:c2:
ca:fb:e2:6a:f5:2c:47:69:9d:63:6a:3e:7f:8e:9d:66:c4:1d:
21:cd:4c:9c:e5:ff:d1:a3:1c:36:cb:45:32:8b:d5:85:db:eb:
ef:c8:4e:45:0c:3f:30:e6:5d:a4:67:99:e0:4f:28:19:cc:ba:
af:7b:4d:6d:31:dc:16:80:eb:63:20:8e:10:9a:c1:f6:14:23:
25:1d:0b:6e:c1:7b:2a:c3:b0:8d:a8:21:d3:63:8d:c8:41:c3:
88:25:5d:22:b0:82:14:f1:db:f9:60:42:39:4d:01:30:b3:2b:
6d:22:23:37:b9:07:14:60:da:b3:67:fe:15:aa:3d:e1:8d:80:
3f:c0:52:c7:41:c3:76:aa:0a:db:bc:34:5b:ca:41:f4:e8:bb:
08:fb:7b:c0:48:65:3e:9d:c4:88:bf:d8:3c:84:c9:f7:eb:92:
2d:36:fb:e9:86:d1:c1:3a:15:f4:7e:6b:af:5b:14:d2:ea:40:
f4:f0:7f:1e:58:40:3b:da:a2:b8:49:1b:b4:7e:e6:0b:b2:6b:
2e:7b:a7:aa:5e:03:57:d7:b3:71:a3:d0:5d:df:4a:3f:20:e6:
4e:36:d3:e1:57:20:1a:1b:93:13:cb:60:9c:37:dd:87:e2:33:
ef:c3:d6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:43:15 2025 by rpki-client