Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/Jb3G42rmQZaFwwdUOSNnbExAB1A.roa
File: Jb3G42rmQZaFwwdUOSNnbExAB1A.roa (raw, json)
Hash identifier: 1th08y4K0FUm4z+TLV/vXPdjR8Ng5KU2mnpnZhL8EBQ=
Subject key identifier: 25:BD:C6:E3:6A:E6:41:96:85:C3:07:54:39:23:67:6C:4C:40:07:50
Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial: 0194258F8034F26745FAE2FDF48F2DCB8C0F
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/Jb3G42rmQZaFwwdUOSNnbExAB1A.roa
Signing time: Thu 02 Jan 2025 05:49:08 +0000
ROA not before: Thu 02 Jan 2025 05:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30785
IP address blocks: 82.150.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:80:34:f2:67:45:fa:e2:fd:f4:8f:2d:cb:8c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Validity
Not Before: Jan 2 05:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25bdc6e36ae6419685c307543923676c4c400750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6f:72:61:d0:81:33:16:a9:1f:77:6b:03:74:
3a:ba:d7:50:22:4a:30:5e:94:9a:69:0c:18:35:dc:
b2:d9:5b:7c:fb:43:62:21:a2:ef:f3:13:71:f0:58:
e0:25:f1:5d:09:c4:d2:5f:36:bc:4a:b5:f8:f2:69:
b3:5e:65:0b:44:fc:0d:14:de:33:1d:5d:0b:5d:f3:
94:cf:52:3f:82:d6:63:df:4c:c5:bc:e8:23:cd:0c:
b9:70:6a:3b:2f:92:24:f5:0f:3b:a1:56:80:89:28:
30:e7:06:79:b0:96:2a:46:60:15:b4:33:16:f7:28:
ab:51:c8:3e:ee:c7:65:da:ec:ab:48:1a:42:1a:15:
d9:e7:9f:72:e4:61:3d:45:5b:42:74:a3:01:e5:7f:
7f:a3:c1:73:71:e3:ed:22:72:5c:55:dc:ec:f6:3f:
bc:f5:29:b2:00:31:95:58:f4:86:64:3d:9c:85:b0:
7c:fe:d6:4c:4c:c1:12:9a:89:f2:ca:d8:27:a0:e6:
75:19:cd:ce:55:50:b7:d4:0c:76:48:99:55:69:42:
df:93:7b:68:85:86:b9:20:01:0c:b2:bf:3f:76:96:
1a:e7:8a:4c:79:7e:12:3d:5c:53:73:48:7b:2d:e5:
aa:b2:d1:ab:00:f5:43:5e:53:3a:04:d9:e4:a4:f5:
ec:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BD:C6:E3:6A:E6:41:96:85:C3:07:54:39:23:67:6C:4C:40:07:50
X509v3 Authority Key Identifier:
keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/Jb3G42rmQZaFwwdUOSNnbExAB1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.150.140.0/22
Signature Algorithm: sha256WithRSAEncryption
79:7d:07:c8:c6:6a:92:c7:47:a5:bb:7d:fb:a4:d8:20:9a:15:
13:4b:a6:b2:09:07:40:f4:52:30:e1:1b:ec:a6:1d:54:5d:84:
93:20:69:c5:12:97:1d:79:6e:e8:f6:4e:af:70:25:7f:ea:dc:
30:bb:12:be:48:3f:41:e1:08:cb:23:5e:c0:76:05:62:9c:e9:
11:92:1e:cd:76:1e:3b:a8:0b:d7:cd:0f:28:c6:26:ce:6f:1f:
8a:e0:67:30:75:6e:22:69:3f:c2:f8:50:20:a0:7e:17:c4:5b:
3d:45:00:b5:17:59:7b:bd:4f:68:2c:17:9b:f4:64:8a:97:87:
7c:c2:07:98:14:b9:50:dc:e2:5a:62:a3:6a:4e:83:aa:d6:6b:
51:4a:54:3d:8b:ac:53:f3:50:7a:16:d3:81:94:94:04:66:99:
f9:54:10:52:3c:1f:f1:5f:f2:d6:c6:15:e7:db:06:66:f4:10:
ea:b0:4c:3c:97:af:b5:e9:83:ff:a8:9e:db:68:c9:c7:88:72:
94:35:db:42:4e:54:1b:5f:6f:25:d3:62:07:60:df:cd:67:a2:
c8:f8:f4:23:aa:ea:43:a8:89:9a:50:b4:e6:30:c5:54:42:e2:
2b:02:e0:f0:cd:6b:a9:58:78:e5:b6:36:31:a7:94:3a:63:52:
23:ac:3e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:11:55 2025 by rpki-client