Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/jKLSLSrs4zaWb_fcX_B1a3StzxI.roa
File: jKLSLSrs4zaWb_fcX_B1a3StzxI.roa (raw, json)
Hash identifier: PV0VXJ9NvTkABkeJjMjkJ7MrJkbwN8KNinTOUTwNnFg=
Subject key identifier: 8C:A2:D2:2D:2A:EC:E3:36:96:6F:F7:DC:5F:F0:75:6B:74:AD:CF:12
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0194AEE760725C0B45221BE3EF4D37085F8F
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/jKLSLSrs4zaWb_fcX_B1a3StzxI.roa
Signing time: Tue 28 Jan 2025 21:53:06 +0000
ROA not before: Tue 28 Jan 2025 21:53:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3319
IP address blocks: 77.47.143.0/24 maxlen: 24
77.47.148.0/22 maxlen: 24
77.47.156.0/22 maxlen: 24
77.47.212.0/23 maxlen: 24
77.47.240.0/23 maxlen: 24
77.47.243.0/24 maxlen: 24
77.47.244.0/22 maxlen: 24
185.143.56.0/22 maxlen: 24
195.178.132.0/24 maxlen: 24
195.178.133.0/24 maxlen: 24
195.178.134.0/24 maxlen: 24
195.178.135.0/24 maxlen: 24
195.178.140.0/23 maxlen: 24
195.178.144.0/23 maxlen: 23
195.178.146.0/24 maxlen: 24
195.178.147.0/24 maxlen: 24
195.178.152.0/22 maxlen: 22
195.178.156.0/24 maxlen: 24
212.111.207.0/24 maxlen: 24
212.111.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ae:e7:60:72:5c:0b:45:22:1b:e3:ef:4d:37:08:5f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 28 21:53:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ca2d22d2aece336966ff7dc5ff0756b74adcf12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:91:f1:d0:af:a5:99:9b:85:5c:38:77:32:35:
65:75:35:7f:0e:7e:b9:b9:2c:85:a9:75:30:ac:55:
d7:e1:bc:d4:ed:da:09:b0:e3:d8:91:dc:c3:07:9d:
6f:f6:9f:50:0f:a1:31:cf:a5:33:0f:86:c0:82:54:
e0:c2:4b:6e:40:41:fb:99:e6:8f:62:44:b9:f2:43:
77:bc:80:5a:15:b5:32:48:92:32:45:04:27:72:23:
98:06:82:c1:dd:b9:ee:03:08:e0:50:f0:cc:9c:71:
8f:8d:95:71:82:ba:11:d7:b7:3e:2a:6f:ca:f0:3e:
aa:63:88:29:72:e9:c9:5b:ef:76:39:2a:28:77:6b:
78:5d:64:50:6e:67:35:a6:01:be:30:66:28:1d:2f:
de:62:54:19:0a:9e:27:c9:03:32:2d:c4:38:1d:33:
fd:54:0d:e5:b5:ea:be:1d:23:8a:69:d8:f8:a5:84:
b4:af:c5:79:1b:5e:6e:20:46:8d:19:eb:04:cc:c6:
f9:19:d7:07:d5:88:28:cc:e6:73:b7:93:4b:ab:46:
ac:2c:be:fa:f8:12:81:6c:da:9a:4c:f4:ef:31:34:
24:29:60:47:e2:0c:92:31:a2:5c:1f:27:60:d5:8b:
28:d3:58:d2:da:42:5c:f8:87:9b:94:d4:45:f6:55:
fe:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A2:D2:2D:2A:EC:E3:36:96:6F:F7:DC:5F:F0:75:6B:74:AD:CF:12
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/jKLSLSrs4zaWb_fcX_B1a3StzxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.143.0/24
77.47.148.0/22
77.47.156.0/22
77.47.212.0/23
77.47.240.0/23
77.47.243.0-77.47.247.255
185.143.56.0/22
195.178.132.0/22
195.178.140.0/23
195.178.144.0/22
195.178.152.0-195.178.156.255
212.111.207.0/24
212.111.217.0/24
Signature Algorithm: sha256WithRSAEncryption
48:6f:c5:21:b8:dd:c5:f7:2c:60:36:bc:6f:a6:6b:d7:b4:c4:
36:4b:b3:a5:66:8c:c0:95:57:18:6e:de:5c:3c:52:21:49:3c:
a7:e3:b9:ed:07:a8:14:56:c5:c4:20:42:f7:a4:4c:a0:84:bb:
70:ad:69:b8:b3:cd:ad:4e:48:1f:92:12:0c:bc:ac:bd:c1:3d:
d1:91:38:49:24:2f:46:b6:74:dc:52:d7:f1:a2:9f:f5:83:00:
10:c6:ae:25:07:f3:d9:9e:38:c2:b7:8e:6f:b7:4c:4f:b2:4e:
8c:c6:c7:a4:06:c5:e2:6f:e1:59:44:b1:f8:ea:0b:d8:a6:db:
f5:05:cd:12:0a:4b:47:f3:f6:cd:39:d6:d3:64:bd:39:04:9b:
4c:f8:9f:28:89:6c:ad:29:1e:79:5b:28:ca:6c:e8:5f:6e:25:
48:f3:21:de:4a:b3:f2:d9:85:a4:3e:0e:9d:73:5a:9a:4b:5c:
67:fe:90:3e:d6:d7:0f:d2:48:ae:65:50:fb:da:83:ab:3c:ff:
f9:ad:57:48:34:fe:a8:c9:38:16:38:05:8a:65:7c:13:48:d4:
07:c6:fe:8e:eb:58:c9:41:dc:a4:97:8a:de:d8:15:09:15:8c:
cc:9b:70:1e:1c:d4:e8:01:09:08:54:b6:f2:48:61:e3:3a:9a:
5b:4f:69:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:15 2025 by rpki-client