Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/JLZmjss2C0uW8tqUH4e0cRWAW6o.roa
File: JLZmjss2C0uW8tqUH4e0cRWAW6o.roa (raw, json)
Hash identifier: arrj68Hk7br1IKjmq22P9JopmDVkVezhk2Hw2TDgm3Q=
Subject key identifier: 24:B6:66:8E:CB:36:0B:4B:96:F2:DA:94:1F:87:B4:71:15:80:5B:AA
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258F88E0FF8F0F69FC3D7D52BD0F50DE
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/JLZmjss2C0uW8tqUH4e0cRWAW6o.roa
Signing time: Thu 02 Jan 2025 05:49:11 +0000
ROA not before: Thu 02 Jan 2025 05:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6876
IP address blocks: 95.46.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:88:e0:ff:8f:0f:69:fc:3d:7d:52:bd:0f:50:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24b6668ecb360b4b96f2da941f87b47115805baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:db:11:d7:7a:10:fd:f6:5f:80:15:55:dd:4c:
19:a8:3c:de:c4:f2:77:34:3a:f9:f2:a6:fc:ca:27:
de:00:e8:22:87:c6:5c:74:5e:d9:0d:45:48:ac:2c:
6d:66:cc:44:dc:60:fc:c9:0f:b3:64:91:4c:23:47:
cf:0d:96:dc:8a:20:e9:7b:69:d1:4f:a9:3c:be:f2:
8c:f8:40:64:bd:3d:62:73:da:d6:18:4e:c2:1c:ec:
69:39:f7:cb:af:5e:cb:77:88:99:c8:0e:3d:dd:b0:
ed:b7:8b:eb:68:db:9f:6e:c3:18:ce:c3:d2:41:6d:
9d:38:53:d6:df:9d:bd:45:25:81:31:42:7d:25:fd:
5a:8f:ce:3a:29:1c:04:8f:bb:d0:6f:67:64:61:5f:
76:a0:fb:5e:08:db:6d:22:e8:3d:c0:c8:40:fb:30:
ea:ea:bd:78:54:cc:7b:7f:64:45:e6:31:dd:65:9b:
48:ac:0f:ba:e6:b8:20:41:06:b8:bf:64:9a:b9:f5:
cd:31:f7:7a:a4:27:12:55:7e:1b:3c:be:10:63:b2:
d3:36:5b:56:dd:22:a8:b9:8e:bf:e3:22:21:1e:cf:
5d:2b:19:ab:da:f9:2c:d6:45:f5:5c:b1:69:2f:cb:
e4:ff:b0:60:6c:01:ad:a2:2c:88:1a:80:15:4e:1a:
cb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B6:66:8E:CB:36:0B:4B:96:F2:DA:94:1F:87:B4:71:15:80:5B:AA
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/JLZmjss2C0uW8tqUH4e0cRWAW6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.107.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:00:70:05:11:d5:90:37:96:2a:f6:00:95:4d:01:a0:7c:be:
20:dc:f7:99:48:9f:9f:71:b7:4b:01:60:b0:2b:02:97:08:2e:
37:4a:1b:ee:57:95:de:b7:8a:57:5f:d3:4c:6b:0c:0f:df:7f:
e3:ff:e4:eb:52:a6:92:3e:61:cc:bd:05:f7:5c:7d:a9:dd:eb:
ee:d6:36:3c:42:a3:56:64:19:8c:65:1b:35:2c:06:e4:ce:86:
06:ac:77:46:47:4e:94:45:8e:55:00:2a:a8:96:b5:4f:92:69:
2e:4f:82:b4:82:2f:a6:aa:5a:4f:ea:1c:70:30:28:8a:3e:e2:
f5:40:92:b9:61:be:41:e4:ac:a1:e1:09:20:fd:83:0b:8d:32:
e6:f1:d0:70:c9:13:83:01:00:c7:a6:21:57:66:f6:0f:5b:66:
03:31:13:7a:ad:d3:e1:6e:c9:54:bc:ff:82:04:8b:a4:ab:54:
81:0c:9d:ff:cb:6b:6e:ca:49:03:6a:c4:51:f5:3e:13:1e:d4:
3c:a0:95:17:09:da:4b:5b:89:b7:6a:2c:97:18:be:fd:77:2b:
ac:e2:a1:8d:0b:53:5e:ff:11:a9:ff:67:fc:cf:56:9f:0c:e3:
b6:f0:2d:2b:f9:eb:b4:ee:12:d3:74:68:3a:c5:b3:c6:3c:d0:
02:bb:0f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:44:06 2025 by rpki-client