Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/cb1c25-b556-45a4-b7c1-15f7bd60b028/1/JMJW9eRCcIYpj1kTA1c4n9VLfh8.roa
File: JMJW9eRCcIYpj1kTA1c4n9VLfh8.roa (raw, json)
Hash identifier: 1MbpGYjLoPaQwBKauiy726sRst79+S4zkYkjI3FSg0Y=
Subject key identifier: 24:C2:56:F5:E4:42:70:86:29:8F:59:13:03:57:38:9F:D5:4B:7E:1F
Certificate issuer: /CN=70f409ee8f1727c6d94ef794324caf4c5fd941a5
Certificate serial: 02A507F0
Authority key identifier: 70:F4:09:EE:8F:17:27:C6:D9:4E:F7:94:32:4C:AF:4C:5F:D9:41:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPQJ7o8XJ8bZTveUMkyvTF_ZQaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/cb1c25-b556-45a4-b7c1-15f7bd60b028/1/JMJW9eRCcIYpj1kTA1c4n9VLfh8.roa
Signing time: Sat 01 Jan 2022 03:56:08 +0000
ROA not before: Sat 01 Jan 2022 03:56:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51223
IP address blocks: 185.139.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44369904 (0x2a507f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f409ee8f1727c6d94ef794324caf4c5fd941a5
Validity
Not Before: Jan 1 03:56:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24c256f5e4427086298f59130357389fd54b7e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4f:79:68:67:40:de:02:18:79:0d:f7:cf:7b:
79:a1:e9:a7:a0:51:3d:3f:67:e0:cd:87:2f:6c:6e:
93:00:e4:99:69:f8:e5:4f:33:8d:86:57:a7:21:26:
86:9a:01:b6:47:4f:2d:01:2b:ed:de:1e:ac:33:12:
4f:89:c5:5d:84:39:1f:ee:8d:a3:83:7f:b5:9a:b6:
2c:2a:ab:58:48:82:11:04:12:74:38:85:4c:56:e9:
35:ef:71:b1:07:9e:0c:6a:ff:4a:53:35:08:4a:72:
d7:75:73:83:ca:c6:2d:ce:b0:66:48:be:8a:2a:e0:
f3:66:be:9d:55:56:e6:f5:bb:82:85:8b:39:96:c4:
9b:a3:83:b3:58:c2:71:e2:8c:d2:b1:89:78:ba:5c:
7b:25:f9:52:98:55:ce:a6:e1:91:9b:56:47:86:10:
b5:2a:ea:12:2f:9e:37:cc:c8:79:13:a7:c6:ea:d8:
c8:7e:e9:8c:67:c6:7b:14:ac:d7:68:c6:43:89:ba:
d7:ec:28:45:b7:07:eb:1d:be:b6:6b:d9:d9:f3:ef:
47:bd:e1:d0:43:d7:53:de:b8:f5:6b:1d:c6:6b:5a:
ba:0e:cd:e7:f6:28:6f:92:7c:f1:21:e5:8b:84:18:
fd:63:a9:10:5a:96:5a:2d:bc:3e:e0:fe:3a:e4:2d:
e3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C2:56:F5:E4:42:70:86:29:8F:59:13:03:57:38:9F:D5:4B:7E:1F
X509v3 Authority Key Identifier:
keyid:70:F4:09:EE:8F:17:27:C6:D9:4E:F7:94:32:4C:AF:4C:5F:D9:41:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPQJ7o8XJ8bZTveUMkyvTF_ZQaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cb1c25-b556-45a4-b7c1-15f7bd60b028/1/JMJW9eRCcIYpj1kTA1c4n9VLfh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cb1c25-b556-45a4-b7c1-15f7bd60b028/1/cPQJ7o8XJ8bZTveUMkyvTF_ZQaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.60.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:3f:f2:10:c9:af:e0:98:1b:cc:ef:e8:82:bb:5e:46:eb:8f:
f9:16:86:03:d0:59:23:ad:aa:d5:9f:91:fc:78:c3:86:15:cc:
52:26:f8:f6:4c:bf:3c:66:d0:11:75:16:0b:b6:22:af:13:31:
ba:70:6b:89:b7:7f:e5:0e:87:ea:9b:44:af:a5:af:ba:62:83:
2c:ff:a3:04:5e:3c:cf:bc:39:33:65:a1:d7:d1:7b:15:59:57:
56:e2:7b:8b:8b:c5:52:0a:8c:41:9a:14:82:a3:be:91:72:ec:
f9:1e:97:15:70:ea:4f:1c:3e:d1:e9:75:32:e0:12:eb:1c:f5:
dc:c3:a1:44:76:87:a1:d9:c2:c6:fa:10:60:82:62:fb:29:85:
11:fc:aa:fc:e2:0e:e6:a1:64:e9:fc:53:97:62:a0:79:db:3e:
48:7d:68:bf:51:e3:0e:4a:92:ac:e3:f1:f8:c8:45:d7:61:1c:
98:cd:c3:e1:56:1a:24:50:85:ec:64:06:00:e9:08:90:bc:06:
00:5a:5f:52:40:60:da:bb:f1:bd:32:4c:ca:95:78:fd:67:31:
c2:f0:d1:46:9f:25:91:8e:8f:77:41:0a:e7:7d:74:7e:1c:83:
82:16:20:64:29:3e:7c:17:97:14:a5:17:26:dc:f0:39:1c:08:
c5:61:af:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:45:35 2025 by rpki-client