Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/JpDPBxpVEn5ORtlRE4r2PIP07-o.roa
File: JpDPBxpVEn5ORtlRE4r2PIP07-o.roa (raw, json)
Hash identifier: ejnga1ER5xYuF3j7wDw6i8KJxs62ZWG7arHBiFod0Ng=
Subject key identifier: 26:90:CF:07:1A:55:12:7E:4E:46:D9:51:13:8A:F6:3C:83:F4:EF:EA
Certificate issuer: /CN=b19549d68305e29dfb00069a52d3d4e1f2c5604c
Certificate serial: 0184A563DF170F63E6E0A52566C8F07DEDF9
Authority key identifier: B1:95:49:D6:83:05:E2:9D:FB:00:06:9A:52:D3:D4:E1:F2:C5:60:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZVJ1oMF4p37AAaaUtPU4fLFYEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/JpDPBxpVEn5ORtlRE4r2PIP07-o.roa
Signing time: Wed 23 Nov 2022 16:48:16 +0000
ROA not before: Wed 23 Nov 2022 16:48:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28909
IP address blocks: 213.167.4.0/24 maxlen: 24
213.167.3.0/24 maxlen: 24
213.167.2.0/24 maxlen: 24
213.167.1.0/24 maxlen: 24
213.167.0.0/24 maxlen: 24
213.167.11.0/24 maxlen: 24
213.167.10.0/24 maxlen: 24
213.167.9.0/24 maxlen: 24
213.167.8.0/24 maxlen: 24
213.167.7.0/24 maxlen: 24
213.167.6.0/24 maxlen: 24
213.167.5.0/24 maxlen: 24
213.167.17.0/24 maxlen: 24
213.167.16.0/24 maxlen: 24
213.167.15.0/24 maxlen: 24
213.167.14.0/24 maxlen: 24
213.167.13.0/24 maxlen: 24
213.167.12.0/24 maxlen: 24
213.167.18.0/24 maxlen: 24
213.167.24.0/24 maxlen: 24
213.167.23.0/24 maxlen: 24
213.167.22.0/24 maxlen: 24
213.167.21.0/24 maxlen: 24
213.167.20.0/24 maxlen: 24
213.167.19.0/24 maxlen: 24
213.167.31.0/24 maxlen: 24
213.167.30.0/24 maxlen: 24
213.167.29.0/24 maxlen: 24
213.167.28.0/24 maxlen: 24
213.167.27.0/24 maxlen: 24
213.167.26.0/24 maxlen: 24
213.167.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a5:63:df:17:0f:63:e6:e0:a5:25:66:c8:f0:7d:ed:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b19549d68305e29dfb00069a52d3d4e1f2c5604c
Validity
Not Before: Nov 23 16:48:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2690cf071a55127e4e46d951138af63c83f4efea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e0:36:17:32:84:10:29:0c:27:f8:2b:f7:2a:
9c:ca:d3:a6:64:5e:87:62:a7:6e:a8:3e:fd:92:60:
7f:4a:34:82:bb:97:15:c8:3b:5f:55:f5:86:04:0b:
1a:b3:1e:a6:c4:72:28:56:95:27:8a:c5:80:73:dd:
bd:f1:ad:b6:c9:e4:11:9e:02:d7:ea:b8:17:70:25:
bf:4d:f0:17:40:3c:ed:c4:6f:c8:b5:65:a5:65:cd:
66:c7:c4:3b:24:3b:63:64:a2:dd:06:05:c6:dd:8e:
dd:07:f7:26:cc:d4:84:a9:2d:75:86:82:ed:e8:cb:
9f:d5:18:f4:68:09:25:53:29:ed:9c:34:d5:94:6d:
15:0f:69:61:5a:69:52:01:37:94:0d:ee:13:4d:ba:
fd:2b:35:13:9d:ff:2e:80:cb:bb:f9:32:c2:50:a4:
e1:ef:39:b3:83:da:05:8d:34:93:17:0d:5f:5a:6d:
39:f7:ea:b6:4e:79:85:a0:24:a9:be:05:62:cc:82:
da:b9:0d:4d:d2:f0:16:f2:9d:ab:3a:0d:81:f9:89:
78:76:6d:e6:d6:d1:fb:8b:b2:dc:1b:11:25:44:76:
19:d5:76:8d:a9:1e:66:b0:dc:2e:5d:b7:67:90:43:
11:64:4c:02:e5:cc:59:30:51:e5:10:d7:bd:fe:8e:
09:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:90:CF:07:1A:55:12:7E:4E:46:D9:51:13:8A:F6:3C:83:F4:EF:EA
X509v3 Authority Key Identifier:
keyid:B1:95:49:D6:83:05:E2:9D:FB:00:06:9A:52:D3:D4:E1:F2:C5:60:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZVJ1oMF4p37AAaaUtPU4fLFYEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/JpDPBxpVEn5ORtlRE4r2PIP07-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.167.0.0/19
Signature Algorithm: sha256WithRSAEncryption
27:c9:5b:be:75:4f:b1:4f:74:6f:c9:91:28:0c:9c:8d:7f:7e:
49:2f:d8:bb:06:46:e5:f7:34:38:ca:87:07:d2:89:fe:f7:83:
79:36:37:ea:17:4b:58:5b:25:b2:83:0f:ef:6f:bc:05:5a:f7:
f1:e5:12:70:fe:7a:56:1f:42:7f:8c:7f:62:f6:c4:da:a3:33:
fc:73:d1:14:c3:54:77:18:f9:71:cc:84:3b:5e:be:a1:13:0f:
83:cd:e1:79:e2:14:06:75:75:37:f5:27:b8:5d:e8:f3:fb:7a:
16:df:d7:47:ce:1d:fe:3d:80:8c:b9:87:0d:e1:66:46:a7:35:
09:5d:67:a6:74:a4:18:1a:16:aa:78:28:f1:52:84:32:bc:7d:
85:1a:df:1b:39:5f:a9:5c:73:b3:ae:f7:4d:87:94:c6:99:a9:
55:79:8b:35:5b:29:a2:e9:0a:28:eb:6d:97:07:50:d7:ba:14:
54:e0:87:71:1f:0d:08:63:26:86:5a:c4:92:83:92:90:22:b7:
ea:0c:3c:60:96:17:2f:c3:73:05:4a:99:7f:0d:9c:c2:62:d8:
f4:34:2f:02:54:86:2a:d3:92:54:9a:ba:5a:63:28:48:55:a9:
c6:79:a0:30:1d:59:2d:34:5a:46:fe:c8:3d:8f:d4:ac:c6:df:
c2:2c:3e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:38:48 2025 by rpki-client