Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/jz90vv6kT8814r7qD_fGqQHUToc.roa
File: jz90vv6kT8814r7qD_fGqQHUToc.roa (raw, json)
Hash identifier: f3X0CYyJUtKdKPAZKVCkw70r2WPKMFX9nLw9xUALHgQ=
Subject key identifier: 8F:3F:74:BE:FE:A4:4F:CF:35:E2:BE:EA:0F:F7:C6:A9:01:D4:4E:87
Certificate issuer: /CN=c092d8d5511b19ece456960f23bfa886ee1d570b
Certificate serial: 019427B6888CEFD141008C1F36898F8DF980
Authority key identifier: C0:92:D8:D5:51:1B:19:EC:E4:56:96:0F:23:BF:A8:86:EE:1D:57:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/jz90vv6kT8814r7qD_fGqQHUToc.roa
Signing time: Thu 02 Jan 2025 15:51:01 +0000
ROA not before: Thu 02 Jan 2025 15:51:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 91.106.32.0/24 maxlen: 24
91.106.33.0/24 maxlen: 24
91.106.34.0/24 maxlen: 24
91.106.35.0/24 maxlen: 24
91.106.36.0/24 maxlen: 24
91.106.37.0/24 maxlen: 24
91.106.38.0/24 maxlen: 24
91.106.39.0/24 maxlen: 24
91.106.40.0/24 maxlen: 24
91.106.41.0/24 maxlen: 24
91.106.42.0/24 maxlen: 24
91.106.43.0/24 maxlen: 24
91.106.44.0/24 maxlen: 24
91.106.45.0/24 maxlen: 24
91.106.46.0/24 maxlen: 24
91.106.47.0/24 maxlen: 24
91.106.48.0/24 maxlen: 24
91.106.49.0/24 maxlen: 24
91.106.50.0/24 maxlen: 24
91.106.51.0/24 maxlen: 24
91.106.52.0/24 maxlen: 24
91.106.53.0/24 maxlen: 24
91.106.54.0/24 maxlen: 24
91.106.55.0/24 maxlen: 24
91.106.56.0/24 maxlen: 24
91.106.57.0/24 maxlen: 24
91.106.58.0/24 maxlen: 24
91.106.59.0/24 maxlen: 24
91.106.60.0/24 maxlen: 24
91.106.61.0/24 maxlen: 24
91.106.62.0/24 maxlen: 24
91.106.63.0/24 maxlen: 24
109.61.4.0/24 maxlen: 24
109.61.5.0/24 maxlen: 24
109.61.6.0/24 maxlen: 24
109.61.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:88:8c:ef:d1:41:00:8c:1f:36:89:8f:8d:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c092d8d5511b19ece456960f23bfa886ee1d570b
Validity
Not Before: Jan 2 15:51:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f3f74befea44fcf35e2beea0ff7c6a901d44e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:43:ae:78:28:b0:29:4c:0c:23:70:97:56:a1:
51:c3:6e:7c:c8:f0:f6:76:b6:fc:9a:66:67:05:cb:
6a:49:da:92:42:d6:f7:0a:e0:11:bd:2d:a8:d7:f4:
2d:d0:ce:a7:e2:32:9c:8e:65:0b:8f:fd:6d:5a:33:
98:95:b6:cb:16:16:a6:f3:ec:2f:29:3a:32:37:46:
28:4a:f8:f2:20:35:bf:9f:6d:b4:09:a2:35:04:8e:
2b:7a:52:52:43:b9:cb:e6:f9:98:6f:93:8e:8a:9a:
88:7b:18:8b:43:dc:19:01:09:e9:16:6e:01:d9:d9:
4e:da:01:84:53:e7:99:fc:30:4c:f3:ee:d8:c1:2f:
79:73:ff:6e:bf:03:d6:95:55:fe:7f:19:3a:dc:c6:
44:99:94:e6:f2:56:72:65:f1:36:f1:99:67:89:de:
89:60:bf:c7:4c:7c:8d:52:78:68:42:fe:0d:70:46:
a7:01:bd:35:c0:0c:a8:79:d4:3e:8a:e4:fc:53:34:
b5:fd:3c:fc:f3:3a:ca:ed:ab:60:f2:df:2d:d8:5a:
ed:2a:30:97:a6:9a:38:cd:96:c6:5b:1a:44:be:4b:
e7:cd:71:24:57:3e:87:e4:76:39:16:02:24:53:fc:
7b:6b:7a:2d:26:4a:c9:7e:63:5b:e8:50:d4:78:4f:
6a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:3F:74:BE:FE:A4:4F:CF:35:E2:BE:EA:0F:F7:C6:A9:01:D4:4E:87
X509v3 Authority Key Identifier:
keyid:C0:92:D8:D5:51:1B:19:EC:E4:56:96:0F:23:BF:A8:86:EE:1D:57:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/jz90vv6kT8814r7qD_fGqQHUToc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.106.32.0/19
109.61.4.0/22
Signature Algorithm: sha256WithRSAEncryption
dc:14:4d:e1:9f:ce:15:4d:a5:7b:c2:ae:c2:e2:af:2b:19:cb:
ab:66:a9:ce:f4:a5:44:c6:9d:24:91:b5:b3:95:1c:6a:1d:42:
7d:39:0b:6e:74:14:be:bd:ff:ce:93:6d:73:e0:86:a8:8d:8a:
1c:a6:a3:9c:3b:d3:a7:90:79:eb:f9:e2:83:75:ac:d4:2f:64:
09:b7:77:51:52:ce:e5:c0:69:a8:a3:00:fb:ba:16:3f:b6:62:
36:5b:7f:28:ff:a1:3b:d6:cd:0d:27:26:42:b8:0b:00:5a:80:
2f:6e:9c:9b:01:ec:37:d1:59:1c:f7:95:7b:8a:20:17:b0:e5:
34:2e:98:e8:12:e1:b3:90:8c:9d:d1:47:a9:a1:24:a5:22:16:
21:d0:8c:e2:09:42:3a:a2:b4:e7:3e:5d:f5:b8:04:43:5e:24:
c1:7f:1f:c5:b3:f1:0f:18:20:4d:c0:5e:60:1b:23:ad:b5:1b:
72:32:a5:17:af:57:8f:c8:dd:05:76:09:f0:02:0b:3e:41:ac:
00:f0:dd:32:56:61:a4:0a:77:26:60:4c:b6:ff:11:25:4b:a5:
a7:83:90:bc:42:b3:b0:56:a7:19:e8:45:83:0d:88:e3:77:8c:
fa:ca:db:94:95:d7:b2:ec:76:b9:5c:53:68:8f:96:2f:e2:11:
5b:c8:a3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:21:36 2025 by rpki-client