Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/j4z8aHNzefCrO_5fBxHNYffzLDs.roa
File: j4z8aHNzefCrO_5fBxHNYffzLDs.roa (raw, json)
Hash identifier: ajfWva+qYOWO0fe/7u00MdVPNM/cObiYIKYlWLihqfo=
Subject key identifier: 8F:8C:FC:68:73:73:79:F0:AB:3B:FE:5F:07:11:CD:61:F7:F3:2C:3B
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 01941FFA72D2B8225F63CD93FB0A03EDAF53
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/j4z8aHNzefCrO_5fBxHNYffzLDs.roa
Signing time: Wed 01 Jan 2025 03:48:14 +0000
ROA not before: Wed 01 Jan 2025 03:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20960
IP address blocks: 78.131.128.0/17 maxlen: 17
82.160.0.0/16 maxlen: 16
88.199.0.0/16 maxlen: 16
94.40.0.0/16 maxlen: 17
213.199.192.0/18 maxlen: 18
2a02:f40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:72:d2:b8:22:5f:63:cd:93:fb:0a:03:ed:af:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 03:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f8cfc68737379f0ab3bfe5f0711cd61f7f32c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:96:0a:e6:e4:b7:e5:0f:7c:3a:d4:f1:7a:b1:
4d:18:e0:cd:e0:cf:0c:93:ef:5f:74:0d:f9:fd:09:
f4:28:fc:c6:87:aa:5d:c5:a7:f6:61:03:72:01:7c:
a7:be:38:37:3b:db:e4:ff:c8:bc:d6:b6:fe:51:f3:
5a:61:58:90:fb:8f:9e:93:a8:a7:1f:c3:67:11:be:
e8:bd:56:20:71:7a:d3:1b:54:4f:f4:2c:2f:4e:c6:
7b:ce:ac:8a:fd:14:29:c2:00:c1:93:6d:33:19:29:
b0:6e:de:d9:fe:06:c7:1e:51:b2:56:fb:d7:bf:9a:
6a:4c:be:cb:35:06:96:e7:e0:3a:1f:33:3e:52:6f:
1e:7e:e9:1c:6e:de:74:c2:f7:6d:e4:ec:c8:65:01:
6e:81:12:8f:37:6e:76:4f:60:74:3c:28:2e:24:bc:
79:78:68:3c:c3:eb:45:ac:5d:6d:29:f2:b2:14:22:
0e:f2:de:68:99:a7:ba:ef:54:58:85:08:b5:8e:19:
57:19:4b:7d:da:3a:ea:8d:86:ac:c4:78:86:5c:d6:
18:a3:01:be:25:49:f9:51:cb:d0:cc:c8:2d:bd:5a:
16:c6:eb:30:e7:4c:cc:e5:0e:a1:9e:f0:f7:e9:38:
76:7e:7b:eb:3c:d6:2e:be:a5:7f:43:bc:7f:28:2c:
3d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8C:FC:68:73:73:79:F0:AB:3B:FE:5F:07:11:CD:61:F7:F3:2C:3B
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/j4z8aHNzefCrO_5fBxHNYffzLDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.131.128.0/17
82.160.0.0/16
88.199.0.0/16
94.40.0.0/16
213.199.192.0/18
IPv6:
2a02:f40::/32
Signature Algorithm: sha256WithRSAEncryption
46:0d:1c:9f:11:53:c0:aa:7d:47:a0:41:eb:11:17:a2:5a:43:
f0:7e:30:84:0e:3c:f9:7b:6f:28:a0:fa:c6:b4:39:48:ee:05:
5d:c9:e2:f1:2e:68:0f:b6:19:1c:00:e7:ea:bd:0c:be:32:9b:
ca:b7:26:9e:9b:3e:48:a2:8d:8e:e6:59:c0:c9:0d:2a:cf:9c:
bc:00:aa:24:74:f1:c0:71:c0:7c:e5:fc:50:3f:d6:d2:ab:6a:
cc:22:66:e0:04:ef:35:f9:4c:91:b9:fe:86:04:8e:46:d2:83:
cb:1e:f9:ac:48:f1:02:51:48:f5:4a:4d:40:ad:16:c8:72:3b:
da:b3:85:15:e3:bb:73:f9:65:aa:61:0d:c5:0d:dd:fa:9e:f8:
13:88:f2:8b:fb:ad:df:0c:6b:de:8e:28:0c:2d:aa:88:13:84:
25:d6:17:d3:bb:d2:89:d3:da:30:9b:e1:d3:b7:c8:ff:36:9e:
65:b4:78:b7:d9:fc:49:6a:a2:84:ad:cb:73:4d:3d:e6:3d:0a:
d0:47:c5:0f:f4:d5:bc:86:d7:5a:31:68:21:34:93:db:ad:d6:
a4:f1:20:4d:d0:db:64:ec:98:8f:54:2f:75:9e:aa:2f:ef:28:
6e:d0:51:90:9a:a9:0b:f8:d0:f5:87:06:a7:32:e7:6e:af:3e:
44:79:4e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:37 2025 by rpki-client