Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/JgbZ0ql-oOG12xXVwl4EnangI1U.roa
File: JgbZ0ql-oOG12xXVwl4EnangI1U.roa (raw, json)
Hash identifier: Dk4gFZlEWmjuZCA68KJ5+f+i9m0ZGMrukxQ0CZ40EBU=
Subject key identifier: 26:06:D9:D2:A9:7E:A0:E1:B5:DB:15:D5:C2:5E:04:9D:A9:E0:23:55
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 0194228DA2D0AF5B83D9B5EAEB68FE12E099
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/JgbZ0ql-oOG12xXVwl4EnangI1U.roa
Signing time: Wed 01 Jan 2025 15:48:15 +0000
ROA not before: Wed 01 Jan 2025 15:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51703
IP address blocks: 85.153.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:a2:d0:af:5b:83:d9:b5:ea:eb:68:fe:12:e0:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 15:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2606d9d2a97ea0e1b5db15d5c25e049da9e02355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:33:29:65:61:a4:8b:df:81:c2:f9:3e:fe:f6:
d0:65:dc:41:d6:8e:a3:4c:63:6d:11:e8:0e:1b:fe:
c7:e5:a3:92:e7:57:e1:c2:3d:45:57:0a:9d:4c:8e:
60:1d:b1:9d:f5:1d:93:2b:30:62:c5:22:19:dd:69:
16:3f:b5:33:af:00:29:48:76:d0:f1:36:d7:06:3a:
a2:8c:a5:5a:6a:72:c1:f2:f6:df:3b:e4:e9:58:e5:
47:5b:f0:15:3b:70:0e:1c:ee:d5:95:69:b9:b9:e4:
07:f3:ab:e2:c8:f9:5e:f5:54:da:25:42:ec:b8:20:
28:79:c7:42:f6:2e:fc:96:9f:51:1b:ae:dc:50:48:
ec:9b:7d:ba:ad:6f:85:59:3b:e4:ec:5b:f9:71:4a:
ee:c6:9e:37:4a:0a:b1:38:f0:f1:fb:f1:22:ea:9a:
de:2a:ed:8c:5d:7b:c1:7d:02:ac:85:24:19:b3:5e:
71:32:dd:fa:57:17:da:46:fc:e6:50:3b:55:3e:26:
30:6d:c7:35:98:e0:d6:2f:d3:60:f3:be:8f:33:69:
47:8f:20:ca:b9:cc:cf:68:23:78:4d:c2:be:9c:88:
66:df:a7:a7:16:40:f1:59:46:53:b3:28:56:67:5e:
05:36:4d:6d:40:b7:47:38:5e:51:0e:2b:99:80:7f:
c6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:06:D9:D2:A9:7E:A0:E1:B5:DB:15:D5:C2:5E:04:9D:A9:E0:23:55
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/JgbZ0ql-oOG12xXVwl4EnangI1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.131.0/24
Signature Algorithm: sha256WithRSAEncryption
82:ea:0c:3b:3a:3f:cd:d9:20:e1:b4:e0:b5:d1:80:bd:ca:84:
31:a4:4c:cf:0b:34:f1:af:d2:7b:53:a8:ca:12:e8:fe:11:ce:
35:c4:be:82:45:74:1e:0e:9a:68:65:5c:9a:44:20:b4:04:a6:
82:7c:13:ea:65:c8:31:71:00:df:49:c2:1f:37:13:7a:7e:7c:
bd:d6:20:1f:00:54:69:f6:32:86:78:95:60:78:a6:32:ea:26:
d1:82:4e:ae:63:ec:06:a7:83:cc:7f:ff:d0:f3:81:db:d0:3e:
46:5d:a0:76:b7:8e:97:97:12:b1:e2:70:47:d0:cf:22:61:09:
ef:53:de:66:61:a0:fa:2b:19:c8:11:7f:c9:f2:cd:58:3c:86:
50:b2:20:a7:19:b4:89:d5:90:eb:e9:21:03:31:2f:fa:7d:60:
5b:8b:a8:f5:11:14:6d:31:aa:e3:a7:04:ab:0f:6b:1a:29:a1:
aa:ea:23:0c:12:66:a0:02:b4:76:bc:d9:4b:90:38:1b:e5:b4:
d0:ca:bd:ea:fd:ea:cc:df:93:4d:96:f6:7f:fd:c5:3f:d3:c0:
f2:df:22:b4:73:25:29:b5:2b:ef:93:01:d9:58:b9:b1:aa:e6:
0c:b0:d8:bf:c5:64:9a:3a:b3:73:3e:75:34:16:1c:80:3c:dc:
3e:17:ce:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:29:30 2025 by rpki-client