Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/jNQsNrl4OFuXyBApJXCWmUTjpZk.roa
File: jNQsNrl4OFuXyBApJXCWmUTjpZk.roa (raw, json)
Hash identifier: N8A4PApBA9zWi0+/3/LkUNmVkYXpRd84xcIjX23MSx8=
Subject key identifier: 8C:D4:2C:36:B9:78:38:5B:97:C8:10:29:25:70:96:99:44:E3:A5:99
Certificate issuer: /CN=0aeeaee0863d1dca624f61f39b2181c7db6cba3f
Certificate serial: 019426D9F85C14233E86C5F28EC63FF8B937
Authority key identifier: 0A:EE:AE:E0:86:3D:1D:CA:62:4F:61:F3:9B:21:81:C7:DB:6C:BA:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/jNQsNrl4OFuXyBApJXCWmUTjpZk.roa
Signing time: Thu 02 Jan 2025 11:50:06 +0000
ROA not before: Thu 02 Jan 2025 11:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57332
IP address blocks: 5.206.240.0/20 maxlen: 20
45.85.8.0/22 maxlen: 22
159.255.176.0/20 maxlen: 20
159.255.180.0/23 maxlen: 23
159.255.186.0/24 maxlen: 24
159.255.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f8:5c:14:23:3e:86:c5:f2:8e:c6:3f:f8:b9:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aeeaee0863d1dca624f61f39b2181c7db6cba3f
Validity
Not Before: Jan 2 11:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8cd42c36b978385b97c810292570969944e3a599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9a:f0:e1:1c:d7:22:2c:2e:64:3c:07:2f:87:
1e:38:1a:7d:1e:9c:1d:fe:36:b9:1e:c0:51:19:d0:
77:33:41:2f:28:d2:7f:61:84:0c:2f:e0:ad:20:83:
00:b8:13:72:25:98:d1:99:78:1f:6b:6c:38:42:90:
62:92:f0:2d:51:73:e5:56:4a:61:8c:3b:59:8a:68:
41:3d:47:6b:ff:3e:b5:77:4a:76:33:67:fd:4b:c9:
b7:19:f7:2f:01:df:59:e0:50:a9:21:47:dc:af:89:
46:18:c4:9e:0c:3c:56:48:e6:93:70:85:21:7b:0e:
d8:58:84:8f:32:bf:af:8f:97:72:43:e7:7c:66:09:
2a:69:a9:d3:b9:b3:43:44:2c:55:03:c1:95:a8:bb:
d5:bb:b9:97:2c:0e:1d:ef:69:e8:51:48:ab:3c:52:
17:d0:b9:89:bc:01:81:a5:51:7b:dc:fa:55:08:de:
43:5a:67:da:f3:0d:f1:54:2d:3f:6d:df:86:67:53:
99:43:14:b3:fb:86:90:5b:78:b5:a5:a7:d4:6a:0b:
52:bd:21:93:33:48:0c:3c:a0:25:c2:2a:6d:0e:c9:
72:63:70:60:a5:39:ba:a9:7b:83:b4:f6:92:7f:78:
69:12:d4:82:69:06:49:c9:a7:49:bc:c0:c6:c9:b5:
30:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D4:2C:36:B9:78:38:5B:97:C8:10:29:25:70:96:99:44:E3:A5:99
X509v3 Authority Key Identifier:
keyid:0A:EE:AE:E0:86:3D:1D:CA:62:4F:61:F3:9B:21:81:C7:DB:6C:BA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/jNQsNrl4OFuXyBApJXCWmUTjpZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.206.240.0/20
45.85.8.0/22
159.255.176.0/20
Signature Algorithm: sha256WithRSAEncryption
b1:0e:d3:4e:99:20:3d:ac:8e:d8:bb:9a:b8:e7:a4:b8:76:79:
2b:5d:7b:15:4e:b3:98:69:cf:fc:25:9b:9d:a4:51:2f:db:12:
9f:79:82:2d:24:30:93:6a:7c:37:f6:f7:35:69:fb:63:a8:6e:
29:71:41:77:60:73:bc:db:54:19:58:60:a3:70:14:99:75:39:
2f:7b:04:a2:3c:25:0a:46:23:1f:f0:7b:b2:0f:fc:23:34:d7:
b5:1f:04:2e:7e:f7:d6:3b:1d:95:c7:12:49:0a:45:6f:85:d2:
3c:e1:26:f9:cb:5f:2b:1c:85:36:fa:90:45:df:1f:16:05:71:
ef:fd:ea:2c:5d:ef:35:e9:07:ab:20:64:a9:36:8a:b2:bb:29:
91:13:b8:00:99:c8:1f:c7:1d:de:00:b7:3b:d6:03:a2:4a:33:
53:1f:76:7a:76:28:96:40:61:54:35:62:a4:be:e6:c9:67:6d:
37:ef:b5:b1:3b:0e:57:cc:7f:df:9a:5f:2b:2f:6f:d4:a3:c7:
c7:dc:77:7d:48:6a:65:b1:40:85:b0:c9:8e:04:3e:3e:ee:b3:
07:11:cd:ff:bb:eb:0b:c5:ea:82:30:62:50:85:a2:47:fa:5b:
21:72:60:67:f4:df:f5:78:8f:d9:97:4c:c3:7e:7b:72:3f:53:
b6:c6:db:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:55 2025 by rpki-client