Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/3364ed-c5f9-4631-b95c-f26b1551e0f5/1/Jj_JJ0WTrevVF8Z4CA9ldjQJ7eg.roa
File: Jj_JJ0WTrevVF8Z4CA9ldjQJ7eg.roa (raw, json)
Hash identifier: YxSh1tqbPlyE1LVGd+MVpuqz3MX+f++r6Go77of6BzU=
Subject key identifier: 26:3F:C9:27:45:93:AD:EB:D5:17:C6:78:08:0F:65:76:34:09:ED:E8
Certificate issuer: /CN=2f1e253977bf583e0e420ec977a8ecf4ed154dbe
Certificate serial: 0B1ED565
Authority key identifier: 2F:1E:25:39:77:BF:58:3E:0E:42:0E:C9:77:A8:EC:F4:ED:15:4D:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lx4lOXe_WD4OQg7Jd6js9O0VTb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/3364ed-c5f9-4631-b95c-f26b1551e0f5/1/Jj_JJ0WTrevVF8Z4CA9ldjQJ7eg.roa
Signing time: Thu 20 Jan 2022 17:45:20 +0000
ROA not before: Thu 20 Jan 2022 17:45:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60729
IP address blocks: 185.220.101.0/24 maxlen: 24
185.220.102.0/24 maxlen: 24
2a0b:f4c1:2::/48 maxlen: 48
2a0b:f4c1::/48 maxlen: 48
2a0b:f4c2::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186570085 (0xb1ed565)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f1e253977bf583e0e420ec977a8ecf4ed154dbe
Validity
Not Before: Jan 20 17:45:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=263fc9274593adebd517c678080f65763409ede8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4a:24:49:bc:90:1b:a6:c7:50:70:65:e4:7a:
5f:e1:a0:f2:73:13:4d:22:35:8f:e1:17:e5:43:90:
7b:80:fe:ca:2f:5d:90:45:bc:a3:00:a6:d1:bb:77:
ab:61:6b:dd:92:1a:ac:3c:dd:ee:ad:e3:41:3d:95:
07:42:56:d5:49:7a:b2:25:81:2c:5e:3d:8e:f7:6f:
9d:c3:81:4e:81:56:f8:9f:1b:f3:3a:2a:f6:f0:94:
d5:c0:8b:3a:77:56:03:2b:ef:ca:2d:07:c6:ff:6f:
21:3b:71:fe:f0:b1:d5:9f:ab:8c:42:6b:37:4a:5c:
cc:53:73:68:97:1f:e6:db:a7:7b:e6:90:85:5e:ba:
d2:4d:36:c7:f9:34:4e:d1:4c:14:a3:4b:c1:c0:c1:
76:ce:ee:65:af:e3:f7:40:52:21:ab:b1:34:b8:3c:
a0:e5:cd:17:ff:48:a8:16:94:1d:66:45:3b:b6:f5:
11:25:db:85:a1:f7:59:6c:05:00:a0:04:f6:33:c1:
fb:9a:9c:ac:c4:2f:35:6d:53:c6:8a:e4:5a:a2:65:
fb:4c:ba:a7:df:ef:10:5b:92:3d:5a:7e:ce:5e:61:
48:29:b6:50:18:80:46:d9:63:9a:cc:db:5f:24:fe:
80:79:fe:a3:7c:6e:71:ca:00:ba:5c:68:22:4e:f4:
63:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3F:C9:27:45:93:AD:EB:D5:17:C6:78:08:0F:65:76:34:09:ED:E8
X509v3 Authority Key Identifier:
keyid:2F:1E:25:39:77:BF:58:3E:0E:42:0E:C9:77:A8:EC:F4:ED:15:4D:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lx4lOXe_WD4OQg7Jd6js9O0VTb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3364ed-c5f9-4631-b95c-f26b1551e0f5/1/Jj_JJ0WTrevVF8Z4CA9ldjQJ7eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3364ed-c5f9-4631-b95c-f26b1551e0f5/1/Lx4lOXe_WD4OQg7Jd6js9O0VTb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.101.0-185.220.102.255
IPv6:
2a0b:f4c1::/48
2a0b:f4c1:2::/48
2a0b:f4c2::/40
Signature Algorithm: sha256WithRSAEncryption
3f:95:88:dc:cc:54:bb:b9:3a:8d:50:e3:d7:b3:6d:ff:24:fc:
ca:62:f6:1b:95:ae:8f:69:6d:b3:c2:8c:70:73:bf:b1:d2:e9:
66:60:99:b5:0d:99:c8:0b:ec:56:a7:f4:f4:51:10:2f:59:68:
66:16:57:62:59:09:0b:ca:be:12:79:e8:67:fe:cc:66:33:76:
e9:fc:cc:65:6e:85:59:fc:ba:d0:6d:a8:80:cd:3e:26:4f:98:
39:24:ef:36:d6:80:84:98:42:a6:78:95:64:cc:33:1f:18:36:
11:c3:e0:1b:67:41:56:68:32:73:40:a4:b5:a1:9c:5f:65:e0:
9d:d8:0b:b9:b2:fe:18:d9:03:bc:84:44:27:f2:8e:11:41:36:
67:32:9f:46:e3:d2:c1:0f:05:90:77:cb:ec:4b:c9:0e:7c:d3:
b9:42:14:eb:90:96:50:60:0f:b7:30:3f:43:72:2d:c9:6d:dc:
35:78:b6:74:e1:a6:f5:7c:6b:54:4c:5b:39:42:ee:9f:e4:cd:
87:b4:36:55:65:a6:25:fd:6b:02:94:d3:8b:a4:64:98:00:87:
40:d0:30:32:ca:24:6f:a7:60:7c:09:60:ac:a3:59:21:af:75:
3b:7e:b3:4e:da:18:26:8a:da:c4:10:f6:2c:dc:ac:25:f9:d1:
88:ca:b2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:53:07 2025 by rpki-client