Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/JfppqZEnWGYgiukK-nhDhAOt_JU.roa
File: JfppqZEnWGYgiukK-nhDhAOt_JU.roa (raw, json)
Hash identifier: yUCEvcmt/9w8IgfCzAVIZAXtOwTgG5xq12RCUPRTlKc=
Subject key identifier: 25:FA:69:A9:91:27:58:66:20:8A:E9:0A:FA:78:43:84:03:AD:FC:95
Certificate issuer: /CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Certificate serial: 018D2D73AB67EA8136042454F7A21B3C5CB1
Authority key identifier: 2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/JfppqZEnWGYgiukK-nhDhAOt_JU.roa
Signing time: Sun 21 Jan 2024 19:16:11 +0000
ROA not before: Sun 21 Jan 2024 19:16:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12722
IP address blocks: 91.188.220.0/24 maxlen: 24
193.201.114.0/24 maxlen: 24
195.225.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:2d:73:ab:67:ea:81:36:04:24:54:f7:a2:1b:3c:5c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Validity
Not Before: Jan 21 19:16:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25fa69a991275866208ae90afa78438403adfc95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cd:db:73:69:19:cb:6a:53:b6:f9:08:5b:e9:
47:b9:7d:9b:ee:db:85:2c:63:0e:b1:ff:f3:92:42:
48:de:a9:4c:b7:7f:a9:ba:0b:20:2a:5d:b9:80:6c:
23:bf:ef:d3:2b:3f:fc:76:63:12:74:dd:96:28:20:
dd:ee:11:d6:6b:fa:35:10:a5:2e:40:77:4c:c1:5c:
cf:eb:d5:17:0e:44:6a:16:4a:30:70:98:84:a1:96:
70:cd:df:b5:fe:c8:75:84:69:07:48:51:f0:e2:d6:
c2:b2:1f:8f:e2:bd:7d:fd:7e:a4:40:b1:e2:45:75:
f6:e7:1f:ad:96:2b:0a:96:02:63:a2:ed:a9:ff:1f:
18:8b:b9:ef:5c:d4:39:6b:a9:8c:2b:e2:f9:e2:6c:
48:b6:32:4e:d8:c1:1b:86:16:52:af:88:c1:61:af:
ab:d7:54:a1:5b:aa:ac:b7:e2:1f:b6:64:89:05:ee:
e5:e3:9e:00:e8:93:b6:ed:00:05:a8:8e:8d:71:f5:
a2:54:3f:ea:45:92:1d:20:35:b9:a3:36:29:7e:da:
1c:c2:3a:90:93:96:15:f6:22:c3:62:7e:cd:f0:c1:
a1:b4:9c:c7:a6:90:2f:c6:45:f2:46:8a:e4:bd:2b:
0c:54:3e:6b:d4:ef:bb:58:ee:53:28:23:9e:5f:bd:
de:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FA:69:A9:91:27:58:66:20:8A:E9:0A:FA:78:43:84:03:AD:FC:95
X509v3 Authority Key Identifier:
keyid:2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/JfppqZEnWGYgiukK-nhDhAOt_JU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.220.0/24
193.201.114.0/24
195.225.96.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:c8:cb:cf:47:60:85:f0:53:55:4b:cd:22:c5:e8:45:5a:0a:
bd:eb:bd:de:39:a6:eb:78:68:54:11:b8:b7:1f:94:d7:3b:ab:
99:ad:79:0e:61:70:c1:29:c1:61:ca:44:d6:37:ee:ea:18:52:
65:6b:85:3e:bf:9f:42:70:b1:3c:06:24:a7:b9:9a:6c:50:ad:
1d:31:8b:79:5c:72:80:52:79:4c:01:2e:0e:bc:2c:bb:ae:5b:
95:c7:20:4a:30:e8:89:b6:08:bc:46:d8:e6:7f:6c:b7:80:9a:
4d:1f:1d:b6:8c:a4:52:95:fa:cc:dc:5c:dd:8a:2c:3b:11:c0:
ba:72:24:cd:ad:1e:ce:fa:77:a4:8c:f1:cf:37:d4:95:1e:29:
05:57:8c:e1:4d:78:2e:48:c4:51:38:ec:54:91:de:f4:35:f8:
eb:24:99:5f:dc:e0:0c:39:bc:1a:a8:40:5b:fc:e1:4f:0f:71:
8e:88:7a:b8:1c:de:39:1b:fe:c8:53:66:9d:28:f8:3f:03:01:
67:ac:1c:81:b7:90:87:e3:a9:64:09:7d:a8:2d:0d:65:a5:17:
2b:06:7e:17:af:aa:2f:ac:df:64:52:ad:4b:87:5e:e5:17:44:
fd:ae:c2:25:26:ff:97:e6:be:03:b7:96:49:a0:2c:53:8e:6f:
e1:71:86:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:22:59 2025 by rpki-client