Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/jtrE-ZquFgpFsUyQd2ruDZJ4V1Y.roa
File: jtrE-ZquFgpFsUyQd2ruDZJ4V1Y.roa (raw, json)
Hash identifier: DLSZmdArA6I562nrgAPaSvfYMqezrmvR6p+K4KjZ8d8=
Subject key identifier: 8E:DA:C4:F9:9A:AE:16:0A:45:B1:4C:90:77:6A:EE:0D:92:78:57:56
Certificate issuer: /CN=aef1eefaa757d38eb104fa4cba4d962b72e52b52
Certificate serial: 019567E07BC153657E8622E6BAA803D57941
Authority key identifier: AE:F1:EE:FA:A7:57:D3:8E:B1:04:FA:4C:BA:4D:96:2B:72:E5:2B:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rvHu-qdX046xBPpMuk2WK3LlK1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/jtrE-ZquFgpFsUyQd2ruDZJ4V1Y.roa
Signing time: Wed 05 Mar 2025 19:55:19 +0000
ROA not before: Wed 05 Mar 2025 19:55:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29222
IP address blocks: 37.156.40.0/21 maxlen: 24
45.157.188.0/22 maxlen: 24
83.166.128.0/19 maxlen: 24
83.228.192.0/18 maxlen: 24
84.16.64.0/19 maxlen: 24
84.234.16.0/20 maxlen: 24
89.47.48.0/22 maxlen: 24
91.214.188.0/22 maxlen: 24
93.88.240.0/20 maxlen: 24
128.65.192.0/21 maxlen: 24
185.74.68.0/22 maxlen: 24
185.125.24.0/22 maxlen: 24
185.143.100.0/22 maxlen: 24
185.172.100.0/22 maxlen: 24
185.176.224.0/22 maxlen: 24
185.177.60.0/22 maxlen: 24
185.181.160.0/22 maxlen: 24
188.213.128.0/22 maxlen: 24
193.108.52.0/22 maxlen: 24
193.111.233.0/24 maxlen: 24
193.128.7.0/24 maxlen: 24
193.134.93.0/24 maxlen: 24
193.134.250.0/24 maxlen: 24
195.15.192.0/18 maxlen: 24
2001:1600::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:67:e0:7b:c1:53:65:7e:86:22:e6:ba:a8:03:d5:79:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aef1eefaa757d38eb104fa4cba4d962b72e52b52
Validity
Not Before: Mar 5 19:55:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8edac4f99aae160a45b14c90776aee0d92785756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c4:6b:87:2d:12:c8:7c:a8:bd:dd:eb:02:08:
e1:fc:e2:78:a4:af:a6:ee:96:9b:91:95:f1:e9:d9:
94:af:52:19:c0:bb:21:47:e7:48:74:13:2f:05:59:
bf:4a:8f:33:40:e9:f0:e0:1a:f1:47:ec:49:55:48:
e5:11:f9:fb:94:1d:bd:31:61:59:08:ec:31:1d:47:
b6:7c:94:ef:1c:c0:85:e5:a4:c3:69:9b:69:51:9c:
6c:c8:c5:c5:dc:ce:cc:d2:b1:cb:fa:14:ab:90:07:
f1:12:45:86:36:57:e4:c9:fc:f0:6c:be:ed:b6:ab:
b1:f3:44:48:32:40:fe:2d:44:bf:0a:fc:83:75:62:
b4:fd:82:1e:c4:e1:b3:17:00:1e:a6:09:96:e5:5c:
47:d8:8d:df:de:de:c6:2b:22:07:14:39:18:0b:4a:
0a:5b:c5:01:05:2e:b9:37:5a:60:19:f7:f1:03:51:
73:ba:48:5a:7a:f5:40:36:2d:49:71:b4:38:78:30:
70:37:71:48:d9:6c:2a:d5:fd:30:ee:18:c0:51:3b:
9f:65:a5:0e:9a:1b:29:50:ef:ed:8a:4b:0c:e2:ae:
aa:a6:44:12:2a:8e:17:57:92:75:7e:3e:96:ff:e0:
bb:0c:02:9e:82:e7:10:8a:4a:06:d7:26:b5:67:21:
cd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DA:C4:F9:9A:AE:16:0A:45:B1:4C:90:77:6A:EE:0D:92:78:57:56
X509v3 Authority Key Identifier:
keyid:AE:F1:EE:FA:A7:57:D3:8E:B1:04:FA:4C:BA:4D:96:2B:72:E5:2B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvHu-qdX046xBPpMuk2WK3LlK1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/jtrE-ZquFgpFsUyQd2ruDZJ4V1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.40.0/21
45.157.188.0/22
83.166.128.0/19
83.228.192.0/18
84.16.64.0/19
84.234.16.0/20
89.47.48.0/22
91.214.188.0/22
93.88.240.0/20
128.65.192.0/21
185.74.68.0/22
185.125.24.0/22
185.143.100.0/22
185.172.100.0/22
185.176.224.0/22
185.177.60.0/22
185.181.160.0/22
188.213.128.0/22
193.108.52.0/22
193.111.233.0/24
193.128.7.0/24
193.134.93.0/24
193.134.250.0/24
195.15.192.0/18
IPv6:
2001:1600::/29
Signature Algorithm: sha256WithRSAEncryption
5c:99:38:e7:27:9c:f2:66:08:dc:4e:00:08:67:17:3f:22:6f:
ae:01:8b:95:40:db:d5:98:36:20:00:1f:41:44:60:90:01:d5:
3b:34:22:a4:c9:b6:03:5f:eb:6b:e8:ab:99:e1:01:bc:b6:c7:
19:42:d2:73:2a:f7:77:44:da:e6:ad:22:42:0a:13:49:6c:26:
83:86:1b:af:48:98:38:3f:67:f2:0a:b1:1f:16:29:69:1e:b7:
14:b9:7e:d3:d4:10:56:ad:3c:9e:1c:ac:a9:70:f0:f2:a9:e6:
b6:7f:c0:0a:4f:54:59:75:f6:80:62:7b:e1:75:a1:7d:0f:82:
2e:27:4f:41:78:d3:c1:ec:94:3b:d6:70:6c:a6:d4:41:80:f2:
36:1f:4f:8a:65:8e:07:e2:e4:68:e6:99:8b:82:d9:1c:f6:ac:
5c:4f:ab:48:45:a5:57:8f:48:37:21:4e:b5:d7:32:28:94:a8:
f2:88:14:1f:8c:01:9d:2b:e8:63:34:fe:cd:ea:59:e1:11:73:
2f:66:9b:b0:1a:90:cd:6f:f1:f5:33:de:6a:d9:78:11:15:95:
07:10:23:72:23:37:24:52:59:45:84:f1:e7:bf:c6:fd:e6:a9:
aa:b0:ac:d0:17:5a:9f:50:c2:8e:52:30:6d:ef:e1:e2:21:05:
9e:61:4b:7c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:48:31 2025 by rpki-client