Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/JXD4YyeKM2DbSEsSMseYjT0o7Ww.roa
File: JXD4YyeKM2DbSEsSMseYjT0o7Ww.roa (raw, json)
Hash identifier: YAf2/29DjA3Na+Hgt1fQsq3jSQYLqFSkMb1fHAx4RUM=
Subject key identifier: 25:70:F8:63:27:8A:33:60:DB:48:4B:12:32:C7:98:8D:3D:28:ED:6C
Certificate issuer: /CN=afa51165aa5036acda11fee0020e34fcc439ede6
Certificate serial: 0194221F7B8966514CACF34165B1ED279387
Authority key identifier: AF:A5:11:65:AA:50:36:AC:DA:11:FE:E0:02:0E:34:FC:C4:39:ED:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/JXD4YyeKM2DbSEsSMseYjT0o7Ww.roa
Signing time: Wed 01 Jan 2025 13:47:55 +0000
ROA not before: Wed 01 Jan 2025 13:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25504
IP address blocks: 83.243.56.0/21 maxlen: 24
89.200.168.0/21 maxlen: 24
91.223.141.0/24 maxlen: 24
94.102.208.0/20 maxlen: 24
109.235.56.0/21 maxlen: 24
151.252.48.0/20 maxlen: 24
158.58.144.0/21 maxlen: 24
185.90.232.0/22 maxlen: 24
193.254.184.0/21 maxlen: 24
195.191.92.0/23 maxlen: 24
2001:67c:2394::/48 maxlen: 48
2a00:19e0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:7b:89:66:51:4c:ac:f3:41:65:b1:ed:27:93:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa51165aa5036acda11fee0020e34fcc439ede6
Validity
Not Before: Jan 1 13:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2570f863278a3360db484b1232c7988d3d28ed6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ef:b3:87:59:a6:7c:2f:23:88:d8:44:48:13:
81:7d:d1:8d:4e:15:83:1f:7b:24:52:b7:2b:9f:f2:
94:0a:57:bb:99:75:7a:19:4f:8f:1f:c6:ba:6a:da:
32:01:a7:c3:4b:53:51:4e:a9:15:a4:38:e6:3f:ee:
47:24:b4:f0:8e:57:e4:56:c1:64:af:f7:ab:b7:ae:
89:c4:c0:9b:65:49:4e:4e:55:28:51:4b:58:99:11:
8d:84:16:f9:e3:f1:15:07:7f:38:97:f4:e4:1a:51:
f9:3b:b1:ba:1b:ac:6c:a1:7d:6c:37:c4:c0:86:a2:
41:6b:bb:c4:21:be:09:1d:77:a5:23:24:aa:ef:d3:
b3:d4:91:a3:ca:f0:bc:c2:f0:07:b7:02:63:e9:91:
16:e8:59:7c:a2:57:f4:69:30:37:fa:29:a3:5e:e1:
e2:d3:5f:96:f8:b7:22:f6:3f:6b:57:44:84:68:27:
b6:d9:2b:5f:33:0d:b6:68:50:cd:9e:83:8d:6a:90:
c2:a3:32:17:f1:7b:2b:c3:be:da:04:09:95:34:b5:
e6:49:97:51:d0:c6:d5:53:85:b1:fe:08:7a:4a:5f:
02:5c:28:87:f7:2a:45:52:dd:0b:52:83:55:ac:c2:
a8:fb:c2:3c:af:d1:f1:91:fe:7a:0b:8e:e6:a2:06:
cf:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:70:F8:63:27:8A:33:60:DB:48:4B:12:32:C7:98:8D:3D:28:ED:6C
X509v3 Authority Key Identifier:
keyid:AF:A5:11:65:AA:50:36:AC:DA:11:FE:E0:02:0E:34:FC:C4:39:ED:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/JXD4YyeKM2DbSEsSMseYjT0o7Ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.243.56.0/21
89.200.168.0/21
91.223.141.0/24
94.102.208.0/20
109.235.56.0/21
151.252.48.0/20
158.58.144.0/21
185.90.232.0/22
193.254.184.0/21
195.191.92.0/23
IPv6:
2001:67c:2394::/48
2a00:19e0::/29
Signature Algorithm: sha256WithRSAEncryption
7e:3d:59:f5:a4:10:7d:b1:60:51:6f:9e:2c:01:83:e2:e8:4b:
41:ba:1d:8d:b3:09:f5:50:54:a4:e0:09:47:0c:8f:54:c2:fe:
cc:eb:3e:29:24:62:e6:3e:28:d7:76:4d:fc:bc:9c:bb:27:8b:
9a:3d:09:e7:a3:40:76:0c:f6:f7:3f:a4:b1:fd:1b:1c:68:a2:
fb:4f:df:08:ea:ed:b7:28:ff:29:5b:43:35:37:51:2a:01:b6:
f2:a5:b5:97:5b:8f:7c:55:4e:01:ed:46:1a:cc:e1:5d:04:80:
2a:bc:99:b8:85:24:5a:69:9e:20:96:ea:77:27:aa:34:b9:d3:
a4:aa:50:32:eb:29:a4:9a:ae:2d:8b:e1:c3:29:73:67:27:cb:
67:33:bf:d6:9e:7f:4c:c9:05:55:61:9f:13:81:10:69:f5:4d:
81:f7:35:40:32:af:b0:b7:62:5a:89:a4:55:a4:0a:ba:31:b3:
45:6e:b1:17:e8:43:81:e1:b8:da:a2:8b:33:38:c3:3b:f9:a2:
a3:9e:fe:6a:73:9f:49:0b:f4:72:db:a1:22:e4:72:f1:7b:66:
3a:96:15:68:a4:6b:5c:33:fe:10:fe:5b:cf:28:6a:4b:db:fc:
b1:26:6f:12:9c:d1:c9:72:91:44:31:28:e0:51:57:a5:92:3b:
55:0f:89:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:10:03 2025 by rpki-client