Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/jRJwX_ZKuADln4pES5WgoVS__88.roa
File: jRJwX_ZKuADln4pES5WgoVS__88.roa (raw, json)
Hash identifier: K3aJVjlqhUCHgSM5vEOmY3eFV+XqReoMzhLc+qeCd0E=
Subject key identifier: 8D:12:70:5F:F6:4A:B8:00:E5:9F:8A:44:4B:95:A0:A1:54:BF:FF:CF
Certificate issuer: /CN=7d6340e37ccfc12aebaac2a5f33d45ea0a887a8a
Certificate serial: 0194258EED8065546CD16FA678886310FAD3
Authority key identifier: 7D:63:40:E3:7C:CF:C1:2A:EB:AA:C2:A5:F3:3D:45:EA:0A:88:7A:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWNA43zPwSrrqsKl8z1F6gqIeoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/jRJwX_ZKuADln4pES5WgoVS__88.roa
Signing time: Thu 02 Jan 2025 05:48:31 +0000
ROA not before: Thu 02 Jan 2025 05:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34803
IP address blocks: 85.115.128.0/19 maxlen: 24
185.104.220.0/22 maxlen: 24
195.166.192.0/19 maxlen: 24
2a02:638::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:ed:80:65:54:6c:d1:6f:a6:78:88:63:10:fa:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d6340e37ccfc12aebaac2a5f33d45ea0a887a8a
Validity
Not Before: Jan 2 05:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d12705ff64ab800e59f8a444b95a0a154bfffcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f5:fa:05:ef:3d:cc:33:9d:24:ba:1a:69:ae:
43:0d:dd:30:11:0d:7a:c1:bf:4d:57:47:a1:dd:34:
b2:2d:3b:f2:99:a7:62:0f:66:88:5d:65:70:11:d6:
e0:05:72:20:ee:94:a4:36:e4:eb:b1:a7:79:a3:30:
83:cb:7d:51:5e:57:8f:71:4d:35:3e:fd:14:00:40:
c3:30:06:e3:34:ea:9a:75:7a:00:7a:c8:66:73:13:
ab:04:48:c4:71:0c:1d:a7:f2:d1:af:95:bc:84:64:
80:f6:ef:94:53:c9:bd:16:5e:ec:94:91:0c:4a:d7:
b9:ed:21:e4:d1:3c:54:c2:d9:b3:50:b9:6b:c0:0f:
ff:c8:c2:21:9d:89:58:2a:fc:b8:f1:49:10:da:a6:
28:81:8b:6e:af:73:3e:f5:ff:2d:a0:97:2e:4c:39:
37:28:38:2b:81:85:0a:d9:a2:bb:ef:b9:a9:b3:e9:
7e:c9:6b:c5:90:05:14:5c:8e:a4:e2:d6:1a:cb:e1:
0f:60:16:d9:34:65:67:22:85:e0:4a:5d:66:ae:63:
82:cd:d9:71:9e:44:fb:c8:a6:9b:d3:4d:11:98:2d:
88:b0:41:46:97:f5:f3:f2:d1:ae:83:8f:13:d8:c5:
e2:e0:4c:5f:4a:d2:37:a5:a4:bc:30:d2:a4:ee:b8:
6d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:12:70:5F:F6:4A:B8:00:E5:9F:8A:44:4B:95:A0:A1:54:BF:FF:CF
X509v3 Authority Key Identifier:
keyid:7D:63:40:E3:7C:CF:C1:2A:EB:AA:C2:A5:F3:3D:45:EA:0A:88:7A:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWNA43zPwSrrqsKl8z1F6gqIeoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/jRJwX_ZKuADln4pES5WgoVS__88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.128.0/19
185.104.220.0/22
195.166.192.0/19
IPv6:
2a02:638::/32
Signature Algorithm: sha256WithRSAEncryption
57:94:ac:bd:cd:2d:6c:ef:08:c6:62:1d:ba:01:9b:dd:52:04:
10:4f:ae:9c:5f:d6:cd:c0:2a:e1:c2:76:84:58:7b:92:99:b1:
aa:22:65:74:bd:54:ef:93:a5:02:9d:b8:39:d4:b8:c1:55:6f:
2c:66:d9:2d:2c:7d:60:e0:18:5d:31:c1:92:e1:94:6f:12:08:
05:69:ee:ee:15:4e:b8:55:33:0f:ea:ad:1c:7a:64:f5:dc:a0:
f1:ed:cf:fe:b0:76:58:5a:85:72:4b:f4:61:f9:f6:61:a5:19:
24:a4:73:56:ad:86:a9:0b:0f:b2:5e:c5:38:af:c4:4c:86:d8:
21:de:8a:75:8d:fd:27:53:32:21:b9:c5:02:19:1d:78:83:39:
b3:83:0f:9b:fa:ae:fa:d8:0d:31:98:23:51:be:82:6e:b2:50:
01:7a:84:e3:a9:e0:1a:dc:4c:08:18:85:70:e9:5c:81:f8:5a:
02:1d:71:ff:d7:27:d8:14:94:68:f7:9b:14:11:87:e8:43:0e:
62:d5:0f:c3:4c:e3:a7:b6:14:f1:b2:ab:b6:e8:a0:da:16:9e:
4b:af:63:f6:f2:cf:80:92:01:53:1c:eb:b3:eb:b2:5f:8e:04:
34:4c:ba:fe:c8:2d:6c:63:8f:1b:b7:09:52:92:dd:da:c6:78:
cb:41:87:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:35 2025 by rpki-client