Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/jzkXg0WrTm3EEZtXZhMl74QFXyc.roa
File: jzkXg0WrTm3EEZtXZhMl74QFXyc.roa (raw, json)
Hash identifier: Z8PmykVpIOP72rfxJZdsYkDnSOICzhOx+wfYUdDINQk=
Subject key identifier: 8F:39:17:83:45:AB:4E:6D:C4:11:9B:57:66:13:25:EF:84:05:5F:27
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0195AD72B229ACCC38C5E67D830EFA679EF9
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/jzkXg0WrTm3EEZtXZhMl74QFXyc.roa
Signing time: Wed 19 Mar 2025 08:08:49 +0000
ROA not before: Wed 19 Mar 2025 08:08:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 62.171.230.0/24 maxlen: 24
194.238.78.0/24 maxlen: 24
194.238.79.0/24 maxlen: 24
213.18.220.0/22 maxlen: 24
213.18.245.0/24 maxlen: 24
217.177.0.0/21 maxlen: 24
217.177.32.0/24 maxlen: 24
217.179.56.0/22 maxlen: 24
217.179.72.0/22 maxlen: 24
217.179.124.0/22 maxlen: 24
217.179.220.0/22 maxlen: 24
217.180.12.0/24 maxlen: 24
217.180.13.0/24 maxlen: 24
217.180.14.0/24 maxlen: 24
217.180.20.0/24 maxlen: 24
217.180.22.0/23 maxlen: 24
217.180.38.0/24 maxlen: 24
217.180.45.0/24 maxlen: 24
217.180.46.0/24 maxlen: 24
217.180.59.0/24 maxlen: 24
217.181.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ad:72:b2:29:ac:cc:38:c5:e6:7d:83:0e:fa:67:9e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Mar 19 08:08:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f39178345ab4e6dc4119b57661325ef84055f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b0:a5:72:f2:6b:b8:80:fa:aa:70:91:59:65:
63:85:75:a8:ea:1a:98:71:18:39:84:0d:86:80:ab:
1b:8a:4d:dc:8c:d2:06:cb:4d:1f:32:4c:a9:85:1d:
40:a7:92:d9:fc:38:41:3e:71:d5:93:07:b0:38:52:
58:3c:0d:d5:47:07:54:1b:d7:bc:aa:a4:5b:20:f5:
d0:65:b7:d8:4e:5a:af:72:df:0a:94:4f:c1:10:dc:
44:ab:55:36:e8:bf:da:64:61:d3:73:36:c4:f8:87:
cb:ac:5a:44:6b:da:e3:6e:0b:b1:94:66:87:0e:aa:
3b:b2:75:4c:de:d3:96:8f:75:09:1e:28:44:76:b7:
89:95:5e:05:9d:d6:8f:b6:b9:79:34:1d:ba:b7:d2:
cf:ca:c0:33:11:c4:8d:f1:2b:57:88:3e:e2:8a:74:
bd:08:db:c7:07:51:62:68:8b:ce:8f:36:7d:24:45:
6d:54:e6:69:0f:bd:3b:64:cf:24:b5:35:1b:87:f5:
0b:2b:68:f7:86:e5:83:90:69:38:c7:64:2f:ca:b6:
a7:f4:a2:dd:1a:9f:7a:6b:3d:a6:81:3d:99:bf:36:
25:a4:4a:0b:5d:e6:09:37:0b:96:90:d6:88:0b:d7:
21:f3:f8:97:27:f1:c9:ed:8a:4e:03:d3:60:8e:13:
e8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:39:17:83:45:AB:4E:6D:C4:11:9B:57:66:13:25:EF:84:05:5F:27
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/jzkXg0WrTm3EEZtXZhMl74QFXyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.171.230.0/24
194.238.78.0/23
213.18.220.0/22
213.18.245.0/24
217.177.0.0/21
217.177.32.0/24
217.179.56.0/22
217.179.72.0/22
217.179.124.0/22
217.179.220.0/22
217.180.12.0-217.180.14.255
217.180.20.0/24
217.180.22.0/23
217.180.38.0/24
217.180.45.0-217.180.46.255
217.180.59.0/24
217.181.80.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:87:e2:10:0f:d7:ee:3e:90:f0:f6:c5:72:34:08:27:02:8d:
11:24:f9:82:66:f5:05:58:c2:bd:f6:f7:34:7a:c2:bc:ea:1f:
64:7f:22:52:f5:86:14:88:4e:e5:7a:e3:a5:8a:d6:89:f1:b7:
85:ea:21:a8:16:97:c9:51:a7:82:ae:d4:6a:bf:7b:63:9b:1d:
c5:48:de:f2:50:47:72:4b:fe:83:28:90:77:8b:8f:92:99:7c:
c1:d1:c3:88:1c:5b:1e:6f:fa:9e:2f:25:cc:d1:98:2f:ec:f3:
82:06:08:ea:28:77:27:35:0b:b5:b1:55:42:b1:09:09:f2:82:
0c:59:c3:31:b4:79:72:0a:e3:e7:08:20:1a:25:e1:e6:22:39:
77:b7:97:a2:43:c4:f2:28:16:50:8e:86:23:e9:f2:fa:e2:08:
fd:a6:d1:99:e1:e8:55:d8:72:f6:6c:62:e2:3a:46:66:75:36:
5c:0d:b0:d0:2d:e8:53:8f:d7:3e:48:e3:95:25:db:ed:04:15:
73:35:11:e4:78:74:ce:87:b3:8f:9b:b9:d4:98:1e:42:d2:6d:
38:a9:5f:51:35:5c:4b:11:7d:22:91:57:d6:1a:bf:ea:91:27:
80:ab:fa:a7:da:83:61:f0:fa:5d:13:ff:7a:1b:82:2a:8f:82:
c4:cb:26:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:33 2025 by rpki-client