Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/JZcVe3cFls8SbESuoloaN70hHX0.roa
File: JZcVe3cFls8SbESuoloaN70hHX0.roa (raw, json)
Hash identifier: LEuz+f4qeeGJAE72qVnItdWS+tvD72veiVrYeUzcKPo=
Subject key identifier: 25:97:15:7B:77:05:96:CF:12:6C:44:AE:A2:5A:1A:37:BD:21:1D:7D
Certificate issuer: /CN=6085397f26a044caef6a6b669287331aa4d68645
Certificate serial: 03302273
Authority key identifier: 60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/JZcVe3cFls8SbESuoloaN70hHX0.roa
Signing time: Sat 01 Jan 2022 05:03:10 +0000
ROA not before: Sat 01 Jan 2022 05:03:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 36.255.94.0/23 maxlen: 23
185.130.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53486195 (0x3302273)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6085397f26a044caef6a6b669287331aa4d68645
Validity
Not Before: Jan 1 05:03:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2597157b770596cf126c44aea25a1a37bd211d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fb:f5:16:28:b8:62:04:01:10:51:ab:b8:4d:
8e:61:0a:b0:81:66:1b:21:16:1d:18:74:97:6f:03:
73:05:7f:bf:cb:a3:3b:7d:85:57:83:b9:80:64:a9:
bb:08:fc:66:fa:91:df:b3:1a:8b:64:0f:f2:2a:b4:
36:5f:13:50:ec:26:f7:31:74:f7:ab:95:44:dc:48:
a2:64:ff:25:7c:f6:6a:21:16:1d:b4:e6:0a:9e:9a:
50:98:bd:3d:50:5e:5f:f1:f4:bc:da:aa:b2:a2:31:
2f:fd:a1:f7:39:e0:e4:0e:cd:3f:77:5e:c1:f0:65:
d5:c3:d5:6d:e2:51:40:19:ac:ad:a9:54:5c:75:86:
df:42:d9:39:42:8d:58:ed:10:37:12:6c:17:a5:03:
66:5e:93:46:cf:4d:52:b2:73:74:b7:f9:86:bb:ca:
50:6d:e6:fc:dd:45:93:11:09:d0:93:91:e7:d2:07:
30:fc:bd:1c:38:41:d0:a6:86:d6:fb:74:b5:a4:ac:
5b:1d:06:08:1b:ed:71:a4:b7:05:56:f0:8d:52:4c:
7a:a8:71:88:b4:6e:0b:af:02:cd:d5:94:8a:39:3a:
e4:c0:42:a7:87:a1:f7:5d:72:89:8d:a0:f4:4a:c1:
2e:ad:e8:72:56:44:c9:d1:76:e2:84:b4:25:ec:be:
4b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:97:15:7B:77:05:96:CF:12:6C:44:AE:A2:5A:1A:37:BD:21:1D:7D
X509v3 Authority Key Identifier:
keyid:60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/JZcVe3cFls8SbESuoloaN70hHX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/YIU5fyagRMrvamtmkoczGqTWhkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.255.94.0/23
185.130.60.0/22
Signature Algorithm: sha256WithRSAEncryption
77:5a:b7:78:0c:41:ff:58:33:39:76:29:9b:1d:c6:9d:1f:6c:
08:93:55:cc:53:20:18:ec:1b:54:c3:14:bc:d9:b2:73:0b:c5:
8a:9e:68:42:50:c4:c6:64:d6:6b:eb:b3:7d:8b:4d:36:5b:18:
0a:e2:91:31:f2:01:2f:b4:35:92:fa:81:d6:a6:3e:a9:c0:7b:
a2:b9:d0:f4:8e:ef:6e:95:7c:d0:66:39:a9:f5:72:1e:35:54:
65:c0:54:f8:a0:ec:a5:99:22:f7:2e:7e:36:15:49:60:9f:1e:
7f:27:06:84:2e:f3:ef:b8:c6:5f:2f:26:72:08:fd:c1:84:f6:
ec:01:d0:01:b7:af:8f:c5:ae:b6:6e:43:bd:0f:8a:05:1d:93:
db:21:df:56:58:fc:24:9e:61:c3:75:0f:9d:37:3b:2a:d6:79:
a4:19:43:45:9e:e8:fe:97:6a:2f:d3:f0:70:4c:bf:81:36:07:
84:3e:4c:6c:f1:6d:0f:fb:30:2e:31:14:1b:fc:86:91:ec:6a:
ff:39:e4:b3:85:3d:7a:da:eb:76:59:18:63:13:ee:95:18:ba:
50:79:9f:78:bd:cc:bb:48:b2:b7:3b:77:6b:4f:07:59:76:32:
89:f7:66:b4:a2:02:62:99:46:16:2f:c3:a3:5a:15:5c:c9:09:
cc:e0:23:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:33 2025 by rpki-client