Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/jKCXZMQfAljfOZB8IVxNE_SVnTA.roa
File: jKCXZMQfAljfOZB8IVxNE_SVnTA.roa (raw, json)
Hash identifier: EgcRcS67ygjsN/XyKcbx6vjiVC4lT1M+KlGVZuGkbys=
Subject key identifier: 8C:A0:97:64:C4:1F:02:58:DF:39:90:7C:21:5C:4D:13:F4:95:9D:30
Certificate issuer: /CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
Certificate serial: 09E6647B
Authority key identifier: 77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/jKCXZMQfAljfOZB8IVxNE_SVnTA.roa
Signing time: Sat 01 Jan 2022 04:56:13 +0000
ROA not before: Sat 01 Jan 2022 04:56:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201971
IP address blocks: 217.145.236.0/24 maxlen: 24
217.145.238.0/24 maxlen: 24
217.145.239.0/24 maxlen: 24
139.28.204.0/24 maxlen: 24
139.28.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166093947 (0x9e6647b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
Validity
Not Before: Jan 1 04:56:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ca09764c41f0258df39907c215c4d13f4959d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:41:c6:7b:2f:72:5e:56:3a:e1:88:df:61:09:
aa:4c:4d:3b:21:af:27:bb:8d:15:df:2c:22:28:d5:
48:8e:2b:7c:3e:39:0c:1b:b8:66:b1:2d:c6:7a:c4:
e0:ce:3f:b6:bf:26:ab:fe:89:24:34:51:a3:d2:07:
9e:43:37:40:a8:fc:cc:5c:aa:5f:93:e9:b0:2e:45:
8f:69:99:00:c8:58:0d:be:5e:73:59:f3:d0:86:54:
a9:c9:a4:ea:e3:b9:07:83:0f:63:24:e9:5c:5f:7a:
54:79:fd:ef:00:95:ad:a6:0b:65:61:bf:70:37:32:
6d:37:9d:46:88:89:b4:e1:79:3d:48:eb:fd:bc:27:
6b:59:67:a4:59:1d:f9:f4:75:80:da:52:38:fa:e2:
e5:cd:ef:cb:4f:37:aa:0c:27:c8:ec:82:71:9c:70:
1d:4f:47:89:78:f0:a9:2b:90:79:45:39:c5:67:4a:
2d:d3:ba:a3:78:64:5a:60:48:59:db:f4:d8:a2:f0:
a9:c2:d1:64:0c:82:a6:f9:fb:88:68:49:d3:38:53:
ad:a8:30:47:5f:27:e6:6a:33:2f:c3:bd:42:fa:63:
6e:2f:69:04:45:b4:7a:62:b6:00:67:45:a1:92:0d:
fd:38:66:df:a7:cd:06:f9:1b:0a:4e:b6:10:5a:10:
1e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A0:97:64:C4:1F:02:58:DF:39:90:7C:21:5C:4D:13:F4:95:9D:30
X509v3 Authority Key Identifier:
keyid:77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/jKCXZMQfAljfOZB8IVxNE_SVnTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/d8jYu_BXl6daScXXD1lx7N7G3ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.204.0/24
139.28.207.0/24
217.145.236.0/24
217.145.238.0/23
Signature Algorithm: sha256WithRSAEncryption
43:71:e5:75:86:18:89:b1:6f:b2:ed:ba:9e:28:50:90:29:e4:
bf:94:a4:6e:90:d1:ea:86:86:d7:fb:ae:72:03:aa:bb:29:b7:
6d:e9:b6:61:a2:78:28:9f:12:4e:24:76:f3:c1:36:b2:b0:9a:
e9:41:e7:9c:b6:f9:df:41:84:48:50:bf:6f:6c:8e:7b:f2:66:
0e:e1:0f:4c:2e:42:b1:03:77:67:3f:f2:b2:da:a0:ee:46:ad:
42:b8:51:18:83:2b:38:15:a3:e5:21:ac:08:c2:f7:81:d3:65:
3e:17:12:43:7a:ed:6a:77:dc:ec:a3:b1:d5:b5:9a:e2:99:ea:
fe:be:cc:24:3e:3a:10:bf:70:41:cf:77:73:6e:0b:73:3c:9f:
7f:32:a2:8e:87:da:17:b5:ed:99:97:00:41:f3:41:aa:86:77:
20:45:c1:b7:24:ce:bb:89:f4:ac:e9:bf:81:06:80:6a:80:b6:
dc:43:c6:cb:0f:43:32:7c:fc:47:02:17:56:93:1b:55:4f:31:
34:9b:02:ea:1a:fd:44:7a:0e:22:38:dc:24:6c:ff:74:ac:9c:
e1:89:01:70:1e:19:dd:27:18:66:2d:a9:c7:48:79:a3:50:c6:
f5:9b:93:44:b9:6b:61:39:d3:f8:9a:bb:f4:44:8c:8e:15:bf:
67:c4:dc:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:05 2025 by rpki-client