Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/J8Nt_YICrNU7bnXmg-hVTEaXJog.roa
File: J8Nt_YICrNU7bnXmg-hVTEaXJog.roa (raw, json)
Hash identifier: BgSOFWrkdkuCQTq68Qs1mZB7uImb0Qgk+04NL80Y1DM=
Subject key identifier: 27:C3:6D:FD:82:02:AC:D5:3B:6E:75:E6:83:E8:55:4C:46:97:26:88
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 019391A80D7B52C32A1168E238F146A9D01C
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/J8Nt_YICrNU7bnXmg-hVTEaXJog.roa
Signing time: Wed 04 Dec 2024 12:32:09 +0000
ROA not before: Wed 04 Dec 2024 12:32:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20857
IP address blocks: 5.61.248.0/21 maxlen: 24
31.14.96.0/22 maxlen: 24
37.34.56.0/21 maxlen: 24
37.97.128.0/17 maxlen: 24
77.72.144.0/21 maxlen: 24
80.69.64.0/19 maxlen: 24
84.247.8.0/21 maxlen: 24
85.10.128.0/19 maxlen: 24
86.105.244.0/22 maxlen: 24
87.253.128.0/19 maxlen: 24
89.41.168.0/22 maxlen: 24
91.142.254.0/23 maxlen: 23
93.119.0.0/20 maxlen: 24
95.170.64.0/19 maxlen: 24
141.138.136.0/21 maxlen: 24
149.210.128.0/17 maxlen: 24
185.10.48.0/22 maxlen: 24
185.108.112.0/22 maxlen: 24
188.240.52.0/22 maxlen: 22
188.241.148.0/22 maxlen: 22
195.8.195.0/24 maxlen: 24
195.135.195.0/24 maxlen: 24
2a01:7c8::/32 maxlen: 32
2a01:7c8:7000::/36 maxlen: 36
2a01:7c8:d000::/36 maxlen: 36
2a01:7c8:e000::/36 maxlen: 36
2a01:7860::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:91:a8:0d:7b:52:c3:2a:11:68:e2:38:f1:46:a9:d0:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Dec 4 12:32:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27c36dfd8202acd53b6e75e683e8554c46972688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b4:f3:1a:31:2d:0c:10:9b:48:a9:a3:7a:72:
22:86:69:84:18:8d:95:2c:6a:c9:90:6e:70:89:89:
b9:38:79:ef:31:50:53:07:cf:b4:12:34:0f:50:20:
3a:a6:fd:bf:12:2f:18:9e:08:bc:34:f3:f0:42:13:
89:4c:42:10:76:12:6d:65:6d:36:21:42:e5:e3:d1:
bd:4a:4f:6e:38:e7:a3:31:90:14:1e:2b:1c:8a:7e:
3a:e6:c1:8c:58:1a:44:65:98:9c:83:a2:bc:37:2c:
35:30:a6:3c:45:e2:78:3a:06:36:4d:f4:e2:ed:03:
27:cf:47:38:48:bf:8f:0e:c1:9c:91:f2:fd:5f:c6:
00:cc:a8:e1:5d:32:66:4b:85:05:ea:86:7a:7a:fa:
ba:be:de:94:b6:37:c0:2e:11:25:b9:4c:f4:ce:db:
12:84:43:c8:50:f8:20:f8:38:af:4f:7d:70:85:7e:
ec:c6:74:17:79:d1:7a:c4:f8:42:d9:83:14:06:bc:
e8:42:01:ad:bc:46:35:34:4e:b6:92:48:e7:c2:73:
30:f6:d5:03:55:c3:c7:08:7c:5a:36:32:70:35:be:
eb:ca:7c:80:b2:34:ca:6f:65:57:31:ad:8d:43:a1:
a3:b8:70:ea:a5:7c:06:6e:50:9f:19:79:9c:55:cd:
15:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C3:6D:FD:82:02:AC:D5:3B:6E:75:E6:83:E8:55:4C:46:97:26:88
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/J8Nt_YICrNU7bnXmg-hVTEaXJog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.248.0/21
31.14.96.0/22
37.34.56.0/21
37.97.128.0/17
77.72.144.0/21
80.69.64.0/19
84.247.8.0/21
85.10.128.0/19
86.105.244.0/22
87.253.128.0/19
89.41.168.0/22
91.142.254.0/23
93.119.0.0/20
95.170.64.0/19
141.138.136.0/21
149.210.128.0/17
185.10.48.0/22
185.108.112.0/22
188.240.52.0/22
188.241.148.0/22
195.8.195.0/24
195.135.195.0/24
IPv6:
2a01:7c8::/32
2a01:7860::/32
Signature Algorithm: sha256WithRSAEncryption
88:95:23:3c:b9:5b:8f:a3:66:74:79:78:67:d3:78:5d:6b:e7:
e2:31:b8:10:4d:f6:d7:92:4b:35:41:a8:54:36:06:f1:20:51:
d9:b6:33:c9:c8:98:e9:92:76:51:ec:d9:f6:21:89:35:02:7c:
3c:ed:1a:dd:83:62:e6:4c:d5:b6:7c:62:c9:39:de:8c:d3:3c:
48:c1:5b:ce:3f:4d:d4:93:03:8e:d5:3c:fb:a6:36:80:c6:8d:
1f:69:1e:66:a8:93:40:ef:62:bf:28:79:fa:72:b4:9e:06:02:
ef:f9:83:88:e3:19:a6:73:ad:b1:6a:61:57:b0:70:5c:60:e4:
e6:bd:47:72:6f:ff:28:5d:ad:f2:a1:65:f5:b3:58:90:28:47:
9c:37:36:cb:68:b2:ac:b1:44:e3:9d:ef:55:32:66:53:9c:44:
58:45:a5:f9:a2:3d:6b:99:4e:36:58:51:cf:7d:d8:1d:74:b7:
4b:41:46:c9:40:9e:85:5e:75:91:c6:b5:d7:d9:5f:5b:c9:1c:
f3:94:23:e6:28:5b:25:7d:bb:b6:b7:eb:8a:b8:9e:d5:7b:1f:
5f:6c:d2:08:5d:c1:02:c8:0b:48:26:9d:99:6f:48:62:a0:e2:
c3:64:de:8f:76:23:5d:24:fc:15:e5:bd:8d:53:82:c4:6d:2d:
ee:b6:9c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:55:51 2025 by rpki-client