Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/8JFEQ15V1WkFsHsLCpH1WN9k3hk.roa
File: 8JFEQ15V1WkFsHsLCpH1WN9k3hk.roa (raw, json)
Hash identifier: S3+H2pUWxDExgmiMXa3i+Ddat9VWGJWFmy60af4zAEw=
Subject key identifier: F0:91:44:43:5E:55:D5:69:05:B0:7B:0B:0A:91:F5:58:DF:64:DE:19
Certificate issuer: /CN=3618be04417a6bcb9f33942a631518be533ffaf4
Certificate serial: 019424B3CB72D519E7CE0552D96A201F77D3
Authority key identifier: 36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/8JFEQ15V1WkFsHsLCpH1WN9k3hk.roa
Signing time: Thu 02 Jan 2025 01:49:10 +0000
ROA not before: Thu 02 Jan 2025 01:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 83.137.24.0/21 maxlen: 21
109.106.32.0/21 maxlen: 21
109.106.40.0/22 maxlen: 22
185.93.216.0/22 maxlen: 22
185.127.172.0/22 maxlen: 22
194.63.148.0/22 maxlen: 22
195.60.192.0/22 maxlen: 22
212.120.32.0/19 maxlen: 24
213.213.160.0/19 maxlen: 19
2a00:5480::/29 maxlen: 29
2a02:ab0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:cb:72:d5:19:e7:ce:05:52:d9:6a:20:1f:77:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3618be04417a6bcb9f33942a631518be533ffaf4
Validity
Not Before: Jan 2 01:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f09144435e55d56905b07b0b0a91f558df64de19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d1:5b:3a:9c:be:c3:4a:3c:1d:cd:ea:99:18:
94:42:d0:01:36:0c:8a:3b:71:0f:d0:4d:21:80:07:
02:1b:f7:98:8d:c8:1e:3f:0a:81:26:d1:34:43:02:
9e:11:eb:35:de:55:5f:25:f9:f8:91:4e:00:0f:63:
4e:97:52:6d:d4:da:17:0c:26:57:bc:8b:42:97:ae:
68:90:25:e5:3f:45:80:62:39:8b:51:06:ca:15:e3:
cb:e6:51:eb:c5:d3:db:8c:8b:fa:e3:ad:37:9f:dd:
f8:78:3d:cf:b0:f4:7f:77:2e:80:95:d0:b0:b1:89:
b8:d8:7b:54:d7:89:ee:48:71:e1:df:f1:a3:40:16:
9c:8d:88:62:d7:06:4b:1c:52:e6:a4:fe:65:d7:8c:
42:d3:ed:5e:2d:12:a3:23:7f:2c:ee:02:19:a2:6f:
0d:ae:a8:59:99:15:78:52:d1:83:db:08:1a:fe:9f:
ac:8f:05:f7:e7:06:1f:f9:9e:31:0d:51:b5:3f:76:
6f:8e:df:4b:a3:90:70:20:b1:27:ed:19:b7:12:e2:
d9:22:b0:fb:10:56:6d:38:3a:f7:fc:4a:e9:57:06:
d8:3a:d0:71:70:68:42:52:db:4d:1b:08:c1:dc:54:
b1:92:63:64:13:3c:67:ee:2d:a6:31:ad:ae:1c:f3:
1a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:91:44:43:5E:55:D5:69:05:B0:7B:0B:0A:91:F5:58:DF:64:DE:19
X509v3 Authority Key Identifier:
keyid:36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/8JFEQ15V1WkFsHsLCpH1WN9k3hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.24.0/21
109.106.32.0-109.106.43.255
185.93.216.0/22
185.127.172.0/22
194.63.148.0/22
195.60.192.0/22
212.120.32.0/19
213.213.160.0/19
IPv6:
2a00:5480::/29
2a02:ab0::/29
Signature Algorithm: sha256WithRSAEncryption
54:8a:c0:ff:04:c2:58:94:83:3f:c1:2b:dc:f7:96:86:ad:3b:
ee:17:3a:d3:6d:07:fb:10:97:4e:db:27:b9:a3:a0:3c:e7:29:
df:7c:07:47:e6:18:a8:c1:ea:b6:fa:31:9f:4d:fe:f9:47:df:
e9:d5:ad:4d:3a:23:3b:45:7a:c6:bb:e3:9c:56:f7:e0:c1:06:
77:e1:89:f7:8c:e3:d4:47:2a:99:88:16:de:d0:9c:be:70:78:
be:57:18:95:11:a8:0c:08:13:11:b6:6c:e2:d7:d6:08:77:c8:
9d:8c:64:84:16:c4:ef:32:de:9a:fe:5e:8a:7f:7f:1b:cd:d0:
16:de:a3:94:73:27:6b:2c:7a:23:8b:75:e7:87:de:03:9d:8e:
69:af:09:c7:94:3e:c2:b2:55:0a:a7:33:7a:cc:27:ee:d1:bd:
6a:98:d2:bf:ac:ce:02:f1:64:3c:51:78:09:a4:82:10:03:da:
e1:68:e9:f0:61:56:9c:7c:08:15:c8:b1:ef:e9:c1:80:ad:6c:
54:d7:43:cc:6e:99:78:db:03:5f:fb:55:d4:9d:8b:e5:84:7b:
93:ae:15:de:b3:ce:ad:b9:6b:72:93:dc:d4:19:69:dd:a5:bc:
55:3d:6f:05:8c:5b:ac:c4:73:13:d1:f7:41:38:f3:49:07:69:
01:41:ee:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:12:56 2025 by rpki-client