Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/JJ8CoEhF4OmQiZugqkqWXbJMgKM.roa
File: JJ8CoEhF4OmQiZugqkqWXbJMgKM.roa (raw, json)
Hash identifier: x4gy4bPyKJ47nbs1t7jF4IuYfUxnwOMcFCrkCmM1C0k=
Subject key identifier: 24:9F:02:A0:48:45:E0:E9:90:89:9B:A0:AA:4A:96:5D:B2:4C:80:A3
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 019420D6257F198FD5CBB7983F747AC691AD
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/JJ8CoEhF4OmQiZugqkqWXbJMgKM.roa
Signing time: Wed 01 Jan 2025 07:48:12 +0000
ROA not before: Wed 01 Jan 2025 07:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35277
IP address blocks: 5.181.202.0/23 maxlen: 24
45.85.117.0/24 maxlen: 24
45.155.120.0/23 maxlen: 24
185.36.141.0/24 maxlen: 24
185.36.142.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:25:7f:19:8f:d5:cb:b7:98:3f:74:7a:c6:91:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 1 07:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=249f02a04845e0e990899ba0aa4a965db24c80a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:22:50:24:be:5a:aa:3e:99:09:09:04:9b:de:
30:2a:89:03:ba:5a:96:57:ca:18:37:22:e6:66:96:
91:06:60:f5:26:01:c3:80:5b:a5:fc:ab:0e:5c:13:
80:1d:38:be:52:ff:da:ae:be:53:e3:60:24:9a:96:
df:cd:4e:84:81:f2:d3:05:af:fc:cb:ef:f8:3b:db:
b4:5b:99:ac:41:c7:8a:80:67:a7:d1:cf:4b:eb:cf:
b7:07:27:e6:22:62:28:53:8f:1d:d7:b0:c6:21:7e:
b8:cf:94:8a:05:e5:95:cd:3d:e7:cb:d2:9b:be:15:
1b:0d:d5:31:4d:77:0c:79:02:60:a4:b2:74:1a:eb:
ed:e3:63:d9:88:30:7d:ca:b9:3e:ee:fc:98:69:af:
2a:a5:00:b4:47:97:d6:01:fb:b1:35:a9:70:cb:86:
84:55:c5:64:84:f6:34:f6:09:88:c2:ba:60:02:e7:
30:a8:44:92:36:6f:5f:71:72:c7:75:a9:ab:7c:d0:
10:38:85:82:c3:ee:3f:41:8c:26:48:d3:c2:14:77:
ef:2a:90:9c:27:f9:07:67:cb:4c:12:f6:29:0e:b6:
f1:5b:9c:0c:bb:55:2f:b8:e6:2e:bf:67:d7:44:3d:
bb:bf:fb:6e:38:4a:f2:09:3d:16:09:80:34:56:51:
77:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:9F:02:A0:48:45:E0:E9:90:89:9B:A0:AA:4A:96:5D:B2:4C:80:A3
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/JJ8CoEhF4OmQiZugqkqWXbJMgKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.202.0/23
45.85.117.0/24
45.155.120.0/23
185.36.141.0-185.36.143.255
Signature Algorithm: sha256WithRSAEncryption
5b:f8:79:8b:c5:c7:12:d8:b9:9c:cd:a6:59:fd:09:ab:20:08:
51:94:8a:2e:b6:33:08:2c:3e:db:aa:f0:c0:34:29:f5:19:8d:
6a:1d:78:b0:f7:f3:73:4a:95:8d:0d:aa:9c:6e:cb:35:48:0e:
92:b8:d1:6f:1d:6b:d5:fa:5e:fc:43:2d:1a:47:03:2c:c5:99:
49:f2:c9:b5:6d:55:cf:57:09:d0:90:3e:2d:31:7f:63:19:94:
69:d8:89:89:11:a9:b0:e4:3a:0e:c8:dc:5f:47:46:f8:98:91:
7e:40:c4:be:77:36:92:19:11:04:15:d1:41:6b:94:92:b5:c8:
1e:6f:d8:b0:b1:ac:1d:56:55:6a:68:d4:bb:48:bd:60:21:d2:
19:cd:10:82:a4:2a:22:97:28:22:47:c1:78:08:cd:29:34:d3:
19:24:4f:36:57:71:9d:d1:53:6d:7a:09:c7:f6:d6:75:cf:6a:
22:ce:42:88:37:2c:0a:33:07:4b:93:69:ad:98:49:15:9e:a6:
4f:d7:b5:d1:45:60:e4:4b:c4:92:57:84:42:64:a0:ac:57:ce:
94:37:8c:47:4d:35:3f:50:b7:cd:86:bb:9b:16:af:cf:ed:cb:
df:c1:bf:52:b9:91:e8:88:3a:da:3e:51:bd:2f:c2:d0:12:bb:
47:7d:aa:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:01:40 2025 by rpki-client