Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/jm4B5paf_GVr-GpkHFsecVdl0nk.roa
File: jm4B5paf_GVr-GpkHFsecVdl0nk.roa (raw, json)
Hash identifier: l8vtbC+hCoUUJ+YOCg7b9XUWVs7njLshIKLeOlHSZao=
Subject key identifier: 8E:6E:01:E6:96:9F:FC:65:6B:F8:6A:64:1C:5B:1E:71:57:65:D2:79
Certificate issuer: /CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Certificate serial: 01942368E70C939CF03A54A3524891E6BE16
Authority key identifier: 3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/jm4B5paf_GVr-GpkHFsecVdl0nk.roa
Signing time: Wed 01 Jan 2025 19:47:44 +0000
ROA not before: Wed 01 Jan 2025 19:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 32934
IP address blocks: 185.89.218.0/23 maxlen: 24
185.89.218.0/24 maxlen: 24
185.89.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:e7:0c:93:9c:f0:3a:54:a3:52:48:91:e6:be:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Validity
Not Before: Jan 1 19:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e6e01e6969ffc656bf86a641c5b1e715765d279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:63:d3:00:1c:1f:53:fb:67:85:89:ed:9f:a3:
f9:65:8d:ae:9d:79:c0:44:8c:17:89:c7:f2:93:03:
8a:e1:70:ca:af:c0:7e:d4:a5:a9:27:62:3f:78:01:
90:e8:21:6c:58:17:d3:e4:42:44:a2:49:88:be:35:
de:b2:05:bd:4c:b8:e7:7d:3d:c6:f8:b5:55:f1:25:
24:db:45:24:ab:ee:3f:a8:df:8c:68:ce:ad:d9:f3:
51:ba:d4:dc:db:41:92:39:d9:3d:fe:4b:b3:0c:33:
40:94:bc:ed:69:8e:f3:7b:a3:d1:9a:18:f3:c3:3d:
79:4a:83:77:fb:1f:bc:4a:de:64:a3:ab:8f:ef:20:
90:a1:a4:e9:ae:3d:69:f6:7a:07:be:aa:18:51:4d:
cd:11:c4:69:fc:35:75:90:f8:7d:84:c1:f7:a5:ba:
45:1b:1b:fb:48:b2:dd:02:ec:43:5f:34:8f:4a:c7:
48:bf:45:87:cb:35:b8:c6:b6:bf:b1:06:85:c3:23:
62:e0:7f:7b:ba:c8:4c:e3:a8:54:0a:39:68:7c:b2:
ed:a2:62:5e:3e:8f:7f:3b:94:ea:60:ad:93:7d:ac:
cf:15:63:d7:aa:37:49:d4:5c:65:ac:df:0d:12:69:
fd:f3:d3:19:e1:25:17:cb:d6:1c:b9:f4:41:1d:c2:
cb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:6E:01:E6:96:9F:FC:65:6B:F8:6A:64:1C:5B:1E:71:57:65:D2:79
X509v3 Authority Key Identifier:
keyid:3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/jm4B5paf_GVr-GpkHFsecVdl0nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.218.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:12:ea:08:73:aa:e2:3a:90:98:1a:01:c0:c3:9f:fd:a1:ec:
a8:12:b7:67:f7:ab:d3:48:99:16:25:0a:f4:55:28:18:66:1f:
6e:94:85:7d:ec:95:3c:ab:41:72:98:2d:ad:f1:09:45:d0:c9:
9d:8b:3f:95:1e:01:6d:1f:34:32:c9:c7:b8:c2:b0:6d:93:06:
72:b8:52:03:73:8e:63:cf:9f:41:74:8b:03:f0:f8:6e:5f:aa:
34:60:10:91:5e:64:0d:a2:4f:eb:d4:cf:bc:d2:38:1d:09:15:
71:7a:08:ca:2b:43:04:62:b4:59:f4:24:0f:ff:8a:97:1a:8c:
a7:cd:7b:94:f4:1e:ce:98:ae:78:b4:72:28:ad:d9:a0:fc:8b:
24:49:97:20:a0:7d:9f:7b:24:63:22:13:53:70:ce:95:1a:5a:
bb:83:14:a7:33:c7:17:4c:59:e1:81:b7:d6:6d:14:63:18:bc:
75:53:f3:1f:30:44:8b:24:f0:69:e2:35:ec:ed:fa:34:97:43:
f1:89:ed:f0:93:87:c7:4f:ef:3d:09:49:b5:ba:5e:5e:ee:80:
86:7d:f0:67:30:30:d5:ca:2d:f3:d3:b4:da:a6:b9:aa:71:b7:
07:5b:48:7d:5d:59:1a:24:03:97:c5:09:03:f3:97:86:80:2d:
0d:4c:05:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:38:02 2025 by rpki-client