Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/jrvc6kmWjKHmuF_8SsZy0ZuPTP8.roa
File: jrvc6kmWjKHmuF_8SsZy0ZuPTP8.roa (raw, json)
Hash identifier: Z+xoWww5SsoPK3NcXFL/FecEhSX4cgiZ8Poe3txV32s=
Subject key identifier: 8E:BB:DC:EA:49:96:8C:A1:E6:B8:5F:FC:4A:C6:72:D1:9B:8F:4C:FF
Certificate issuer: /CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397
Certificate serial: 0194236A4CBD56B87C71F07E137D4E55CDA3
Authority key identifier: 97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/jrvc6kmWjKHmuF_8SsZy0ZuPTP8.roa
Signing time: Wed 01 Jan 2025 19:49:16 +0000
ROA not before: Wed 01 Jan 2025 19:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41816
IP address blocks: 91.143.16.0/22 maxlen: 22
91.143.20.0/23 maxlen: 23
91.143.22.0/23 maxlen: 23
91.143.24.0/22 maxlen: 22
91.143.24.0/24 maxlen: 24
91.143.25.0/24 maxlen: 24
91.143.26.0/24 maxlen: 24
91.143.27.0/24 maxlen: 24
91.143.28.0/22 maxlen: 22
91.143.28.0/24 maxlen: 24
91.143.29.0/24 maxlen: 24
91.143.30.0/24 maxlen: 24
91.143.31.0/24 maxlen: 24
185.209.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:4c:bd:56:b8:7c:71:f0:7e:13:7d:4e:55:cd:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397
Validity
Not Before: Jan 1 19:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ebbdcea49968ca1e6b85ffc4ac672d19b8f4cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bc:4d:ae:5f:79:2d:8f:07:c7:4f:72:5d:7f:
ec:1b:34:63:0f:82:e6:aa:f4:c5:c0:b1:4d:e0:7e:
f5:c4:5b:d7:92:ab:f0:7b:26:75:78:c9:ff:35:11:
53:71:98:83:52:57:d7:4d:be:bd:23:9f:0d:48:af:
03:47:a6:07:d0:8d:d4:82:7d:77:b8:d5:e4:b6:50:
3c:cc:b9:ce:13:fe:bd:6b:f0:2b:86:0b:28:c0:7d:
e2:f5:c0:ae:a5:c6:6e:94:76:c3:44:88:8c:d7:26:
af:da:ff:1e:89:58:e7:f2:4b:cf:58:37:e6:6d:ad:
ec:aa:09:ec:48:eb:64:19:51:e6:ad:07:be:b0:e3:
7e:f8:b6:ef:a6:1e:a7:d1:19:d0:c6:88:53:93:92:
8b:e0:9d:48:bd:b0:12:ad:94:9c:bd:43:d7:34:32:
36:80:0b:35:44:3e:98:f5:fa:2d:ff:7e:23:35:3d:
53:71:a8:00:c8:a5:5d:71:e3:ee:1c:bf:ab:8d:4b:
04:96:d6:cb:b3:28:87:3f:7a:a8:70:fb:91:19:69:
fd:fe:94:67:78:2b:a4:fc:dc:1e:4f:5b:be:e8:1b:
9c:10:ae:7d:d5:95:f5:1a:8d:cf:65:be:98:b3:b3:
5b:25:3a:49:80:2c:b5:16:19:83:5e:58:56:af:df:
6d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BB:DC:EA:49:96:8C:A1:E6:B8:5F:FC:4A:C6:72:D1:9B:8F:4C:FF
X509v3 Authority Key Identifier:
keyid:97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/jrvc6kmWjKHmuF_8SsZy0ZuPTP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.143.16.0/20
185.209.44.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:9b:70:c6:96:4a:9a:89:4b:39:14:68:48:74:5a:c0:02:6e:
77:c3:17:07:16:5a:45:e5:bf:f9:ca:ef:e5:dd:91:db:97:d5:
9f:17:42:e0:05:1f:22:aa:e5:13:0e:34:96:0e:8c:04:b8:7f:
42:8a:d9:fc:cc:5f:54:8c:9a:e1:77:54:68:4f:1a:02:e8:de:
28:07:c0:f9:fd:53:79:8d:b6:d5:a0:25:5b:43:a2:8a:b9:a2:
f0:86:0b:67:e5:e2:84:06:62:7e:22:25:7e:40:3e:2c:2a:a7:
4e:95:64:64:03:ca:f1:0c:53:f3:45:e3:ca:16:88:0d:34:ec:
80:0c:e7:77:d8:79:ba:9c:a6:bd:03:46:20:61:29:1a:7d:f4:
78:38:9c:0b:af:da:4c:fa:1b:6b:4e:3e:79:da:0c:c3:b6:c8:
3f:20:bc:80:f4:85:8b:c6:48:2f:fc:5a:0e:0b:da:2a:3a:99:
ae:df:b8:f6:36:b3:47:f6:d1:6a:4e:a4:02:d2:9c:66:9e:c7:
6d:3c:f9:0b:62:08:0a:8a:81:7b:3a:27:a1:ff:ff:8f:b0:11:
a4:89:57:c5:96:eb:5d:b4:23:77:41:e2:e6:3d:ca:a8:b4:98:
2a:da:06:c9:8c:b9:c6:46:0c:60:81:03:8b:e3:7d:26:81:c1:
f5:6f:3f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:39 2025 by rpki-client