Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/jnSve3XmFe0Ms43uzQn1WmoreJ0.roa
File: jnSve3XmFe0Ms43uzQn1WmoreJ0.roa (raw, json)
Hash identifier: JpZLimfc7+7aqyHJzwRKIdaJc+FFYashS7WERx4Vf3Q=
Subject key identifier: 8E:74:AF:7B:75:E6:15:ED:0C:B3:8D:EE:CD:09:F5:5A:6A:2B:78:9D
Certificate issuer: /CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Certificate serial: 019427480C017F05CD99AD239C652CC9896E
Authority key identifier: A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/jnSve3XmFe0Ms43uzQn1WmoreJ0.roa
Signing time: Thu 02 Jan 2025 13:50:20 +0000
ROA not before: Thu 02 Jan 2025 13:50:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51765
IP address blocks: 185.68.152.0/22 maxlen: 22
185.94.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:0c:01:7f:05:cd:99:ad:23:9c:65:2c:c9:89:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Validity
Not Before: Jan 2 13:50:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e74af7b75e615ed0cb38deecd09f55a6a2b789d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b7:fb:04:d3:13:01:af:0a:f6:50:60:7e:8b:
91:19:0f:a3:46:64:71:d2:b8:27:56:4c:c2:5f:3e:
83:9d:1d:31:16:b1:7a:2f:3a:3b:19:af:3e:14:a5:
d8:25:68:94:ae:6a:67:9f:4f:5d:03:4e:41:67:3f:
dd:9a:9f:ef:9d:61:b0:bc:c0:36:24:d3:ec:64:47:
7c:7c:a9:cd:8f:be:77:79:c8:9a:ab:62:f4:40:79:
9f:00:e8:12:d4:a4:83:db:7d:3c:19:b5:cd:b9:50:
85:ca:70:73:14:4f:11:44:77:33:15:6b:5f:ab:e1:
f3:e4:af:95:5a:7a:a6:6b:44:91:1a:be:bb:b0:2a:
9e:1a:44:71:ff:b5:25:af:bc:19:be:4a:7e:6e:11:
46:7c:39:dc:e0:4d:84:42:4f:58:df:f6:39:44:97:
79:c9:86:e8:cc:8a:bb:ca:44:e2:1e:bc:60:11:81:
1d:eb:d4:41:72:3c:8c:93:37:65:b1:dc:e1:74:2b:
19:e0:fa:7e:bc:2d:06:3d:46:6a:92:37:5a:2f:1f:
18:02:ee:35:4a:46:ef:b0:3d:f3:b0:09:b1:10:8d:
56:4d:85:26:e6:41:9b:4b:73:cd:d4:ea:df:6d:8c:
4d:7e:95:7c:e5:1b:4c:f1:1d:1d:3d:f0:7c:65:7c:
a9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:74:AF:7B:75:E6:15:ED:0C:B3:8D:EE:CD:09:F5:5A:6A:2B:78:9D
X509v3 Authority Key Identifier:
keyid:A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/jnSve3XmFe0Ms43uzQn1WmoreJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.152.0/22
185.94.32.0/22
Signature Algorithm: sha256WithRSAEncryption
21:8a:65:e5:1b:3b:d2:12:f1:76:5f:e1:0d:ec:b9:d1:59:ac:
88:c9:d9:b1:b3:0b:d2:f5:c9:90:c2:91:0d:fe:83:0e:9c:bf:
d1:df:a2:e3:a1:32:30:cb:3e:dd:65:e7:b9:6d:89:ba:f8:bd:
11:3c:60:3f:fd:eb:0c:5a:df:32:81:0e:54:1f:d2:79:a4:d9:
0d:bb:18:c7:cc:61:85:a4:19:19:e5:6f:6d:48:b9:94:ea:cb:
bd:25:8e:69:05:cb:8a:ce:d9:25:23:ba:05:fe:43:96:a5:32:
93:62:d8:3a:7e:d9:0a:b8:ae:24:8e:5f:01:89:2d:c4:33:8d:
59:a6:2d:90:ff:1d:23:5e:ef:19:0e:f9:db:f7:a0:ba:1c:f1:
ec:45:2f:ee:5b:9e:71:7f:26:f6:cd:bc:fa:a7:91:47:14:85:
fc:49:f1:5a:1c:ce:62:e9:68:10:35:ed:c8:24:e6:2f:3e:bf:
c1:e0:cc:bf:2e:3c:77:d9:a4:bc:e6:7e:e5:a2:b4:98:98:22:
ff:6a:e1:3f:59:05:fd:64:80:19:cc:1c:63:ef:62:b6:ab:67:
1e:7b:ac:29:f2:63:d8:ae:d0:44:b2:41:80:5c:e3:76:f3:04:
9e:0f:52:de:4c:cd:de:f9:25:8f:e7:f1:b7:14:7b:9e:40:a8:
0f:4d:3e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:41:45 2025 by rpki-client