Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/JlinVGx-AiiBUuzoZ_KrWe6wySk.roa
File: JlinVGx-AiiBUuzoZ_KrWe6wySk.roa (raw, json)
Hash identifier: VYHWutlNAeV24c+iU8axIadxOrP/ZAo6+4xHuj+U+ZI=
Subject key identifier: 26:58:A7:54:6C:7E:02:28:81:52:EC:E8:67:F2:AB:59:EE:B0:C9:29
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 01873141CEF0CC585FBC0926934A4A09ACDC
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/JlinVGx-AiiBUuzoZ_KrWe6wySk.roa
Signing time: Thu 30 Mar 2023 06:43:29 +0000
ROA not before: Thu 30 Mar 2023 06:43:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9125
IP address blocks: 93.93.192.0/21 maxlen: 21
93.93.199.0/24 maxlen: 24
92.42.253.0/24 maxlen: 24
92.42.252.0/24 maxlen: 24
92.42.248.0/22 maxlen: 22
92.42.254.0/24 maxlen: 24
92.42.255.0/24 maxlen: 24
89.23.93.0/24 maxlen: 24
89.23.68.0/23 maxlen: 23
89.23.70.0/24 maxlen: 24
89.23.65.0/24 maxlen: 24
89.23.75.0/24 maxlen: 24
178.254.134.0/24 maxlen: 24
178.254.133.0/24 maxlen: 24
178.254.136.0/22 maxlen: 22
178.254.144.0/20 maxlen: 20
178.254.145.0/24 maxlen: 24
178.254.140.0/22 maxlen: 22
178.254.142.0/24 maxlen: 24
178.254.165.0/24 maxlen: 24
178.254.163.0/24 maxlen: 24
178.254.172.0/24 maxlen: 24
178.254.169.0/24 maxlen: 24
178.254.175.0/24 maxlen: 24
178.254.177.0/24 maxlen: 24
178.254.183.0/24 maxlen: 24
178.254.182.0/24 maxlen: 24
178.254.184.0/23 maxlen: 24
178.254.128.0/21 maxlen: 21
95.140.112.0/22 maxlen: 22
95.140.116.0/22 maxlen: 22
95.140.115.0/24 maxlen: 24
95.140.120.0/23 maxlen: 23
95.140.124.0/22 maxlen: 22
95.140.125.0/24 maxlen: 24
178.254.188.0/22 maxlen: 24
178.254.187.0/24 maxlen: 24
185.157.44.0/24 maxlen: 24
109.111.254.0/24 maxlen: 24
217.169.208.0/20 maxlen: 20
217.169.208.0/22 maxlen: 22
217.169.212.0/22 maxlen: 22
217.169.219.0/24 maxlen: 24
217.169.216.0/22 maxlen: 22
217.169.220.0/22 maxlen: 22
5.172.34.0/23 maxlen: 24
5.172.33.0/24 maxlen: 24
5.172.36.0/22 maxlen: 24
109.111.226.0/24 maxlen: 24
109.111.225.0/24 maxlen: 24
109.111.224.0/24 maxlen: 24
109.111.232.0/22 maxlen: 22
109.111.229.0/24 maxlen: 24
109.111.228.0/24 maxlen: 24
109.111.230.0/23 maxlen: 23
109.111.227.0/24 maxlen: 24
109.111.240.0/24 maxlen: 24
109.111.236.0/22 maxlen: 22
109.111.246.0/24 maxlen: 24
109.111.243.0/24 maxlen: 24
109.111.244.0/24 maxlen: 24
109.111.250.0/24 maxlen: 24
109.111.252.0/23 maxlen: 24
109.111.247.0/24 maxlen: 24
109.111.248.0/24 maxlen: 24
2a02:b58::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:31:41:ce:f0:cc:58:5f:bc:09:26:93:4a:4a:09:ac:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Mar 30 06:43:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2658a7546c7e02288152ece867f2ab59eeb0c929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:74:cb:dd:83:ea:eb:21:13:77:ba:ab:a0:d8:
c2:a0:5d:37:ac:e5:dc:e8:5c:a1:21:dc:39:a7:fe:
66:09:97:03:ad:89:89:89:2e:af:af:55:49:da:37:
74:6b:5a:cb:62:0d:47:2b:28:2e:bf:1e:87:9b:d4:
03:0e:c1:35:fc:7e:a4:3d:01:6a:79:de:ef:ef:5c:
10:48:9e:7e:63:03:46:7f:85:27:e7:ba:4b:45:72:
12:9d:bc:44:c8:8d:c7:0f:dc:ea:60:fb:b4:8a:06:
2e:6c:20:80:2b:43:cb:5c:c7:f0:3c:e4:fc:79:6b:
ed:96:ad:97:33:d1:f4:2c:06:52:2a:1f:fc:43:df:
58:d5:42:0c:0f:df:d0:c9:d5:9e:88:57:5f:fb:f8:
d0:45:fe:8b:19:23:10:60:51:d8:a9:ce:6e:76:2f:
42:11:2c:89:d6:cb:37:eb:53:54:f2:34:ed:49:74:
3f:99:50:00:85:af:b1:d0:7d:31:35:51:2b:3b:91:
fa:17:d6:c3:7e:44:d7:6d:30:35:a4:9d:bd:29:92:
12:a4:a6:22:22:3b:d3:b0:0e:17:60:d8:55:0d:14:
19:8a:03:5a:1d:65:13:ef:c2:8a:0a:ca:99:11:31:
af:03:6d:66:a7:40:c7:56:ef:12:c4:af:8c:8f:a2:
77:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:58:A7:54:6C:7E:02:28:81:52:EC:E8:67:F2:AB:59:EE:B0:C9:29
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/JlinVGx-AiiBUuzoZ_KrWe6wySk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.33.0-5.172.39.255
89.23.65.0/24
89.23.68.0-89.23.70.255
89.23.75.0/24
89.23.93.0/24
92.42.248.0/21
93.93.192.0/21
95.140.112.0-95.140.121.255
95.140.124.0/22
109.111.224.0-109.111.240.255
109.111.243.0-109.111.244.255
109.111.246.0-109.111.248.255
109.111.250.0/24
109.111.252.0-109.111.254.255
178.254.128.0/19
178.254.163.0/24
178.254.165.0/24
178.254.169.0/24
178.254.172.0/24
178.254.175.0/24
178.254.177.0/24
178.254.182.0-178.254.185.255
178.254.187.0-178.254.191.255
185.157.44.0/24
217.169.208.0/20
IPv6:
2a02:b58::/32
Signature Algorithm: sha256WithRSAEncryption
59:e3:91:02:0e:f2:6b:a6:e2:84:94:e6:1c:eb:b3:50:e0:8f:
e1:a3:2d:b9:01:cf:52:21:d4:c9:02:77:cf:f3:23:e9:6c:90:
14:1d:e9:b9:07:3b:e2:e4:ea:c3:1d:a7:ab:fd:1c:30:9b:73:
77:43:4b:6a:7b:6c:bc:03:9a:49:90:ed:cf:0a:69:6f:c5:b0:
95:d1:ed:b6:4c:b1:36:9a:df:4c:b2:a1:d5:ad:13:28:8f:54:
97:bf:42:76:41:c3:37:90:dd:3b:83:c6:6a:b7:18:7f:d3:ed:
8b:81:c1:c6:1a:fa:d0:85:0b:53:62:89:38:b5:43:a2:23:cf:
12:85:2a:5b:ec:bb:ec:35:f7:1c:f8:b3:44:1b:64:ff:7c:df:
67:20:d7:b2:2f:c3:66:27:42:28:90:0a:15:3e:ef:01:78:73:
ec:6e:e2:ea:18:a0:b1:97:28:05:c0:1c:d8:37:d9:ba:f5:40:
eb:23:3a:c9:3d:75:8f:30:aa:c7:4f:9c:fb:71:d2:7b:d8:0a:
3a:ec:57:21:ac:16:b1:c1:b4:fe:a1:76:d2:ad:47:3d:62:3a:
71:ad:43:40:64:8d:1a:0b:0e:6e:33:44:e3:b3:80:ce:d4:f7:
d4:4a:7e:d7:82:ff:ac:00:ad:b0:a8:22:ce:c7:f8:26:e7:c1:
73:0c:e8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:46:58 2025 by rpki-client