Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/24994f-8dbf-4a34-be02-b21758390cf7/1/J2kGn2cxZX7zDFLzU0k9jxTU6gA.roa
File: J2kGn2cxZX7zDFLzU0k9jxTU6gA.roa (raw, json)
Hash identifier: asjfRQY32NRKFIA2Oo0FGkgV64Xjo9V7qn3cCI7NUpQ=
Subject key identifier: 27:69:06:9F:67:31:65:7E:F3:0C:52:F3:53:49:3D:8F:14:D4:EA:00
Certificate issuer: /CN=df8b9a703c54d23cf27fe711a7b059dbbd0fa639
Certificate serial: 0176B2CB
Authority key identifier: DF:8B:9A:70:3C:54:D2:3C:F2:7F:E7:11:A7:B0:59:DB:BD:0F:A6:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34uacDxU0jzyf-cRp7BZ270Ppjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/24994f-8dbf-4a34-be02-b21758390cf7/1/J2kGn2cxZX7zDFLzU0k9jxTU6gA.roa
Signing time: Sat 01 Jan 2022 11:02:39 +0000
ROA not before: Sat 01 Jan 2022 11:02:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212012
IP address blocks: 91.240.72.0/24 maxlen: 24
185.42.232.0/24 maxlen: 24
185.42.233.0/24 maxlen: 24
2a04:7040:1471::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24556235 (0x176b2cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8b9a703c54d23cf27fe711a7b059dbbd0fa639
Validity
Not Before: Jan 1 11:02:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2769069f6731657ef30c52f353493d8f14d4ea00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f9:7f:35:2e:74:f0:d7:27:c2:5d:d3:8c:99:
58:6d:ef:15:6c:8a:a4:a3:f2:34:ac:ea:4e:c5:b1:
6d:30:b6:4f:f9:8d:77:10:f2:cb:58:8d:3e:d1:8b:
5b:bc:1e:b0:31:9e:d6:fc:0b:c4:b6:76:e0:ac:f4:
6e:67:27:28:24:85:5e:52:6c:7e:d1:68:17:57:81:
3f:24:42:f1:0a:10:71:c6:c3:e8:c5:4e:29:13:8d:
b1:bd:87:bb:b3:13:1a:5a:92:5b:9a:a0:97:88:85:
f3:18:f6:84:af:f6:a2:00:08:3d:a9:17:ae:72:42:
06:0a:98:33:35:2b:54:09:c1:99:c2:e9:18:f7:d2:
5c:10:8c:bb:98:24:0c:36:95:83:ba:bb:45:77:b2:
ec:cd:b3:66:be:88:8d:4a:18:25:89:4b:bd:99:fe:
c4:27:fa:c1:dd:4a:1e:8a:a0:39:6e:c3:db:94:66:
73:ac:32:0b:d1:75:b3:da:b6:37:97:ac:8b:27:d1:
0a:19:ef:73:24:5d:98:8a:14:ff:9a:60:4a:92:d2:
66:d7:19:7d:fe:80:93:85:69:30:82:9c:88:23:b0:
a9:8f:06:ac:eb:20:39:df:df:e6:e4:e9:d8:7c:be:
fa:dc:8c:2e:cb:d5:03:2c:d8:c3:a6:b2:4a:90:58:
f6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:69:06:9F:67:31:65:7E:F3:0C:52:F3:53:49:3D:8F:14:D4:EA:00
X509v3 Authority Key Identifier:
keyid:DF:8B:9A:70:3C:54:D2:3C:F2:7F:E7:11:A7:B0:59:DB:BD:0F:A6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34uacDxU0jzyf-cRp7BZ270Ppjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/24994f-8dbf-4a34-be02-b21758390cf7/1/J2kGn2cxZX7zDFLzU0k9jxTU6gA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/24994f-8dbf-4a34-be02-b21758390cf7/1/34uacDxU0jzyf-cRp7BZ270Ppjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.72.0/24
185.42.232.0/23
IPv6:
2a04:7040:1471::/48
Signature Algorithm: sha256WithRSAEncryption
53:23:30:c2:61:88:33:14:e2:60:0a:88:06:4a:b2:ca:86:05:
89:21:51:82:10:98:c7:7f:34:e7:df:bb:24:f3:4e:db:0a:45:
1b:65:85:e0:a9:5a:ee:66:19:5b:33:c5:f9:30:b2:80:fe:01:
33:f5:64:aa:fd:29:ae:e6:08:98:7e:45:5d:78:a3:b2:3d:be:
5a:4e:09:57:47:6b:cf:3e:b2:56:a5:38:38:5a:36:4d:9e:41:
3f:41:5f:c9:98:3f:48:1c:e8:2b:93:04:dc:ef:47:07:8f:b7:
07:46:50:3a:63:39:9d:84:5b:22:86:c4:9a:e9:ed:92:92:82:
39:e1:fe:82:42:59:ba:37:76:f6:7d:20:28:06:de:d2:29:2f:
21:3c:23:e4:73:16:1e:4a:97:30:e6:ef:59:24:0a:f1:38:f1:
9e:0c:49:ce:e1:69:54:69:6a:23:ce:2e:a4:b6:94:54:07:4d:
40:77:df:d8:a2:4f:86:ce:86:c2:7f:b4:cc:cb:3b:c4:4f:9c:
19:ae:29:08:e8:66:30:69:29:1f:f0:39:27:4d:c5:a8:06:fe:
c8:4e:58:ff:18:15:55:1c:43:fb:a1:3a:05:df:7d:c2:f8:57:
56:27:e5:c8:f7:90:7d:1e:88:43:40:c5:fa:76:9d:61:39:34:
f6:ef:e2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:04 2025 by rpki-client