Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1JZWSmMaWd1bMLx4kTzAfwZNH9s.roa
File: 1JZWSmMaWd1bMLx4kTzAfwZNH9s.roa (raw, json)
Hash identifier: /mUwJJQMUeIqMmrneo/Dh2vFaJIk/J9ULLL5PiHk6cA=
Subject key identifier: D4:96:56:4A:63:1A:59:DD:5B:30:BC:78:91:3C:C0:7F:06:4D:1F:DB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194B6301D8169C7067C7A73335735A02ABF
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1JZWSmMaWd1bMLx4kTzAfwZNH9s.roa
Signing time: Thu 30 Jan 2025 07:49:54 +0000
ROA not before: Thu 30 Jan 2025 07:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215787
IP address blocks: 85.209.133.0/24 maxlen: 24
91.200.192.0/22 maxlen: 24
92.249.48.0/24 maxlen: 24
94.154.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b6:30:1d:81:69:c7:06:7c:7a:73:33:57:35:a0:2a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 30 07:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d496564a631a59dd5b30bc78913cc07f064d1fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fc:6e:3e:c7:19:c3:1c:9c:2c:e6:05:40:2a:
4d:e4:93:d4:5e:0f:de:52:1b:0e:d3:2d:ad:c8:ca:
5a:e2:c9:6f:08:6f:06:ec:a1:bc:13:c3:4f:00:5e:
4b:c6:61:91:dd:eb:d9:b6:f2:0c:69:fb:53:1c:79:
7d:c3:57:ae:bb:33:12:0a:c0:47:e7:6a:98:97:e7:
93:44:ae:36:9a:e0:0f:50:90:32:11:04:35:2f:d7:
5b:76:7d:fc:92:36:74:7a:09:08:50:33:99:45:ae:
1c:63:7d:1a:a3:16:93:9c:92:6a:df:88:e8:f1:2a:
4b:f6:75:e4:db:95:67:ed:b0:37:14:0a:a6:41:dd:
26:93:58:42:4c:74:24:42:eb:5b:ed:fe:7b:bc:27:
4d:c3:16:51:bf:8b:32:c6:4b:3e:7c:30:67:9b:7e:
72:43:ea:2e:90:31:15:2c:9c:2b:90:c4:7a:6d:6d:
06:2e:a6:35:28:92:a6:7c:04:fe:2b:c9:ca:cc:48:
ac:27:63:ae:a7:da:79:63:2b:bc:4e:ea:2a:ea:19:
26:7d:37:56:e1:9a:0c:bd:36:df:f9:44:4e:69:fc:
79:35:1e:e9:a2:de:58:7c:29:b5:74:36:cb:7e:c6:
f2:d9:85:09:71:c7:87:4e:a7:ce:20:27:94:4d:23:
3d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:96:56:4A:63:1A:59:DD:5B:30:BC:78:91:3C:C0:7F:06:4D:1F:DB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1JZWSmMaWd1bMLx4kTzAfwZNH9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.133.0/24
91.200.192.0/22
92.249.48.0/24
94.154.163.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:24:ca:32:c6:eb:a1:1b:de:81:2b:e2:c7:40:86:33:c9:9e:
80:ab:92:fd:e6:dd:21:ed:42:7b:fb:bf:10:de:06:eb:39:1a:
48:96:34:90:19:f9:94:f4:0e:39:33:62:0f:ef:b2:71:f7:ac:
90:90:e4:76:60:2a:08:4f:dd:9b:74:0b:49:a9:ff:cc:91:b6:
cc:4f:80:0f:57:a8:7d:d8:cb:65:66:b5:44:d0:4a:ff:5c:bc:
f7:b3:51:06:a5:de:ab:b6:0a:60:56:26:2d:34:aa:e6:8f:35:
70:39:61:ab:f3:b8:a5:df:a7:89:59:47:2b:b2:22:70:9b:21:
51:7c:ba:2c:18:1e:81:b4:eb:da:08:9f:e2:e3:9d:2f:dc:1f:
fe:ea:02:85:2b:4a:cd:73:b3:7d:03:f0:a7:af:72:ae:4c:67:
60:c5:11:e9:8c:c5:15:4d:a3:39:33:78:90:ab:15:01:eb:ae:
3e:be:92:6d:ad:c1:a0:65:ad:b7:c1:6a:1b:49:78:38:b8:8f:
68:98:a9:4c:e4:df:64:a8:df:6b:29:38:4b:4d:c9:f9:64:c9:
2b:be:c9:9f:2e:b8:c7:28:f7:a8:de:92:e2:1f:49:3c:b4:66:
ad:8d:8c:8a:8c:32:24:80:a6:94:8f:29:74:13:9f:5b:51:72:
b2:ec:af:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:03:55 2025 by rpki-client