Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/JlO_qnVL00Suee0_HOVdRa3sq6o.roa
File: JlO_qnVL00Suee0_HOVdRa3sq6o.roa (raw, json)
Hash identifier: 853LDg7z48nkGHDawle640a0tB7YzauOfSJF7xZQbVw=
Subject key identifier: 26:53:BF:AA:75:4B:D3:44:AE:79:ED:3F:1C:E5:5D:45:AD:EC:AB:AA
Certificate issuer: /CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a
Certificate serial: 01942444B174A27AD4C3FD46C7BBE571FD62
Authority key identifier: E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/JlO_qnVL00Suee0_HOVdRa3sq6o.roa
Signing time: Wed 01 Jan 2025 23:47:48 +0000
ROA not before: Wed 01 Jan 2025 23:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35539
IP address blocks: 31.134.192.0/21 maxlen: 21
46.160.192.0/18 maxlen: 18
46.160.192.0/19 maxlen: 19
46.160.224.0/19 maxlen: 19
93.95.160.0/21 maxlen: 21
93.95.160.0/22 maxlen: 22
93.95.164.0/22 maxlen: 22
93.123.128.0/17 maxlen: 17
93.123.128.0/18 maxlen: 18
93.123.192.0/18 maxlen: 18
95.131.208.0/21 maxlen: 21
95.131.208.0/22 maxlen: 22
95.131.212.0/22 maxlen: 22
217.194.240.0/20 maxlen: 20
217.194.240.0/21 maxlen: 21
217.194.248.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:b1:74:a2:7a:d4:c3:fd:46:c7:bb:e5:71:fd:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a
Validity
Not Before: Jan 1 23:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2653bfaa754bd344ae79ed3f1ce55d45adecabaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b4:ec:cf:b4:c5:8b:8a:01:de:98:4f:1d:58:
7b:62:fc:bc:09:48:74:a9:9f:57:bd:58:9e:83:d1:
16:cf:a8:df:c5:52:fc:6b:14:9a:5d:18:6d:35:6d:
31:bb:2d:fc:4f:6c:5b:13:82:98:ae:57:99:cd:af:
97:4d:7c:6d:ee:5e:55:49:b4:2a:60:d1:b9:c7:7d:
8a:c1:04:03:a9:92:30:da:77:fb:8a:1f:5a:a5:e0:
ee:5f:2a:8e:ae:f0:41:26:ff:ed:7c:e3:0e:df:78:
f7:de:12:c2:45:b4:aa:40:7d:3f:80:09:a6:88:a8:
1a:d7:80:fa:dd:32:9a:42:bd:b1:35:ba:8c:45:9f:
8e:36:d1:cf:9d:5e:51:0d:8e:70:7f:b1:7a:da:8f:
51:cb:bf:09:77:7f:99:61:62:b5:c2:d1:c2:32:0b:
20:57:c1:dc:09:ca:8f:18:ca:e5:d2:5f:80:76:10:
cd:c6:78:00:76:84:58:03:50:70:7a:40:d1:97:f1:
b0:ba:d6:28:af:3c:8d:c8:e5:59:18:57:6c:7d:b8:
cc:14:c1:a6:2c:25:06:ee:22:9e:fa:a5:23:3a:1a:
ba:50:2d:63:12:f0:44:df:22:5f:02:dc:8f:89:a6:
c7:0c:cf:85:c2:f7:91:a0:be:b3:de:ac:89:0d:44:
3b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:53:BF:AA:75:4B:D3:44:AE:79:ED:3F:1C:E5:5D:45:AD:EC:AB:AA
X509v3 Authority Key Identifier:
keyid:E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/JlO_qnVL00Suee0_HOVdRa3sq6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.134.192.0/21
46.160.192.0/18
93.95.160.0/21
93.123.128.0/17
95.131.208.0/21
217.194.240.0/20
Signature Algorithm: sha256WithRSAEncryption
72:40:71:fd:a5:c4:46:13:5e:a4:0e:99:2d:cd:b6:d6:69:3e:
da:fa:0b:f3:42:9f:43:cb:e8:2e:49:b6:0d:ff:a1:d2:ee:68:
ef:e7:4e:e2:d2:80:19:35:9c:f9:68:db:8c:06:2e:2b:65:c9:
22:ce:1e:be:c4:47:fb:06:25:a9:b7:ca:ad:98:0d:ea:99:4f:
49:83:bf:0d:4a:ba:c6:0e:52:98:5b:3c:56:31:95:f2:24:8f:
72:47:95:3a:98:44:8c:dd:63:b9:8e:b7:6a:5d:d6:e2:d8:d1:
fd:8b:6e:4d:4e:92:ef:65:42:d6:69:30:4a:f8:1c:e5:6d:a0:
6d:34:3d:ad:4c:d8:a8:7e:55:20:d2:3b:1e:7c:9b:19:36:df:
78:ec:2d:7e:f9:4f:0b:25:cf:66:b4:7d:18:0a:29:45:bd:0d:
37:38:94:ed:25:8d:cd:df:0e:9b:7d:f3:80:00:fe:35:ce:2b:
90:d3:a7:11:43:97:96:76:61:4b:30:33:42:b8:b4:c6:ce:1e:
3a:ef:df:3a:d3:96:f3:c4:6e:0e:e6:d1:cb:24:80:6b:38:05:
70:4c:31:13:c2:94:89:3f:f0:ed:29:27:62:0f:cc:93:a2:46:
1d:a0:4a:0b:58:9c:cc:d7:fd:3c:ff:c1:99:b2:a3:40:33:dd:
68:9f:36:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:22:06 2025 by rpki-client