Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/jlzyWyeLnfRikEWPiYrI3y66rQk.roa
File: jlzyWyeLnfRikEWPiYrI3y66rQk.roa (raw, json)
Hash identifier: BLn7EvSqDEddleMAMTyKR7P0lxZddZ6yhFZNcQkjaGI=
Subject key identifier: 8E:5C:F2:5B:27:8B:9D:F4:62:90:45:8F:89:8A:C8:DF:2E:BA:AD:09
Certificate issuer: /CN=839a9a1b7e11fde77e4e1f57ff11864cee21f165
Certificate serial: 01941FFA1E8AE01E3248A78871637C68646A
Authority key identifier: 83:9A:9A:1B:7E:11:FD:E7:7E:4E:1F:57:FF:11:86:4C:EE:21:F1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5qaG34R_ed-Th9X_xGGTO4h8WU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/jlzyWyeLnfRikEWPiYrI3y66rQk.roa
Signing time: Wed 01 Jan 2025 03:47:52 +0000
ROA not before: Wed 01 Jan 2025 03:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56985
IP address blocks: 141.105.112.0/21 maxlen: 21
185.111.112.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:1e:8a:e0:1e:32:48:a7:88:71:63:7c:68:64:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=839a9a1b7e11fde77e4e1f57ff11864cee21f165
Validity
Not Before: Jan 1 03:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e5cf25b278b9df46290458f898ac8df2ebaad09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3c:58:19:47:de:98:f6:69:05:af:17:3f:9b:
30:11:9f:3b:b4:53:ad:f2:0f:b8:ba:ca:95:8f:02:
c2:fb:ca:23:95:4f:5f:71:a7:33:4c:bc:83:b8:93:
63:26:ce:b4:d0:60:c7:18:53:06:bf:b7:9e:61:55:
7d:ea:34:3b:f9:1b:d4:57:50:4b:bc:22:08:01:3b:
a6:38:55:be:27:3f:1d:86:e4:a1:18:cc:d8:f7:81:
5c:e5:0c:54:dc:1f:74:4c:36:ca:91:64:69:df:98:
87:ef:0f:63:9d:18:f4:bc:c6:e4:44:f1:65:28:a2:
79:16:c7:e9:b9:42:e3:7b:fe:d6:34:60:ea:6e:cc:
58:79:c4:2f:a4:4f:ef:fb:f8:97:cf:3b:c6:e8:2e:
6c:80:06:81:83:3d:aa:d3:a9:bb:1d:6f:46:95:cb:
fa:23:71:ad:0d:43:43:7c:b0:de:bd:ed:f5:f1:f3:
3e:27:76:3b:e5:1e:a1:e5:a3:07:35:90:f5:07:d4:
8e:26:90:e2:b1:2b:74:6f:98:17:10:70:64:6f:e2:
7e:b9:d7:e7:8d:79:fe:23:a5:a9:8b:1b:e7:40:08:
8b:cb:b9:8a:76:75:ee:f1:92:ea:ee:50:cf:6a:51:
fa:a4:4d:13:a4:4a:c2:61:c1:b6:34:07:e3:e1:83:
ef:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5C:F2:5B:27:8B:9D:F4:62:90:45:8F:89:8A:C8:DF:2E:BA:AD:09
X509v3 Authority Key Identifier:
keyid:83:9A:9A:1B:7E:11:FD:E7:7E:4E:1F:57:FF:11:86:4C:EE:21:F1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5qaG34R_ed-Th9X_xGGTO4h8WU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/jlzyWyeLnfRikEWPiYrI3y66rQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.105.112.0/21
185.111.112.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:01:c8:07:85:4a:52:04:0c:65:f4:40:8c:d7:99:e8:b2:6f:
83:4a:be:69:5c:7e:1e:26:1a:dc:b0:9e:48:3b:91:75:84:18:
b5:5b:79:19:7e:6e:1b:66:3a:77:8e:06:3b:41:88:dc:c7:a3:
a1:a3:5c:f9:4e:12:be:05:bb:d6:01:13:22:83:04:29:54:be:
18:45:02:a3:3d:65:2e:96:99:3a:31:a9:ea:6a:3f:b4:cf:54:
ab:d8:33:48:4b:91:45:44:9d:36:7d:c6:a5:85:63:04:b4:f0:
82:98:e2:1e:3f:d1:de:5f:e2:4f:25:24:25:b0:e2:5f:22:69:
98:a9:8d:4f:f9:34:cf:ec:d5:75:27:3f:22:3c:5d:bb:e4:fc:
fa:e5:06:39:1d:0a:17:b8:3a:d8:a7:6a:30:f3:e9:7e:20:69:
9e:9d:c3:5b:77:27:48:16:f6:df:d2:3e:84:cb:34:4d:3e:8d:
3b:13:b7:b8:93:97:c8:b3:0b:ff:f9:99:6e:a2:60:57:61:8a:
ac:20:3e:b3:1a:fd:e9:38:0f:28:ac:d3:52:3c:7f:2c:f4:e3:
47:b7:8a:e9:de:0a:e4:3d:81:31:a1:6e:d9:68:b7:c8:fb:f7:
a3:50:4c:34:28:e9:da:80:3a:a7:0c:81:09:ba:30:ce:5d:d2:
dc:54:d8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:57:33 2025 by rpki-client