Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/jmPpCt20gyt7K42Iosl951LnaB8.roa
File: jmPpCt20gyt7K42Iosl951LnaB8.roa (raw, json)
Hash identifier: pgMiVWt2zP5Kw215EB82Tgo4s/CVNPF5riSUMPLjECQ=
Subject key identifier: 8E:63:E9:0A:DD:B4:83:2B:7B:2B:8D:88:A2:C9:7D:E7:52:E7:68:1F
Certificate issuer: /CN=169f4ed6620c8960521fbb81ff72e837dc0038af
Certificate serial: 019425214C6071E95318E21BBE1B8784DA1E
Authority key identifier: 16:9F:4E:D6:62:0C:89:60:52:1F:BB:81:FF:72:E8:37:DC:00:38:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/jmPpCt20gyt7K42Iosl951LnaB8.roa
Signing time: Thu 02 Jan 2025 03:48:46 +0000
ROA not before: Thu 02 Jan 2025 03:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25482
IP address blocks: 193.151.240.0/22 maxlen: 22
193.151.240.0/23 maxlen: 23
193.151.240.0/24 maxlen: 24
193.151.241.0/24 maxlen: 24
193.151.242.0/23 maxlen: 23
193.151.242.0/24 maxlen: 24
193.151.243.0/24 maxlen: 24
2001:678:2d0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:4c:60:71:e9:53:18:e2:1b:be:1b:87:84:da:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=169f4ed6620c8960521fbb81ff72e837dc0038af
Validity
Not Before: Jan 2 03:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e63e90addb4832b7b2b8d88a2c97de752e7681f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:97:d3:20:80:2a:3c:d1:c0:9d:36:8b:2b:13:
6a:0a:10:af:31:8d:49:3d:a3:e4:ae:7b:e4:17:bd:
cc:25:c7:92:74:55:5e:49:cb:89:eb:79:5e:02:54:
de:f9:13:4a:a7:86:3c:ea:1e:c4:23:cf:8d:d1:27:
e3:1b:c5:9d:4b:3c:59:0e:79:af:9c:e5:7a:5d:8e:
23:dc:10:65:d8:09:20:47:7d:e2:0a:79:75:03:ce:
26:20:a8:96:4b:41:85:02:58:97:42:06:6d:4d:1e:
fc:7c:49:d5:49:e9:ba:6d:32:8a:29:31:44:c8:95:
4d:31:92:f7:b6:99:f3:a5:29:b2:5e:79:da:14:c7:
da:8e:b0:77:71:24:ba:3e:52:94:fa:90:ab:b0:42:
bd:bc:8f:aa:ed:f1:4b:0f:ca:13:78:0b:35:aa:57:
f8:01:89:64:29:46:c5:63:73:66:b6:e8:a0:7d:85:
06:48:42:c9:2d:83:df:26:9e:86:fe:d3:cc:77:03:
c5:ef:ba:f4:a6:1d:c7:fc:cc:2b:e0:17:a8:d9:72:
32:05:c2:a2:c3:23:82:42:20:4c:7d:d3:70:07:06:
bd:0b:92:a9:45:32:0f:79:09:9c:ea:95:36:fe:85:
4f:dc:54:6d:8e:7e:28:d1:e0:e6:0d:af:9a:2c:7a:
4e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:63:E9:0A:DD:B4:83:2B:7B:2B:8D:88:A2:C9:7D:E7:52:E7:68:1F
X509v3 Authority Key Identifier:
keyid:16:9F:4E:D6:62:0C:89:60:52:1F:BB:81:FF:72:E8:37:DC:00:38:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/jmPpCt20gyt7K42Iosl951LnaB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.240.0/22
IPv6:
2001:678:2d0::/48
Signature Algorithm: sha256WithRSAEncryption
8d:b1:ad:3f:6d:7a:31:fb:67:f4:d6:6f:1a:96:d6:bc:94:30:
76:69:6d:a6:3b:68:a5:84:0d:3e:7c:bd:c1:e2:7a:2b:e0:bf:
3b:b2:91:dd:b3:4a:fb:f8:73:2a:d4:17:33:87:ae:fe:a4:16:
b9:bd:33:e1:0c:e4:5b:3e:0c:b0:92:01:0b:23:6b:4c:f5:4c:
0e:4c:8b:1d:3b:0e:dc:98:59:94:6a:72:5e:4d:27:ad:3c:24:
a8:59:d0:df:a7:84:ab:cd:ff:02:3b:01:a6:59:f5:d9:32:5f:
e2:d5:05:fc:ed:5e:98:6a:40:90:81:df:b6:5e:5f:61:f4:0d:
92:c1:16:0d:d6:a3:62:bc:1e:ef:d8:d0:fa:8f:c1:e0:fb:4d:
08:c7:ea:70:ea:28:52:8e:be:7f:46:68:fb:64:b4:46:ab:87:
fa:9c:35:9c:e2:e4:e8:ce:49:b0:6d:a8:20:1f:92:b9:20:50:
99:0d:f6:9c:dc:d1:02:c0:34:a1:ee:05:ba:c7:3e:9d:38:79:
52:23:5d:15:3e:fa:56:e8:cb:7d:27:d2:7a:ea:c3:9c:4f:32:
54:e3:88:10:55:4c:e9:81:2e:cb:a4:2d:49:a7:2c:a6:95:f4:
e1:e7:14:44:f7:57:38:cb:bd:01:73:b4:30:c4:6d:76:ee:6a:
72:66:0b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:37:51 2025 by rpki-client