Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/J7EMvjCrDCSEaNvEXQjzbwryII4.roa
File: J7EMvjCrDCSEaNvEXQjzbwryII4.roa (raw, json)
Hash identifier: Ak6AJOV8w0m5lQCAa41zEyYCpJIBSURSyT+w9pihP/8=
Subject key identifier: 27:B1:0C:BE:30:AB:0C:24:84:68:DB:C4:5D:08:F3:6F:0A:F2:20:8E
Certificate issuer: /CN=6d08a1f4c385f3a7b62984d53e81665a995410f3
Certificate serial: 019422FAF739AF826B74C2163D6DB62C9596
Authority key identifier: 6D:08:A1:F4:C3:85:F3:A7:B6:29:84:D5:3E:81:66:5A:99:54:10:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQih9MOF86e2KYTVPoFmWplUEPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/J7EMvjCrDCSEaNvEXQjzbwryII4.roa
Signing time: Wed 01 Jan 2025 17:47:40 +0000
ROA not before: Wed 01 Jan 2025 17:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42511
IP address blocks: 83.143.156.0/22 maxlen: 24
109.95.72.0/21 maxlen: 24
194.143.150.0/23 maxlen: 23
194.143.150.0/24 maxlen: 24
194.143.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:f7:39:af:82:6b:74:c2:16:3d:6d:b6:2c:95:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d08a1f4c385f3a7b62984d53e81665a995410f3
Validity
Not Before: Jan 1 17:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27b10cbe30ab0c248468dbc45d08f36f0af2208e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:21:9a:12:d2:64:23:d1:1d:0b:07:dc:0d:76:
f0:a8:f0:0b:2e:36:9d:5d:b4:0a:ec:63:66:a0:9f:
66:92:07:8b:b3:bb:99:4b:34:bf:1c:74:0e:fa:d0:
65:ae:d9:64:12:2b:97:9c:ea:42:d3:fc:b3:36:54:
00:5c:e4:f5:ee:52:3c:e8:cd:e9:ad:24:7e:57:37:
a6:2e:8e:cf:db:0c:82:66:6d:a6:87:01:bc:4e:a3:
8d:8b:11:3e:d2:ad:11:d7:fe:46:5b:af:1c:a4:dc:
e2:56:35:03:73:92:93:ec:1e:2f:57:24:f2:c5:c9:
90:ee:12:96:f5:80:30:f4:b7:63:97:96:0e:c5:7d:
2e:d0:0f:db:74:ec:1b:7f:d6:f4:82:6b:e6:2c:3c:
cb:4b:a1:6c:46:05:3a:53:2a:b3:6e:76:5c:36:5d:
2f:eb:4c:17:ff:3c:0a:e7:99:dc:78:32:a9:c8:61:
7b:e0:4d:3b:fb:68:14:79:69:98:70:0c:19:53:9c:
31:4a:fa:22:64:7c:9a:cf:79:46:63:33:f7:b0:89:
22:ce:3b:0d:20:28:40:0d:8f:39:74:94:84:07:50:
e1:8c:61:4e:be:a5:c6:85:24:9e:9f:6c:5b:3d:a9:
c6:4d:fb:ae:92:73:f2:74:e7:cf:ab:99:8e:0b:60:
dc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B1:0C:BE:30:AB:0C:24:84:68:DB:C4:5D:08:F3:6F:0A:F2:20:8E
X509v3 Authority Key Identifier:
keyid:6D:08:A1:F4:C3:85:F3:A7:B6:29:84:D5:3E:81:66:5A:99:54:10:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQih9MOF86e2KYTVPoFmWplUEPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/J7EMvjCrDCSEaNvEXQjzbwryII4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/bQih9MOF86e2KYTVPoFmWplUEPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.143.156.0/22
109.95.72.0/21
194.143.150.0/23
Signature Algorithm: sha256WithRSAEncryption
49:82:e4:b3:15:49:85:5e:6c:85:9d:5c:8f:0d:bc:54:f8:c2:
f4:23:19:93:40:92:63:8c:35:ec:95:bf:7a:35:ba:8d:8a:29:
3b:c2:32:8c:0e:61:50:15:61:90:31:41:3f:76:9d:ce:b5:dc:
fb:32:d7:49:e1:f0:1c:ce:f9:b4:db:34:d8:33:31:07:16:e6:
76:cc:8e:92:44:e8:92:51:16:98:c9:0f:8b:2e:13:3c:f6:69:
10:80:3c:91:e1:84:44:db:eb:51:8b:1f:10:df:ae:d4:84:a3:
7a:f4:32:69:14:3f:04:a9:5c:95:59:21:b4:65:bd:84:ee:c7:
4c:12:a1:26:bc:1d:78:d5:14:03:00:66:bf:9e:15:f2:41:e6:
bb:40:a8:cd:ea:a5:1c:76:ec:b7:0b:03:57:64:cc:78:75:65:
ed:29:b4:c1:71:59:57:3f:e5:7f:77:e9:3c:72:44:f8:9e:35:
84:bd:8f:77:48:e6:d3:e2:be:e7:4f:33:3a:9c:8f:57:4f:c1:
1f:9f:0d:42:1a:e3:3d:3d:14:2b:38:58:cd:63:52:02:78:02:
dc:6a:50:5d:13:65:f6:1d:6c:8f:18:d1:74:42:97:3b:c7:55:
fb:ac:ab:e4:6a:18:3b:7a:0a:a0:4c:6e:9f:b5:07:de:3a:eb:
49:96:42:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:28:43 2025 by rpki-client