Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/mJ9cTjl4hK_z22sCJCPKYGmNWpo.roa
File: mJ9cTjl4hK_z22sCJCPKYGmNWpo.roa (raw, json)
Hash identifier: 32O0+tV1Zxq+Xc5IaWObygGAy/okE3wBYMmO6cewcmk=
Subject key identifier: 98:9F:5C:4E:39:78:84:AF:F3:DB:6B:02:24:23:CA:60:69:8D:5A:9A
Certificate issuer: /CN=5ab1996515884434b87882b5b972a6e529ffb00b
Certificate serial: 019423D6AB618ED631EFEBA6BC9A87B31BFD
Authority key identifier: 5A:B1:99:65:15:88:44:34:B8:78:82:B5:B9:72:A6:E5:29:FF:B0:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/mJ9cTjl4hK_z22sCJCPKYGmNWpo.roa
Signing time: Wed 01 Jan 2025 21:47:38 +0000
ROA not before: Wed 01 Jan 2025 21:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209103
IP address blocks: 185.159.157.0/24 maxlen: 24
185.159.159.0/24 maxlen: 24
2a07:b941:e10::/44 maxlen: 44
2a07:b941:e20::/44 maxlen: 44
2a07:b941:e40::/44 maxlen: 44
2a07:b941:f00::/44 maxlen: 44
2a07:b941:f10::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ab:61:8e:d6:31:ef:eb:a6:bc:9a:87:b3:1b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ab1996515884434b87882b5b972a6e529ffb00b
Validity
Not Before: Jan 1 21:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=989f5c4e397884aff3db6b022423ca60698d5a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:44:a8:af:28:17:e1:58:cc:2f:51:8a:f0:01:
40:fb:5a:0c:11:1b:f8:1e:47:13:11:a9:69:85:29:
cd:a0:5b:db:1c:fa:75:23:11:fa:a2:99:8f:de:4c:
82:a5:20:38:5e:85:58:f5:0a:5a:bf:19:f2:e3:2a:
16:d1:36:f6:8f:8a:69:35:e5:a0:ae:f8:ca:4c:30:
72:77:22:ac:0f:e7:ae:34:e4:dd:72:39:38:28:0d:
eb:01:f7:8c:53:a7:d1:11:a5:cc:df:8f:1f:8d:ab:
09:86:19:68:19:18:d5:59:c2:8f:91:ab:0b:f1:30:
7d:db:e6:16:4d:cb:db:ea:d9:3c:dd:81:97:3a:fc:
fe:d7:00:d2:21:63:6c:4b:d9:50:47:e4:a7:7d:98:
8d:14:91:70:7a:0f:0a:e6:98:99:d9:26:d7:0e:72:
ab:c2:47:4b:fc:60:01:5a:65:a1:ea:0d:db:78:ac:
e3:aa:36:87:f8:4c:70:16:77:7e:3e:bb:70:c2:30:
94:29:2c:c0:f0:c1:31:03:e7:8b:4f:97:67:8e:d9:
97:ec:df:cd:63:68:5e:93:92:ed:1c:6d:bc:0c:e9:
6f:49:d9:e1:7f:15:60:51:4c:d1:be:62:9f:ba:99:
f8:85:30:ec:a9:72:b7:1e:be:23:b3:dd:c4:b1:93:
b9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9F:5C:4E:39:78:84:AF:F3:DB:6B:02:24:23:CA:60:69:8D:5A:9A
X509v3 Authority Key Identifier:
keyid:5A:B1:99:65:15:88:44:34:B8:78:82:B5:B9:72:A6:E5:29:FF:B0:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/mJ9cTjl4hK_z22sCJCPKYGmNWpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.157.0/24
185.159.159.0/24
IPv6:
2a07:b941:e10::-2a07:b941:e2f:ffff:ffff:ffff:ffff:ffff
2a07:b941:e40::/44
2a07:b941:f00::/43
Signature Algorithm: sha256WithRSAEncryption
26:29:6b:c2:9d:98:11:a9:b1:bc:ed:9b:37:7b:ab:da:6d:68:
37:8e:bd:dc:ef:d2:83:f2:97:b8:68:9f:5c:20:7a:3e:8b:16:
4c:12:45:d1:17:f4:c2:37:10:9a:c1:bb:3e:b7:b1:d7:c5:a8:
1c:3a:8e:0a:7f:5a:dc:a4:fe:f9:47:fa:8a:b9:3d:22:30:32:
22:64:ed:bd:4f:1a:b3:6a:c5:73:82:0e:92:92:1c:ef:a2:1b:
5d:ad:88:7e:ee:7c:4f:67:66:02:b8:1e:d6:52:d6:62:00:3b:
d9:23:01:97:7f:bb:99:14:0e:0f:23:f9:db:c3:4a:7f:75:cd:
23:bf:08:1a:42:44:50:01:f8:61:37:80:01:d9:f4:99:ce:3e:
54:e7:b4:14:58:d9:4a:cc:ee:4a:a6:16:3e:8a:4b:1c:d7:4a:
1c:b7:8a:dc:02:63:b0:c0:76:20:4e:20:35:66:a0:42:8c:10:
86:b1:83:a1:ce:45:49:60:4a:44:b8:e3:b0:c1:59:dc:57:6f:
be:8d:1d:9b:76:26:0a:f3:b5:73:fc:a6:65:3e:8a:3d:a0:77:
cf:8c:6b:a7:71:6a:21:00:d2:24:bd:41:12:61:18:f4:75:3b:
ee:e4:ac:6c:b7:da:83:1e:d3:cf:87:54:12:59:d1:84:10:79:
80:bd:c0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:56 2025 by rpki-client