Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5f8d8b-4d3e-4e0d-8e2c-1bfbe10d4849/1/JoAWYzosur__gpz4zflBBcSYJgM.roa
File: JoAWYzosur__gpz4zflBBcSYJgM.roa (raw, json)
Hash identifier: 9Cl/dv3HRXlbFlF+IauRrrkitYKJm6Tn2VgfqN9jS4Q=
Subject key identifier: 26:80:16:63:3A:2C:BA:BF:FF:82:9C:F8:CD:F9:41:05:C4:98:26:03
Certificate issuer: /CN=78da3f739ca082ffe887f70306e7fc7484606ce2
Certificate serial: 019421B214E2895345EEB2AFA051F921DA68
Authority key identifier: 78:DA:3F:73:9C:A0:82:FF:E8:87:F7:03:06:E7:FC:74:84:60:6C:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNo_c5yggv_oh_cDBuf8dIRgbOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5f8d8b-4d3e-4e0d-8e2c-1bfbe10d4849/1/JoAWYzosur__gpz4zflBBcSYJgM.roa
Signing time: Wed 01 Jan 2025 11:48:26 +0000
ROA not before: Wed 01 Jan 2025 11:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15879
IP address blocks: 5.226.40.0/21 maxlen: 24
46.255.104.0/21 maxlen: 24
77.245.80.0/20 maxlen: 24
80.246.176.0/20 maxlen: 24
81.24.48.0/20 maxlen: 24
82.201.0.0/17 maxlen: 24
83.219.64.0/19 maxlen: 24
87.250.128.0/19 maxlen: 24
93.188.248.0/21 maxlen: 24
94.247.192.0/21 maxlen: 24
185.28.148.0/22 maxlen: 24
185.55.128.0/22 maxlen: 24
193.91.48.0/20 maxlen: 24
193.189.134.0/24 maxlen: 24
194.105.138.0/23 maxlen: 24
212.204.192.0/18 maxlen: 24
213.130.160.0/19 maxlen: 24
213.133.32.0/19 maxlen: 24
213.197.192.0/18 maxlen: 24
213.206.64.0/18 maxlen: 24
217.115.192.0/20 maxlen: 24
217.148.80.0/20 maxlen: 24
217.149.64.0/20 maxlen: 24
217.194.96.0/19 maxlen: 24
2001:67c:1a4::/48 maxlen: 48
2001:898::/29 maxlen: 48
2001:9a0::/32 maxlen: 48
2001:14a0::/32 maxlen: 48
2001:40e0::/32 maxlen: 48
2a02:f18::/32 maxlen: 48
2a02:f30::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:14:e2:89:53:45:ee:b2:af:a0:51:f9:21:da:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78da3f739ca082ffe887f70306e7fc7484606ce2
Validity
Not Before: Jan 1 11:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=268016633a2cbabfff829cf8cdf94105c4982603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:de:2f:21:f4:26:0c:d6:03:b9:ad:27:e1:a1:
12:dd:c1:45:ac:18:65:75:f6:f7:85:4a:c0:44:f4:
79:89:16:c9:64:5c:3f:be:1f:83:4e:48:c2:45:12:
11:7e:6a:e8:c5:ed:6e:d0:9e:c3:4a:88:af:74:81:
10:e8:4b:2a:90:46:83:e3:fe:2b:53:1d:a8:9c:bb:
24:a0:92:a5:b2:d8:ed:e1:ed:90:a6:51:1e:85:6b:
9d:07:2a:73:76:4d:fe:da:fa:62:8f:3e:bc:a7:5f:
2f:35:7e:e4:ca:02:bc:aa:79:94:1a:c7:e2:0f:9d:
fe:3a:e6:c4:1c:e9:b2:56:3d:10:87:43:09:ff:13:
10:c9:d1:73:cd:c1:fe:36:7a:f2:f4:54:d1:44:7d:
47:3a:3b:86:bd:bc:5c:85:62:d7:29:83:2a:00:f0:
28:c5:ed:64:69:bb:bf:6b:53:79:40:45:55:82:5c:
a9:ae:97:c6:3d:b5:56:6f:75:67:86:08:29:8e:09:
98:44:ef:48:84:45:4a:16:2a:04:0f:65:19:6f:81:
8d:bd:ab:40:9f:d9:1a:a6:0a:67:8c:b2:f8:72:bd:
e0:fb:4e:dc:0e:ef:c0:10:a5:0a:f0:7e:71:cc:7d:
91:0d:f9:37:ab:87:a1:10:3e:82:be:e7:82:12:e4:
3e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:80:16:63:3A:2C:BA:BF:FF:82:9C:F8:CD:F9:41:05:C4:98:26:03
X509v3 Authority Key Identifier:
keyid:78:DA:3F:73:9C:A0:82:FF:E8:87:F7:03:06:E7:FC:74:84:60:6C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNo_c5yggv_oh_cDBuf8dIRgbOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5f8d8b-4d3e-4e0d-8e2c-1bfbe10d4849/1/JoAWYzosur__gpz4zflBBcSYJgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5f8d8b-4d3e-4e0d-8e2c-1bfbe10d4849/1/eNo_c5yggv_oh_cDBuf8dIRgbOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.40.0/21
46.255.104.0/21
77.245.80.0/20
80.246.176.0/20
81.24.48.0/20
82.201.0.0/17
83.219.64.0/19
87.250.128.0/19
93.188.248.0/21
94.247.192.0/21
185.28.148.0/22
185.55.128.0/22
193.91.48.0/20
193.189.134.0/24
194.105.138.0/23
212.204.192.0/18
213.130.160.0/19
213.133.32.0/19
213.197.192.0/18
213.206.64.0/18
217.115.192.0/20
217.148.80.0/20
217.149.64.0/20
217.194.96.0/19
IPv6:
2001:67c:1a4::/48
2001:898::/29
2001:9a0::/32
2001:14a0::/32
2001:40e0::/32
2a02:f18::/32
2a02:f30::/32
Signature Algorithm: sha256WithRSAEncryption
5b:97:01:a7:67:12:f8:13:55:fe:05:4f:c9:3d:01:7c:06:86:
96:41:4e:15:06:ad:a8:6b:1f:98:d5:3d:96:92:1e:72:33:16:
e9:24:ba:6f:32:eb:e7:15:35:e8:1d:28:ea:7c:d0:b1:6d:1c:
cb:5d:82:15:26:01:7b:b0:56:ba:35:5f:a8:0e:13:dd:4a:b2:
53:34:0f:78:b2:a0:0e:00:3a:d8:b9:5b:be:95:0b:9e:07:fb:
c2:6a:4f:49:99:cc:5b:06:c3:a8:1b:a9:ea:02:75:06:81:f4:
5a:47:74:44:0d:e4:ea:e4:e7:fc:87:85:c7:11:d1:7c:66:77:
fb:7f:cd:05:71:f7:bb:39:2a:6f:34:d7:6c:d6:df:60:2d:a8:
13:15:4a:db:3a:49:14:48:4e:1b:c3:0f:22:c8:fa:48:68:ea:
11:21:5e:81:91:a4:12:ae:87:16:b6:17:93:b5:70:b4:75:55:
20:72:cb:79:fb:30:0e:e6:7a:a5:15:eb:ae:0f:d3:02:42:b2:
6b:86:ef:cf:0b:65:88:8a:23:67:c2:e4:bf:d5:09:46:d1:cc:
8a:ef:bb:31:60:13:fd:00:61:1a:65:04:8d:3b:c8:d8:5e:4b:
9b:1f:e6:42:f6:b0:9d:45:50:f5:db:34:e9:4d:3c:6d:8b:83:
f6:36:4b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:31 2025 by rpki-client