Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/jjkw7d-vM1Kuz3VrP2qfo9DvNCo.roa
File: jjkw7d-vM1Kuz3VrP2qfo9DvNCo.roa (raw, json)
Hash identifier: VJTPRYmj0bLLGoSUyYkDz754dQcYj27q2IKg/a+56Gg=
Subject key identifier: 8E:39:30:ED:DF:AF:33:52:AE:CF:75:6B:3F:6A:9F:A3:D0:EF:34:2A
Certificate issuer: /CN=66e3ed06e88e5591d9096676951555c0dc535c19
Certificate serial: 0194228DF035401CFF8CF050DB58FBBCC103
Authority key identifier: 66:E3:ED:06:E8:8E:55:91:D9:09:66:76:95:15:55:C0:DC:53:5C:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/jjkw7d-vM1Kuz3VrP2qfo9DvNCo.roa
Signing time: Wed 01 Jan 2025 15:48:34 +0000
ROA not before: Wed 01 Jan 2025 15:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201020
IP address blocks: 185.28.176.0/24 maxlen: 24
185.28.179.0/24 maxlen: 24
2a04:4000::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:f0:35:40:1c:ff:8c:f0:50:db:58:fb:bc:c1:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66e3ed06e88e5591d9096676951555c0dc535c19
Validity
Not Before: Jan 1 15:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e3930eddfaf3352aecf756b3f6a9fa3d0ef342a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:52:39:9e:e2:17:8d:bc:50:a3:b0:22:1f:93:
69:41:88:2d:a7:73:9d:92:d8:92:5e:cc:8e:f0:49:
52:b3:85:dd:61:45:87:de:c3:d0:ca:04:e1:0d:a4:
d2:7d:a2:4f:1c:ca:8e:e0:78:89:8f:02:18:90:88:
c6:ef:20:bd:17:85:cb:af:56:44:37:e7:e3:39:e4:
b3:ba:2f:e3:e6:da:13:8b:19:f9:de:10:81:53:43:
61:19:6a:f0:92:30:1c:23:3f:bd:5c:c3:9e:a5:0b:
67:ca:26:87:48:d0:3c:e8:35:7e:d8:ca:2f:05:fb:
9e:63:11:51:ec:67:ec:0b:63:44:86:4e:b7:bc:23:
94:56:ef:38:82:d9:27:36:f1:a5:67:74:6e:f6:35:
aa:ae:8c:95:46:db:a1:70:cc:30:89:75:06:a3:69:
25:87:88:20:94:52:db:af:c6:8c:db:4b:b0:51:83:
1e:b9:44:97:2c:40:b6:5f:83:ab:b2:bd:8f:f3:82:
dc:5d:04:47:b0:56:92:31:ac:c1:7e:e9:71:8c:65:
1b:c3:91:0c:70:bc:d9:08:c8:37:e0:95:7c:91:58:
db:48:85:ef:a7:cd:cb:b3:c2:89:6d:26:3c:1a:9c:
df:f1:4d:4b:13:34:71:4e:18:9c:32:f0:4d:31:48:
e4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:39:30:ED:DF:AF:33:52:AE:CF:75:6B:3F:6A:9F:A3:D0:EF:34:2A
X509v3 Authority Key Identifier:
keyid:66:E3:ED:06:E8:8E:55:91:D9:09:66:76:95:15:55:C0:DC:53:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/jjkw7d-vM1Kuz3VrP2qfo9DvNCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.176.0/24
185.28.179.0/24
IPv6:
2a04:4000::/29
Signature Algorithm: sha256WithRSAEncryption
3d:4c:43:e4:5d:16:6f:8e:5e:e2:d1:86:c0:6a:54:c8:b8:94:
1a:9d:b4:2d:35:9d:98:25:e5:91:7d:d7:37:bc:cf:06:a9:89:
de:a3:d8:d5:6f:e3:90:df:fb:8e:a3:3d:c1:8e:44:ea:9d:38:
5c:00:5b:4a:b3:4c:db:77:18:8e:8f:a2:d1:b7:1b:13:dd:e8:
b1:8f:29:5c:63:7b:60:4a:5c:29:17:dd:7b:d5:8e:13:e1:1c:
b1:74:b7:e6:4c:ea:c3:2b:e8:a9:8d:02:35:cf:af:d4:8e:33:
9f:4d:99:5d:14:5d:19:47:ca:0d:ff:43:6a:95:40:c2:c8:cc:
f2:e8:cd:42:e7:ea:8e:6c:04:c2:44:27:7f:ad:af:d8:46:5b:
d6:ce:ee:3f:d1:9e:d5:54:fa:16:d5:11:64:87:0b:d0:8f:39:
ea:d1:44:7e:f7:46:34:ce:4a:ac:45:30:6a:ba:63:6d:55:8f:
15:0a:d7:72:07:1d:73:c8:b2:49:60:5b:d0:6c:27:2b:15:60:
69:02:58:37:2f:2d:7a:9f:f5:d2:1c:8e:eb:fa:40:8c:d4:d7:
1c:80:f9:9e:a0:d4:1b:d7:0d:8f:f0:e3:1e:b5:e1:be:ee:02:
5a:64:53:79:9a:39:2b:7a:38:64:aa:1c:10:76:5b:27:2a:e2:
e3:c8:c5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:58:24 2025 by rpki-client