Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/JG7A9PBZ50-Z7_g1DJ-Z_hL-P1A.roa
File: JG7A9PBZ50-Z7_g1DJ-Z_hL-P1A.roa (raw, json)
Hash identifier: XmaQ+8hTPCiIflAuUAobDYo82HdSJWJNk4w2Tld/59w=
Subject key identifier: 24:6E:C0:F4:F0:59:E7:4F:99:EF:F8:35:0C:9F:99:FE:12:FE:3F:50
Certificate issuer: /CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Certificate serial: 01942068257850F85D52A9E2A069B5D579E8
Authority key identifier: 66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/JG7A9PBZ50-Z7_g1DJ-Z_hL-P1A.roa
Signing time: Wed 01 Jan 2025 05:48:03 +0000
ROA not before: Wed 01 Jan 2025 05:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34170
IP address blocks: 80.69.48.0/24 maxlen: 24
80.69.49.0/24 maxlen: 24
80.69.50.0/24 maxlen: 24
80.69.51.0/24 maxlen: 24
80.69.53.0/24 maxlen: 24
80.69.56.0/24 maxlen: 24
80.69.57.0/24 maxlen: 24
80.69.60.0/24 maxlen: 24
91.135.240.0/24 maxlen: 24
91.135.241.0/24 maxlen: 24
91.135.242.0/24 maxlen: 24
91.135.243.0/24 maxlen: 24
91.135.244.0/24 maxlen: 24
91.135.252.0/24 maxlen: 24
91.135.253.0/24 maxlen: 24
92.39.90.0/24 maxlen: 24
92.39.91.0/24 maxlen: 24
92.39.92.0/24 maxlen: 24
92.39.93.0/24 maxlen: 24
92.39.94.0/24 maxlen: 24
158.181.34.0/24 maxlen: 24
158.181.37.0/24 maxlen: 24
158.181.38.0/24 maxlen: 24
158.181.39.0/24 maxlen: 24
158.181.44.0/23 maxlen: 23
158.181.46.0/23 maxlen: 23
185.92.224.0/24 maxlen: 24
185.105.196.0/24 maxlen: 24
185.105.197.0/24 maxlen: 24
185.105.198.0/24 maxlen: 24
185.105.199.0/24 maxlen: 24
212.47.154.0/24 maxlen: 24
212.47.155.0/24 maxlen: 24
212.47.156.0/24 maxlen: 24
212.47.157.0/24 maxlen: 24
212.47.158.0/24 maxlen: 24
2a05:8200::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:25:78:50:f8:5d:52:a9:e2:a0:69:b5:d5:79:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Validity
Not Before: Jan 1 05:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=246ec0f4f059e74f99eff8350c9f99fe12fe3f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:13:90:d1:01:34:11:6b:c3:50:24:b9:e6:f7:
da:b6:6e:a7:ba:bd:03:f4:fc:c8:f1:96:3c:99:7f:
6f:7a:fe:1b:7b:d7:51:ed:26:b9:2b:ef:b2:33:b6:
b0:a4:86:66:b6:ea:28:46:86:44:6a:a6:4a:21:ab:
b6:64:82:e4:f3:70:e7:44:ab:9b:46:0a:fc:93:55:
e1:9b:00:c6:da:5b:a8:47:f7:a0:c4:54:bc:d7:2b:
a7:9a:4d:fa:2d:a8:be:62:df:1d:6a:84:ce:ad:16:
d3:f2:93:50:9b:ed:f4:49:5d:e9:9f:8b:5c:cf:8b:
be:c9:28:9c:fa:52:17:13:7d:7a:ea:36:53:8f:99:
2c:39:42:db:68:41:f7:c1:51:f7:7b:a2:22:d0:46:
c8:11:fd:29:94:d5:b8:76:08:bb:fd:05:8e:10:56:
63:e9:79:d6:bd:ec:10:68:aa:db:13:4e:83:e9:44:
1c:71:8b:41:fd:47:62:c4:1e:fc:13:6d:77:1c:0e:
7b:e4:f9:af:7f:b1:29:0d:3c:73:22:da:7f:1e:c2:
f5:10:b0:0c:5b:6a:f2:89:56:5c:80:80:f6:3b:f9:
04:ce:b9:37:5a:df:f2:14:41:d1:d8:45:e3:69:17:
8a:64:4e:af:58:0c:92:ba:86:b5:af:c1:6c:cc:f0:
17:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:6E:C0:F4:F0:59:E7:4F:99:EF:F8:35:0C:9F:99:FE:12:FE:3F:50
X509v3 Authority Key Identifier:
keyid:66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/JG7A9PBZ50-Z7_g1DJ-Z_hL-P1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.69.48.0/22
80.69.53.0/24
80.69.56.0/23
80.69.60.0/24
91.135.240.0-91.135.244.255
91.135.252.0/23
92.39.90.0-92.39.94.255
158.181.34.0/24
158.181.37.0-158.181.39.255
158.181.44.0/22
185.92.224.0/24
185.105.196.0/22
212.47.154.0-212.47.158.255
IPv6:
2a05:8200::/29
Signature Algorithm: sha256WithRSAEncryption
99:7b:39:0f:80:3d:f0:42:e0:ea:b7:44:74:a1:17:2a:9e:61:
d9:00:32:48:a5:ea:91:cc:7d:b5:25:ab:74:73:1a:97:01:f0:
e4:78:f0:0f:c5:52:b4:01:c4:ce:50:65:82:10:f8:91:77:97:
3b:a6:90:e4:25:ac:e6:ad:c1:ec:c6:44:40:ed:9a:ef:d9:03:
e8:ce:0d:d8:b7:77:9e:18:5e:13:bf:ee:47:f9:68:7e:19:73:
56:fc:0e:c4:73:4e:0d:d5:ae:b5:c2:e5:74:f2:ba:19:e3:e9:
1e:90:f3:76:5c:d9:99:a5:8a:d5:64:d7:77:de:37:8a:cf:b2:
ad:7e:a3:f2:2d:fa:c3:5a:8c:93:ba:9e:c2:ad:be:0f:ed:2b:
77:17:90:c3:2f:d2:31:eb:85:de:85:98:b0:04:76:6f:b5:a6:
78:0e:d7:1b:d0:02:a1:a6:d8:2f:5d:d1:a6:94:75:1f:49:a1:
c1:14:13:ec:c6:3e:9e:75:11:ca:4e:b3:89:f5:a8:e5:7e:e8:
95:c6:aa:e5:58:28:41:bf:64:c2:28:b2:c1:88:2a:2c:eb:32:
27:fe:cd:0f:c2:03:86:00:6f:e8:dd:cc:a2:83:6d:2e:d7:11:
ba:97:03:8f:0b:a0:d2:6c:91:6f:f6:0b:e5:7e:45:a6:6e:1d:
93:4c:a1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:25:11 2025 by rpki-client