Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/JA1Qmok16UVDdfZh6XKyNHXDBms.roa
File: JA1Qmok16UVDdfZh6XKyNHXDBms.roa (raw, json)
Hash identifier: R2I0tDS2SffmNY3pvYLLZlvv4NZOrPOW0QqVh2PyubA=
Subject key identifier: 24:0D:50:9A:89:35:E9:45:43:75:F6:61:E9:72:B2:34:75:C3:06:6B
Certificate issuer: /CN=2a8bdc9c127fb718e240dfb2756f5202036fe3d5
Certificate serial: 01941FFA58048B4FEA8D9D0519E4362B26E3
Authority key identifier: 2A:8B:DC:9C:12:7F:B7:18:E2:40:DF:B2:75:6F:52:02:03:6F:E3:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/JA1Qmok16UVDdfZh6XKyNHXDBms.roa
Signing time: Wed 01 Jan 2025 03:48:07 +0000
ROA not before: Wed 01 Jan 2025 03:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207390
IP address blocks: 185.151.248.0/22 maxlen: 22
2a07:7840::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:58:04:8b:4f:ea:8d:9d:05:19:e4:36:2b:26:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a8bdc9c127fb718e240dfb2756f5202036fe3d5
Validity
Not Before: Jan 1 03:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=240d509a8935e9454375f661e972b23475c3066b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a5:0a:99:c3:03:3b:d1:f9:93:98:80:f2:44:
60:8c:0d:25:c2:91:12:80:7c:67:92:c0:47:db:12:
10:94:8e:cf:71:00:fd:54:fa:c7:e3:03:f7:5d:60:
8e:17:ce:30:eb:65:90:64:94:59:2a:06:49:36:e3:
37:97:d4:35:69:13:9d:38:a0:9b:a5:22:a7:d7:6b:
8a:0a:d6:3f:0e:37:a2:ac:e4:ad:89:cf:bf:fe:54:
66:11:e0:df:08:e9:1c:0b:d6:dc:cd:29:81:07:08:
e2:a7:da:c3:c5:2a:b6:f0:43:c4:04:3b:60:05:06:
dd:34:00:c1:80:e0:1c:02:4f:a8:20:dc:e2:a6:9c:
76:43:a2:50:30:04:6c:21:c5:e3:e7:82:42:1d:45:
6f:aa:25:f4:79:01:02:9d:b8:89:5e:13:7f:7f:62:
43:a5:42:09:c2:db:ca:ea:7a:59:a1:9f:ca:1f:89:
3d:ff:51:7a:9a:62:5c:3e:71:27:79:b1:b6:c2:c0:
31:3a:82:b5:f6:5e:5b:f8:61:8d:d9:24:97:e0:65:
18:d1:98:6f:50:e4:7a:a1:73:68:bc:14:f5:7b:4d:
08:4d:fa:55:ec:20:19:68:cc:ee:1c:8b:5c:26:45:
72:4c:c7:05:70:17:b1:f4:6b:0d:3b:09:68:0c:81:
30:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0D:50:9A:89:35:E9:45:43:75:F6:61:E9:72:B2:34:75:C3:06:6B
X509v3 Authority Key Identifier:
keyid:2A:8B:DC:9C:12:7F:B7:18:E2:40:DF:B2:75:6F:52:02:03:6F:E3:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/JA1Qmok16UVDdfZh6XKyNHXDBms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.248.0/22
IPv6:
2a07:7840::/29
Signature Algorithm: sha256WithRSAEncryption
80:f0:6c:eb:7d:ce:2c:99:9c:fd:20:83:0e:51:61:bf:60:27:
96:d5:c9:d0:72:84:54:53:7c:bf:5c:68:bf:5b:b5:5f:4e:a3:
e1:52:9f:ab:e3:7d:41:5f:d8:47:f6:f7:ad:03:74:17:e1:70:
da:63:3a:40:6f:10:bb:7f:bc:29:b7:3d:74:61:c1:35:99:31:
3b:7a:b1:78:2d:04:66:59:a1:dd:ef:db:2d:8d:42:8e:1e:4b:
ed:46:50:4a:34:c4:40:91:54:b4:7f:0e:1f:ac:05:8e:f2:7c:
94:4e:40:a2:cb:8a:a2:fb:90:91:f0:8b:98:04:c9:64:71:83:
b1:e0:a8:8f:af:6f:59:ec:2b:f8:b1:1a:b2:8f:af:e8:29:22:
4a:ce:cf:4d:2c:aa:2a:19:b6:44:86:1d:8f:31:a6:d8:ef:b7:
76:bf:e0:ee:21:72:9a:7d:df:fb:68:3d:28:e3:26:2c:e2:32:
ee:e5:fa:d2:38:32:cc:b2:27:d2:29:f4:de:7e:d2:f5:1e:ef:
95:48:51:7c:a3:34:43:49:9e:9d:a3:86:04:b1:8c:3c:89:6b:
27:00:48:4e:8c:e0:23:90:ed:fa:04:1d:c7:e7:ef:ad:93:59:
8d:c8:c3:91:62:47:37:3e:a9:b7:3f:37:f2:44:09:c3:a3:cd:
fb:0c:f4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:57:18 2025 by rpki-client