Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/7jnl02v03sYUg549kXFE9hZBS9Q.roa
File: 7jnl02v03sYUg549kXFE9hZBS9Q.roa (raw, json)
Hash identifier: vAWHGB1e28ce0D//4raXhcDRmRnXWhQvQ0wU2NiSE9Y=
Subject key identifier: EE:39:E5:D3:6B:F4:DE:C6:14:83:9E:3D:91:71:44:F6:16:41:4B:D4
Certificate issuer: /CN=b8f7f24de3a9e52c94c6ca680312441dd9c08804
Certificate serial: 019427B576A7CCBA0142981C807803EEA098
Authority key identifier: B8:F7:F2:4D:E3:A9:E5:2C:94:C6:CA:68:03:12:44:1D:D9:C0:88:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/7jnl02v03sYUg549kXFE9hZBS9Q.roa
Signing time: Thu 02 Jan 2025 15:49:51 +0000
ROA not before: Thu 02 Jan 2025 15:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20530
IP address blocks: 185.1.103.0/24 maxlen: 24
185.196.12.0/24 maxlen: 24
185.196.13.0/24 maxlen: 24
185.196.15.0/24 maxlen: 24
2001:7f8:49::/48 maxlen: 64
2001:7f8:49::/64 maxlen: 64
2001:7f8:49:1::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:76:a7:cc:ba:01:42:98:1c:80:78:03:ee:a0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8f7f24de3a9e52c94c6ca680312441dd9c08804
Validity
Not Before: Jan 2 15:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee39e5d36bf4dec614839e3d917144f616414bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c0:a1:d6:b1:2c:09:a9:a1:8d:07:5f:79:fa:
a5:75:f3:ba:68:bf:d2:b6:66:37:53:0b:9a:b6:96:
fc:8b:60:d3:6f:c7:87:f3:7b:97:bb:dd:55:2f:62:
bd:03:d9:9a:5c:5e:74:93:b4:8e:40:d9:a9:93:ad:
10:b6:87:81:9b:5c:d3:09:f1:e7:82:92:b3:1f:7d:
c1:da:e4:fa:bf:3c:3f:0f:99:1e:e3:3f:be:05:9f:
b9:ca:19:48:64:f0:8e:8b:35:a7:76:f4:90:93:91:
5e:bc:52:7e:8d:eb:56:c7:59:11:cc:4f:be:d5:95:
cd:0c:5b:90:08:6b:90:2a:5d:22:96:62:89:a7:b7:
51:3f:2b:88:16:07:29:11:b8:f4:66:d9:46:e4:9b:
b6:ad:f9:5f:30:54:46:2d:16:1c:e6:cd:e0:49:48:
fd:e5:31:08:fe:ea:61:03:43:70:a1:56:d1:fd:88:
0b:92:fb:f5:55:d0:d7:f0:4a:39:7f:19:a3:77:7b:
72:a0:0c:0e:d5:7a:72:5f:ea:30:f0:ea:e0:7c:0d:
b2:26:32:5b:76:b9:09:a1:9c:1e:60:6c:60:db:87:
96:ed:e4:3c:ab:2e:b5:24:cf:fa:fe:e2:77:35:54:
94:9d:ef:a8:eb:ef:fd:c1:50:54:7b:0b:80:35:4f:
c4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:39:E5:D3:6B:F4:DE:C6:14:83:9E:3D:91:71:44:F6:16:41:4B:D4
X509v3 Authority Key Identifier:
keyid:B8:F7:F2:4D:E3:A9:E5:2C:94:C6:CA:68:03:12:44:1D:D9:C0:88:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/7jnl02v03sYUg549kXFE9hZBS9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.103.0/24
185.196.12.0/23
185.196.15.0/24
IPv6:
2001:7f8:49::/48
Signature Algorithm: sha256WithRSAEncryption
6d:2e:1f:34:15:dc:66:68:7b:ef:ef:84:21:92:6d:da:89:fc:
d8:56:7c:40:f6:e6:9e:18:5e:0e:c7:66:10:c1:bd:6d:de:e2:
a4:ea:04:88:2c:4c:4e:5e:43:f0:d0:5e:5d:e7:18:33:56:ff:
67:2d:3d:ec:bc:51:a9:5a:aa:67:d6:0e:85:08:02:f5:28:0e:
96:3c:d2:7e:10:b2:5d:bf:49:b9:5d:86:c4:c6:60:eb:d0:92:
89:d1:03:3e:62:95:a4:73:d6:fa:8e:89:cc:a9:1f:1e:c1:b7:
ee:f1:1e:92:4a:ba:12:bb:1b:1f:21:98:af:76:21:50:d2:ac:
74:bb:60:cf:2f:8c:2f:3e:13:a2:76:95:23:e6:98:1a:7d:bc:
89:27:2b:8c:f5:00:5f:69:5f:99:d2:e1:dd:ef:bd:6e:80:e2:
47:53:57:61:dd:95:5e:61:a5:2e:dd:2b:e2:4c:95:2e:44:85:
19:bb:30:7d:63:d1:b1:4b:08:20:1f:31:0c:e4:1d:e8:d5:b6:
bb:81:49:86:cd:43:76:f2:d3:39:a8:8d:6a:ad:3e:e9:7e:4c:
dc:aa:76:b2:ca:68:f1:32:b5:2a:c9:e5:05:36:de:8c:7b:8c:
92:3a:fe:d5:b6:1b:d3:9d:d1:f7:4c:32:33:fd:d5:30:f2:7c:
5f:9f:2e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:09:16 2025 by rpki-client