Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/jkSVZWrRJ0p_sHmkLKgtRqPLq4c.roa
File: jkSVZWrRJ0p_sHmkLKgtRqPLq4c.roa (raw, json)
Hash identifier: 5AMIR+nAOYfoGTd/SNFuAJTTjyBmPlK6SsLZWPzLm6Q=
Subject key identifier: 8E:44:95:65:6A:D1:27:4A:7F:B0:79:A4:2C:A8:2D:46:A3:CB:AB:87
Certificate issuer: /CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Certificate serial: 01941F8C53316B4C133BB26E9705F154999E
Authority key identifier: 97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/jkSVZWrRJ0p_sHmkLKgtRqPLq4c.roa
Signing time: Wed 01 Jan 2025 01:47:57 +0000
ROA not before: Wed 01 Jan 2025 01:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48851
IP address blocks: 141.226.100.0/24 maxlen: 24
141.226.110.0/24 maxlen: 24
141.226.252.0/22 maxlen: 24
185.139.240.0/22 maxlen: 24
2a07:1980::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:53:31:6b:4c:13:3b:b2:6e:97:05:f1:54:99:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Validity
Not Before: Jan 1 01:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e4495656ad1274a7fb079a42ca82d46a3cbab87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:96:b4:4e:32:b3:b8:69:93:32:1b:7e:4d:22:
c2:86:b3:cb:4a:dd:5b:25:1e:d8:63:8a:2b:c3:87:
68:49:e4:35:54:20:a1:54:8c:b8:26:9f:7b:a8:b6:
b1:b7:f5:8e:79:ba:21:e1:7e:7d:e2:1e:63:26:11:
8d:52:09:c0:dd:47:cd:3b:3f:0c:6b:0d:97:4e:bf:
de:de:a3:f6:82:b4:6b:4d:4c:ad:23:d2:d5:05:fd:
b6:9a:6b:f2:18:ad:a0:bc:1e:d7:06:22:cd:fb:dd:
43:85:a5:c3:a9:45:62:38:3b:65:be:12:b9:50:02:
76:ec:05:09:34:d4:55:86:a0:2b:d7:08:d9:16:20:
d6:95:31:08:05:d6:73:76:f7:af:46:47:93:08:96:
fc:3a:b5:dd:e8:42:8c:71:21:09:14:23:34:a5:7e:
bf:ba:00:de:3e:b8:e4:1a:fa:06:d1:29:5d:64:d0:
c1:93:4f:98:99:f9:27:92:5f:3d:d9:ee:93:98:04:
94:e8:7f:9f:ba:12:8b:24:20:bf:dd:66:3c:fc:4a:
c3:0c:e6:e6:fd:eb:b7:ff:0c:48:58:2c:53:ad:29:
dd:16:6d:4c:87:1b:a0:67:38:99:82:cf:c1:5b:a4:
e6:d1:a6:25:d7:fc:8d:ae:4f:62:33:49:f5:d6:c1:
4a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:44:95:65:6A:D1:27:4A:7F:B0:79:A4:2C:A8:2D:46:A3:CB:AB:87
X509v3 Authority Key Identifier:
keyid:97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/jkSVZWrRJ0p_sHmkLKgtRqPLq4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.100.0/24
141.226.110.0/24
141.226.252.0/22
185.139.240.0/22
IPv6:
2a07:1980::/29
Signature Algorithm: sha256WithRSAEncryption
ae:f6:27:00:c3:89:68:c3:61:5a:32:8d:e2:58:92:15:1d:29:
13:5f:44:7b:9b:46:d4:3f:4e:a8:af:50:71:18:b8:19:d5:3c:
3b:ee:4f:5b:20:6b:2b:94:c8:5a:f4:6d:5d:57:f8:89:59:1d:
cf:25:36:03:95:c1:44:cd:43:2d:94:a4:8a:67:51:2e:04:f0:
91:3f:a4:95:55:98:75:1b:16:40:f9:b2:fc:3c:53:84:6f:35:
05:b1:74:c4:82:03:50:37:09:e8:0d:60:65:be:48:18:48:11:
51:dc:1f:17:ad:10:ab:8d:b8:f2:31:b0:24:ae:d6:3b:75:61:
38:35:fb:d0:c8:82:5f:29:e7:b2:58:eb:03:06:6a:09:ec:93:
40:eb:11:34:65:2e:6f:7e:16:1a:b9:e0:ec:4f:c9:88:4e:11:
da:47:af:71:34:f8:d3:80:3f:d9:b9:b0:cf:62:1d:f5:1e:85:
0b:58:be:53:86:5f:a1:9f:0e:0f:7e:b9:06:60:01:cf:3d:48:
89:fd:54:3e:41:4f:f6:f4:d2:75:37:ff:74:3f:26:c8:53:09:
56:d6:08:c9:8a:62:4a:89:df:63:1c:c1:1c:a8:35:7e:a4:f3:
e9:b1:28:96:26:5e:c1:60:aa:a1:ed:2e:b8:3b:e0:cc:4e:c4:
5d:4b:02:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:18:48 2025 by rpki-client