Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/jKlk89-fCSzoTB01s7RShivsAOE.roa
File: jKlk89-fCSzoTB01s7RShivsAOE.roa (raw, json)
Hash identifier: iI/3xADl4iYI6LJcczTraHOHC9ZNevaWvmg8LIoJztg=
Subject key identifier: 8C:A9:64:F3:DF:9F:09:2C:E8:4C:1D:35:B3:B4:52:86:2B:EC:00:E1
Certificate issuer: /CN=ebdfa7c0ad7ef674dd5b4194960f2ffd4115f261
Certificate serial: 019424B37E727BC5F53E857823C04AE52CA3
Authority key identifier: EB:DF:A7:C0:AD:7E:F6:74:DD:5B:41:94:96:0F:2F:FD:41:15:F2:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/69-nwK1-9nTdW0GUlg8v_UEV8mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/jKlk89-fCSzoTB01s7RShivsAOE.roa
Signing time: Thu 02 Jan 2025 01:48:50 +0000
ROA not before: Thu 02 Jan 2025 01:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43201
IP address blocks: 195.158.220.0/22 maxlen: 22
195.158.220.0/23 maxlen: 23
195.158.220.0/24 maxlen: 24
195.158.221.0/24 maxlen: 24
195.158.222.0/23 maxlen: 23
195.158.222.0/24 maxlen: 24
195.158.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:7e:72:7b:c5:f5:3e:85:78:23:c0:4a:e5:2c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebdfa7c0ad7ef674dd5b4194960f2ffd4115f261
Validity
Not Before: Jan 2 01:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ca964f3df9f092ce84c1d35b3b452862bec00e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9c:a9:e4:a1:21:16:1b:56:3b:a1:f8:77:1c:
af:ee:de:fa:29:44:99:16:92:9a:a1:e5:7a:14:be:
ec:ce:37:7b:53:4a:b4:ff:d3:4d:9e:ec:18:f7:4a:
e4:51:b7:e4:42:2a:72:eb:db:ec:ec:ce:1d:c1:a0:
1d:64:0e:12:5a:99:2b:8e:0d:96:86:a8:08:3e:e9:
63:34:8e:26:7d:2b:d8:98:25:06:39:47:6c:f5:39:
70:6e:73:66:45:29:51:33:74:2d:0e:9f:2c:e9:6f:
c6:3e:49:c8:83:0c:9b:33:a7:8f:96:d0:c4:01:dd:
ab:0d:c0:27:f9:a5:21:47:6c:4a:c9:66:c2:8a:3d:
fa:77:41:c8:d2:d8:88:3d:68:9c:4d:88:6c:fc:14:
0b:fd:6f:cb:3a:81:60:50:39:56:9f:ee:94:aa:57:
6f:18:64:b7:c7:0c:53:22:8f:87:b8:46:09:95:15:
d2:6f:40:0d:10:06:50:5d:60:4e:f4:7c:23:27:bd:
86:b9:0d:b7:f4:88:06:cd:b8:0e:78:94:4c:c2:7c:
73:c8:a0:76:c6:08:c8:54:cf:ce:9b:20:cb:2d:0b:
67:1d:e7:50:a4:42:8e:57:7a:f6:67:ca:00:d6:6a:
7e:6c:85:44:37:a9:73:5d:7f:db:29:5e:b7:8d:1c:
88:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A9:64:F3:DF:9F:09:2C:E8:4C:1D:35:B3:B4:52:86:2B:EC:00:E1
X509v3 Authority Key Identifier:
keyid:EB:DF:A7:C0:AD:7E:F6:74:DD:5B:41:94:96:0F:2F:FD:41:15:F2:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69-nwK1-9nTdW0GUlg8v_UEV8mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/jKlk89-fCSzoTB01s7RShivsAOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.158.220.0/22
Signature Algorithm: sha256WithRSAEncryption
74:f6:57:fc:76:00:82:04:98:d7:d5:8a:5e:87:ec:42:55:4c:
fa:37:7a:28:c4:d7:17:bd:7d:c4:88:7f:81:04:f8:f7:72:31:
ed:36:16:23:da:5a:6d:f0:eb:01:3c:75:fb:57:2e:ff:97:68:
08:6d:9a:43:1d:73:dc:f8:43:5d:53:98:e0:03:f5:21:2e:94:
9a:0c:75:61:31:58:cd:61:83:ad:89:17:d0:0c:be:63:2b:e4:
66:94:4c:eb:99:88:77:87:6e:5b:26:1e:80:ef:df:f4:09:1f:
21:e4:6b:f1:bd:7c:ba:86:a0:0e:1f:3d:2e:31:ab:87:f6:ef:
fd:b4:ed:23:00:b8:02:f7:3e:ec:41:50:8b:94:99:57:db:7b:
39:6a:7d:55:06:33:19:bc:d9:df:01:a9:bb:9b:4e:91:ce:97:
73:11:b1:e9:6f:a2:ba:bd:97:40:3d:5f:c3:3d:4b:bd:f5:19:
ad:cf:f4:e7:6d:87:df:79:51:7a:e5:10:1b:9d:68:17:18:94:
6a:0f:27:14:d0:ad:db:74:6c:f6:76:6a:01:6c:c7:fe:18:44:
54:c4:cc:d8:24:68:31:89:07:b5:e4:d4:67:2e:67:93:ad:0c:
12:5a:03:41:02:a7:0c:1d:cb:2c:f2:a2:85:79:7b:13:80:79:
7c:f7:7f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:15:30 2025 by rpki-client