Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jHt_1MNQirxASDmqQViticPF-ps.roa
File: jHt_1MNQirxASDmqQViticPF-ps.roa (raw, json)
Hash identifier: PWOLXQilLHy5JAj1j3MO8KwTsebKycEVRdXXWLZvuq8=
Subject key identifier: 8C:7B:7F:D4:C3:50:8A:BC:40:48:39:AA:41:58:AD:89:C3:C5:FA:9B
Certificate issuer: /CN=8c89801b19aa9728ad4f6bb7185c11f14b9d8d7c
Certificate serial: 01941F8C0E4886FD9FB0403463E2D36BE74C
Authority key identifier: 8C:89:80:1B:19:AA:97:28:AD:4F:6B:B7:18:5C:11:F1:4B:9D:8D:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jHt_1MNQirxASDmqQViticPF-ps.roa
Signing time: Wed 01 Jan 2025 01:47:39 +0000
ROA not before: Wed 01 Jan 2025 01:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5500
IP address blocks: 80.92.144.0/20 maxlen: 20
85.119.112.0/21 maxlen: 21
88.82.128.0/19 maxlen: 19
193.108.218.0/24 maxlen: 24
195.72.113.0/24 maxlen: 24
195.72.114.0/23 maxlen: 23
195.128.250.0/23 maxlen: 23
195.206.192.0/19 maxlen: 19
217.22.80.0/20 maxlen: 20
2a05:aa40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:0e:48:86:fd:9f:b0:40:34:63:e2:d3:6b:e7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c89801b19aa9728ad4f6bb7185c11f14b9d8d7c
Validity
Not Before: Jan 1 01:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c7b7fd4c3508abc404839aa4158ad89c3c5fa9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:61:68:87:6f:e4:90:5b:22:66:d2:e2:2a:53:
df:5f:a2:f7:ba:6b:00:6e:1c:ae:ef:10:c0:d4:e4:
e4:44:11:0e:64:32:03:e8:df:0a:7d:39:02:8f:29:
a6:bc:d4:4f:1c:51:25:af:2a:a7:b8:0a:64:22:21:
78:f8:60:cc:67:6c:ec:3d:82:e9:5c:38:1f:53:b9:
b2:fc:f0:37:a4:92:df:09:80:0a:d3:bf:50:06:89:
af:c1:a7:8d:66:55:67:6b:41:55:bb:8b:81:84:92:
7c:1f:0b:17:5d:ed:ee:b4:57:50:0f:6e:b4:73:a0:
e3:20:d5:d1:cb:cc:ae:3c:cf:61:a9:0e:ee:6b:1f:
2b:3c:8a:fd:27:45:5d:6f:93:a0:b4:09:03:d1:f2:
3b:e9:5a:f1:43:a7:b0:88:59:be:84:39:69:4b:02:
6a:06:e7:cd:b3:93:32:dc:e7:6f:c9:b0:dc:67:4c:
e5:ed:37:91:97:dd:9c:4f:1b:52:b4:ae:e7:20:c2:
1a:1c:78:1e:9e:c3:b4:9a:5e:c8:43:ed:7d:3d:ef:
18:30:35:56:ec:b8:0b:b5:d1:51:63:40:a4:c7:b6:
64:57:ca:ba:4c:6b:11:dc:e7:da:98:b5:bd:19:dc:
59:d1:bf:5c:f4:61:b4:28:da:c7:e6:5a:3c:78:84:
24:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7B:7F:D4:C3:50:8A:BC:40:48:39:AA:41:58:AD:89:C3:C5:FA:9B
X509v3 Authority Key Identifier:
keyid:8C:89:80:1B:19:AA:97:28:AD:4F:6B:B7:18:5C:11:F1:4B:9D:8D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jHt_1MNQirxASDmqQViticPF-ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.92.144.0/20
85.119.112.0/21
88.82.128.0/19
193.108.218.0/24
195.72.113.0-195.72.115.255
195.128.250.0/23
195.206.192.0/19
217.22.80.0/20
IPv6:
2a05:aa40::/29
Signature Algorithm: sha256WithRSAEncryption
6a:7f:8a:10:bb:e2:99:77:31:46:cc:0b:52:2d:c4:e9:dd:b6:
3c:d2:d9:b5:34:e5:03:8f:34:44:37:47:99:90:4f:f8:b6:49:
8a:49:e5:0e:73:13:08:64:65:aa:f0:06:5e:87:09:50:01:e9:
d0:e7:4c:81:a4:b9:ed:14:5f:e1:45:02:a7:31:bd:29:09:29:
43:56:2a:1b:0d:cb:12:47:62:f9:2a:0a:0d:1d:49:fb:5a:81:
4e:93:0c:00:d1:33:d2:9c:a6:29:c7:87:b1:fc:63:1d:b1:d8:
25:4f:45:01:39:88:48:37:da:b3:37:78:25:c2:4d:d3:b3:a1:
4b:c1:dc:ee:f6:8d:51:4b:ff:97:98:58:7c:de:23:28:00:1f:
15:d8:dc:ad:4f:a3:f5:57:45:09:66:ec:b9:e5:b1:88:e7:f8:
50:87:2f:ff:1a:fd:56:ba:61:f9:d4:23:85:37:d1:fb:03:3d:
b9:0c:25:b6:30:2b:ed:8f:d3:65:22:4d:b1:33:a9:03:28:5c:
03:ba:4a:d2:01:28:36:8f:00:18:7f:ca:9e:a1:8f:ef:0a:b2:
2e:11:65:15:b3:fa:43:40:41:54:1d:5a:fc:41:55:ca:75:e7:
bc:11:1a:bd:09:7e:d7:6a:9e:59:b8:e6:3d:45:58:f3:d6:09:
0f:83:34:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:38:11 2025 by rpki-client