Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/jnW4jrIpgrgFGee1gUUQCX9nMQM.roa
File: jnW4jrIpgrgFGee1gUUQCX9nMQM.roa (raw, json)
Hash identifier: Pg7xp2U2lzFs5nMdCFW1WCbmFf1TrwqIn5BPDmSukZg=
Subject key identifier: 8E:75:B8:8E:B2:29:82:B8:05:19:E7:B5:81:45:10:09:7F:67:31:03
Certificate issuer: /CN=faf64476ef3945b344ffee38da56caccc5d039b0
Certificate serial: 01941FFA203364D7A9ED3DEA41DF021800B6
Authority key identifier: FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/jnW4jrIpgrgFGee1gUUQCX9nMQM.roa
Signing time: Wed 01 Jan 2025 03:47:53 +0000
ROA not before: Wed 01 Jan 2025 03:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49103
IP address blocks: 185.57.164.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:20:33:64:d7:a9:ed:3d:ea:41:df:02:18:00:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf64476ef3945b344ffee38da56caccc5d039b0
Validity
Not Before: Jan 1 03:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e75b88eb22982b80519e7b5814510097f673103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5d:59:98:a7:92:21:87:75:2f:86:73:a9:ea:
d3:93:50:6d:c6:d8:ec:77:11:23:4e:aa:a2:04:d8:
bc:3d:66:7f:9a:57:91:98:af:a2:28:6f:a2:3b:4a:
cd:f7:14:c9:f2:08:64:24:14:61:cc:64:00:45:03:
dc:cd:b4:88:0a:d6:b9:81:71:8c:27:e0:82:e1:0f:
69:9d:8d:d8:dd:6b:6f:d4:56:fa:89:56:68:2d:d1:
3a:c0:d6:e9:c1:b7:68:8c:6e:90:79:39:1e:bb:88:
90:fa:38:46:56:59:6a:6a:3e:30:b3:0f:07:7b:5e:
3c:cc:20:a2:61:89:e9:b8:33:8e:83:2d:5f:7f:b0:
ec:02:6c:b3:52:09:93:f3:df:b4:9c:b2:c3:55:c2:
73:d3:23:85:8d:08:c6:2f:41:f8:2b:42:77:c5:29:
4f:96:4d:92:f4:d0:ee:48:c1:a5:ef:6f:07:d2:69:
85:fe:97:ad:92:07:f6:31:ea:e2:4b:fc:e4:c3:a4:
5e:b4:fe:1c:0e:1a:29:21:03:47:29:41:d7:3a:65:
de:4c:43:7e:99:1e:6a:c7:ad:e6:00:c8:30:02:9d:
9e:b3:9f:5d:e1:34:db:ca:6d:ec:d4:a9:7e:c6:c2:
3f:ee:e3:8a:83:0d:64:e2:07:52:65:56:81:96:83:
47:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:75:B8:8E:B2:29:82:B8:05:19:E7:B5:81:45:10:09:7F:67:31:03
X509v3 Authority Key Identifier:
keyid:FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/jnW4jrIpgrgFGee1gUUQCX9nMQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.164.0/22
Signature Algorithm: sha256WithRSAEncryption
58:b1:d9:64:46:97:09:bb:61:dc:b7:c8:5f:a8:d9:c0:06:a4:
6e:6c:a7:9e:72:98:44:9f:43:fb:52:87:99:02:14:23:26:cd:
c0:1f:7f:67:f0:23:f1:05:f4:f1:c8:c1:d8:37:06:88:30:c3:
e1:2b:1d:c5:ea:8b:f5:f6:41:10:8f:e0:a5:59:e2:3e:75:b8:
2e:51:cb:3b:a1:e3:3f:46:1e:70:c8:4d:b5:69:bf:fd:00:fc:
68:de:3b:a8:09:5e:ae:5e:99:43:8d:14:84:d0:55:43:0a:88:
a1:71:ae:4c:ab:cc:91:84:f0:6e:20:64:7d:33:92:80:e9:58:
a8:79:70:5a:e5:ed:83:d0:a2:86:e0:21:55:2d:01:bb:5c:e1:
95:b6:38:b9:f9:c6:84:90:b8:7e:f5:c9:46:7b:12:02:46:77:
91:40:43:55:28:be:0e:13:d4:6e:ef:0e:cd:e6:12:fb:ff:9e:
19:42:b6:87:74:a1:9f:d1:f7:0c:1e:47:b0:44:f1:5b:99:35:
08:ef:de:31:07:0f:51:bb:3a:b1:0f:ce:7b:45:a1:f6:7a:b7:
5a:ea:1d:c8:ab:1f:fa:14:66:7f:83:9f:85:b1:60:12:43:bd:
f7:6e:24:7c:08:19:bb:a9:b2:78:14:fd:7b:49:cf:6a:61:16:
29:1f:bf:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:37:59 2025 by rpki-client