Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/jtqxAhKoumK-V5igX_ssf2_tgU8.roa
File: jtqxAhKoumK-V5igX_ssf2_tgU8.roa (raw, json)
Hash identifier: 0Xm1M9jqixQ8jgYgE35nqCWzmrZMQOxsIMJvQ22CmTs=
Subject key identifier: 8E:DA:B1:02:12:A8:BA:62:BE:57:98:A0:5F:FB:2C:7F:6F:ED:81:4F
Certificate issuer: /CN=d5620cec70974d037d7769758c74668305b32cf2
Certificate serial: 019425FDB046D16E31FAF759E247F0F5E3F0
Authority key identifier: D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/jtqxAhKoumK-V5igX_ssf2_tgU8.roa
Signing time: Thu 02 Jan 2025 07:49:30 +0000
ROA not before: Thu 02 Jan 2025 07:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62212
IP address blocks: 87.236.146.0/24 maxlen: 24
91.184.248.0/22 maxlen: 24
91.199.137.0/24 maxlen: 24
91.199.147.0/24 maxlen: 24
91.199.154.0/24 maxlen: 24
91.199.160.0/24 maxlen: 24
188.127.246.0/23 maxlen: 24
2a11:3b80::/29 maxlen: 48
2a11:3b80::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:b0:46:d1:6e:31:fa:f7:59:e2:47:f0:f5:e3:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5620cec70974d037d7769758c74668305b32cf2
Validity
Not Before: Jan 2 07:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8edab10212a8ba62be5798a05ffb2c7f6fed814f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1a:87:4e:5f:9d:94:ae:8f:22:a5:63:19:7f:
1b:64:c9:7c:ea:60:67:5f:62:c8:36:06:e0:a6:51:
90:d9:71:5c:32:6e:a9:d1:d9:57:a9:73:ee:42:99:
2d:f8:87:7b:9c:a9:57:53:85:7c:bd:dc:b9:5a:c3:
b1:e3:6e:da:10:4a:e8:0d:ca:9a:f2:6e:42:05:58:
13:1f:20:3d:29:57:2a:79:57:ee:65:a9:a4:ba:9d:
e3:31:d9:3e:7f:cb:b1:e4:c2:e3:54:09:71:82:67:
39:c5:fa:93:fa:77:42:58:4d:34:14:29:9e:43:eb:
6f:70:30:8c:ff:d7:ff:53:e0:3b:ca:fd:63:4c:d3:
c9:3a:74:d7:69:bd:7b:43:87:0a:3b:1e:b0:9d:30:
ca:04:dd:de:18:a7:e3:c0:69:18:f5:4a:6c:ac:a7:
85:ee:39:cd:c2:81:c2:8d:2c:1b:f8:9b:e0:14:8b:
9e:5b:ac:fe:85:03:a4:bd:94:83:f4:a4:76:5c:29:
6d:91:c0:1f:b2:d9:be:85:f2:d5:c1:5a:27:79:38:
0d:c7:b3:cc:c0:96:39:3e:5d:bb:3f:25:56:eb:31:
bc:5a:25:1d:99:44:e0:de:e6:13:9d:40:ab:cb:33:
6f:03:b7:ca:b5:af:37:96:54:f9:fe:6a:9c:9f:0e:
46:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DA:B1:02:12:A8:BA:62:BE:57:98:A0:5F:FB:2C:7F:6F:ED:81:4F
X509v3 Authority Key Identifier:
keyid:D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/jtqxAhKoumK-V5igX_ssf2_tgU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.146.0/24
91.184.248.0/22
91.199.137.0/24
91.199.147.0/24
91.199.154.0/24
91.199.160.0/24
188.127.246.0/23
IPv6:
2a11:3b80::/29
Signature Algorithm: sha256WithRSAEncryption
6e:a4:52:32:87:27:9a:ed:b6:ce:2b:e2:af:69:71:db:fa:8f:
c1:ee:91:1a:d1:d9:e5:d7:8b:d0:5e:4a:44:cc:03:62:92:06:
00:0f:a8:a0:59:ca:38:ce:58:d3:46:b4:89:80:ff:96:36:aa:
a1:e1:b7:63:c2:37:53:b7:75:02:63:7c:46:12:08:3c:b7:4a:
45:c4:ec:2d:94:c9:8c:84:83:aa:03:16:3e:56:f3:a8:54:fb:
9f:b9:ed:74:85:f9:1a:13:d9:6c:4a:a5:21:93:03:f0:bb:ee:
60:67:1b:b1:11:45:4c:37:d8:63:2f:c9:ce:54:01:0e:43:45:
5d:ae:7b:35:4c:7a:10:ff:d8:bd:80:4f:08:53:42:2d:b4:f6:
92:d6:ba:d4:51:ee:5f:34:29:29:15:55:aa:00:d9:c8:60:c5:
bf:3a:18:19:bc:cd:61:d9:ca:e6:75:69:ee:e2:87:49:2a:c1:
c4:e9:04:34:30:51:04:b4:76:53:2c:c5:c8:d9:1d:0b:47:1f:
5f:fb:9a:22:80:da:c9:5c:fd:43:22:ef:9b:d2:80:fc:97:6d:
7a:c4:16:75:d1:ce:04:4d:be:c2:ca:f0:7f:1d:92:40:28:4c:
f8:93:e1:0d:6b:f0:b0:45:8b:e3:bb:46:ac:f0:6e:5b:16:ac:
65:03:49:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:28:59 2025 by rpki-client