Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/jusxHEEIsrLZpxHa35fyPkAqK7s.roa
File: jusxHEEIsrLZpxHa35fyPkAqK7s.roa (raw, json)
Hash identifier: ZFDdzLmEvnMxmWT9XlxYhopgvJv0aQjuJRSBRhLyOC0=
Subject key identifier: 8E:EB:31:1C:41:08:B2:B2:D9:A7:11:DA:DF:97:F2:3E:40:2A:2B:BB
Certificate issuer: /CN=09e4a8d6706d9d0f9c1091ca69951f4abd59d42b
Certificate serial: 01941F8C4125984EB6AA0B6669CBA6BB0741
Authority key identifier: 09:E4:A8:D6:70:6D:9D:0F:9C:10:91:CA:69:95:1F:4A:BD:59:D4:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/jusxHEEIsrLZpxHa35fyPkAqK7s.roa
Signing time: Wed 01 Jan 2025 01:47:52 +0000
ROA not before: Wed 01 Jan 2025 01:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203591
IP address blocks: 178.22.248.0/22 maxlen: 22
178.22.252.0/24 maxlen: 24
178.22.253.0/24 maxlen: 24
178.22.254.0/24 maxlen: 24
178.22.255.0/24 maxlen: 24
185.6.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:41:25:98:4e:b6:aa:0b:66:69:cb:a6:bb:07:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e4a8d6706d9d0f9c1091ca69951f4abd59d42b
Validity
Not Before: Jan 1 01:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8eeb311c4108b2b2d9a711dadf97f23e402a2bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3f:ef:1d:bf:be:17:15:d9:db:ce:7e:a4:5f:
65:ee:d4:ff:62:6c:c1:99:b3:7e:03:da:5b:63:af:
01:d2:b9:05:69:22:f5:69:36:83:20:ea:62:f0:99:
52:e5:d3:86:28:23:7f:6a:3d:d9:eb:a0:89:24:0c:
ed:ca:a2:14:d0:92:65:8c:2a:ac:d5:f0:56:e4:a5:
40:18:95:37:50:e7:69:4f:c9:d2:ed:f2:fe:1a:07:
54:26:e3:2d:e0:6c:99:8a:69:4b:34:b2:15:32:06:
de:c7:f3:71:da:74:4f:81:2b:f6:80:19:43:74:a3:
a3:3a:76:14:92:8f:6f:d8:ff:11:dd:58:d6:06:b7:
37:96:42:65:5d:a2:a1:7b:a2:75:bc:37:0a:bd:2f:
2b:0a:0e:50:d3:6e:92:fa:f9:ec:57:12:fd:a0:e1:
93:d1:a7:62:44:0f:13:e4:c5:10:52:51:43:33:de:
fe:49:22:ad:64:e0:08:98:70:f5:fa:c0:34:67:46:
d2:e9:56:0b:5d:51:ea:be:3f:e8:02:2e:6e:82:ca:
d6:67:cc:78:19:4a:37:0e:d3:33:bf:52:cc:0e:67:
1f:aa:60:44:f4:d3:ff:16:cf:e0:23:eb:f4:da:24:
6a:4f:ef:29:25:bd:ef:92:a1:61:09:63:d8:d7:83:
c8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EB:31:1C:41:08:B2:B2:D9:A7:11:DA:DF:97:F2:3E:40:2A:2B:BB
X509v3 Authority Key Identifier:
keyid:09:E4:A8:D6:70:6D:9D:0F:9C:10:91:CA:69:95:1F:4A:BD:59:D4:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/jusxHEEIsrLZpxHa35fyPkAqK7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.22.248.0/21
185.6.240.0/22
Signature Algorithm: sha256WithRSAEncryption
57:f4:a3:32:ec:82:e1:0e:23:26:d1:35:3b:e0:b6:e7:ea:f5:
dd:b4:da:e0:10:b6:21:42:6b:c1:f9:1d:e7:e2:8b:50:5e:e7:
95:55:36:cf:38:48:a7:71:ed:26:7a:4f:3b:bb:d9:b7:fd:ab:
f0:64:04:d8:eb:7c:2a:90:c4:ec:fc:33:18:cc:bf:4e:36:b8:
36:42:ae:03:10:ea:3c:7c:d0:19:57:bc:0f:ce:33:5c:d0:08:
4d:2d:99:4a:6d:4c:c1:9e:f9:ed:31:dd:4c:c6:7f:69:2f:bb:
11:b7:7e:a8:34:ec:b1:00:86:9e:36:76:df:06:59:6e:96:a6:
9f:c7:8f:c4:e3:cb:d3:22:fd:17:4d:d5:7c:72:46:e9:0b:ec:
79:3c:d7:28:d3:e4:06:d6:75:dd:cd:b4:3d:31:0d:b2:4c:06:
7c:e8:59:c2:cb:bb:c8:fd:08:6e:b0:aa:4d:95:1b:e0:b9:43:
a7:dd:85:43:ce:f9:4e:4d:c4:b7:9d:2a:56:a6:d5:e7:e9:46:
08:09:52:8b:92:c2:03:3c:46:63:17:43:a3:f1:c9:b5:72:58:
8c:17:c5:93:48:2f:72:51:af:8a:8d:09:9b:25:ba:54:04:be:
20:9f:82:84:30:86:24:2d:51:fa:ea:e5:1b:49:8f:6c:f9:71:
77:df:75:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:47:48 2025 by rpki-client