Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/JDEgNxAB09AUh6owQNZeZtBtGuM.roa
File: JDEgNxAB09AUh6owQNZeZtBtGuM.roa (raw, json)
Hash identifier: mbF3wS/KwnnaSKoNDphyfrKVcXZhcSZyXmhtgyyil/4=
Subject key identifier: 24:31:20:37:10:01:D3:D0:14:87:AA:30:40:D6:5E:66:D0:6D:1A:E3
Certificate issuer: /CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Certificate serial: 019421B1D36D93C185C49624671AF47D5C6D
Authority key identifier: C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/JDEgNxAB09AUh6owQNZeZtBtGuM.roa
Signing time: Wed 01 Jan 2025 11:48:09 +0000
ROA not before: Wed 01 Jan 2025 11:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51661
IP address blocks: 94.124.106.192/29 maxlen: 29
185.160.20.0/24 maxlen: 24
185.160.20.0/25 maxlen: 25
185.160.21.0/24 maxlen: 24
185.160.22.0/24 maxlen: 24
185.160.23.0/24 maxlen: 24
2a02:1d0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d3:6d:93:c1:85:c4:96:24:67:1a:f4:7d:5c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Validity
Not Before: Jan 1 11:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=243120371001d3d01487aa3040d65e66d06d1ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:df:1b:94:d3:a3:39:9d:32:cf:53:b5:3d:a7:
41:33:b4:de:b5:1c:f5:81:4c:ba:e7:c3:b1:3e:64:
29:ea:a2:6e:17:30:46:79:44:ab:ec:2e:51:a4:11:
61:b0:0e:d2:a5:8e:7f:4a:33:66:82:cc:d2:a3:c9:
42:ae:d4:6d:8a:5b:d2:10:ad:ce:ca:59:36:27:1f:
a4:fe:f6:cf:8d:63:6b:3f:b3:64:54:82:93:79:f9:
2a:8e:fd:52:fa:37:c0:1a:4a:31:d1:28:05:9f:91:
bc:59:21:f2:95:62:9b:d7:c6:b4:50:0a:55:18:c8:
31:e7:86:49:6c:27:77:ca:50:40:c1:3b:09:40:c4:
21:28:1c:64:d3:35:60:70:7d:2b:5c:dd:dc:12:0d:
cc:d4:0d:31:6c:6a:7d:a5:59:25:5c:6d:c7:80:af:
1b:ed:53:0f:00:5d:a0:01:25:38:79:f0:94:d0:db:
49:82:5f:43:53:cc:5d:57:55:2a:e5:f9:b7:49:cc:
b2:a0:d0:25:66:44:b5:d5:2d:4b:66:e8:1e:a0:af:
e8:fb:64:bb:be:bf:e3:6a:21:b2:6e:f1:77:bb:a8:
8e:4e:8e:f8:33:e3:51:75:20:a4:f2:f6:3e:e9:50:
26:0c:57:83:fa:21:b3:9c:40:6e:e4:a3:78:10:cd:
65:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:31:20:37:10:01:D3:D0:14:87:AA:30:40:D6:5E:66:D0:6D:1A:E3
X509v3 Authority Key Identifier:
keyid:C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/JDEgNxAB09AUh6owQNZeZtBtGuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.106.192/29
185.160.20.0/22
IPv6:
2a02:1d0::/32
Signature Algorithm: sha256WithRSAEncryption
3c:73:b4:dc:48:a9:6c:6f:b1:08:04:ed:99:4b:0f:cb:a3:10:
c5:2c:fa:c0:c7:f1:2e:a9:c0:dc:6d:07:15:aa:60:17:12:81:
cf:2c:74:60:47:18:68:39:7a:68:24:7e:46:5a:d7:71:87:cf:
90:29:38:65:af:bf:40:66:ed:3d:71:e6:f6:b4:1a:d9:71:ed:
ae:f8:b0:50:be:58:c1:bf:61:fa:ab:ed:b3:41:47:94:c3:ea:
71:e2:35:50:35:15:ba:6b:9a:68:b8:c9:cc:b7:fa:27:ae:fd:
86:01:6c:bb:e6:f9:0e:05:95:72:b9:76:a8:d9:c3:b1:c5:dd:
e0:73:01:e0:42:be:77:6e:4c:fe:f1:97:7e:47:8e:1a:f1:29:
5f:2d:d5:f2:59:61:64:ba:9c:fc:fb:22:7f:ec:08:35:c3:fa:
aa:82:48:24:65:70:59:2d:84:86:20:fb:d3:f5:37:2b:d4:ee:
b1:68:95:18:99:7e:e4:65:be:dc:47:51:c7:d2:7f:43:73:6c:
ea:e2:a6:45:d4:95:e4:31:c7:eb:23:b2:05:b5:15:d8:13:f3:
0a:98:8d:03:74:1d:31:ed:62:eb:57:ae:7c:db:1c:a5:6d:c2:
43:e3:0d:34:3a:22:29:91:2e:aa:5e:59:09:38:e9:f0:af:20:
d0:2f:f4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:29:37 2025 by rpki-client