Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/JBD-DCFrrp6DaGm3TKEJ2BZcPBI.roa
File: JBD-DCFrrp6DaGm3TKEJ2BZcPBI.roa (raw, json)
Hash identifier: Ec0jL54VOo6Fz7NL+ebq98FwJ+8rbJVUpRDjInpAUJI=
Subject key identifier: 24:10:FE:0C:21:6B:AE:9E:83:68:69:B7:4C:A1:09:D8:16:5C:3C:12
Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial: 019427B63C9B9A47FDA1D9E3C14C0F28BD04
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/JBD-DCFrrp6DaGm3TKEJ2BZcPBI.roa
Signing time: Thu 02 Jan 2025 15:50:41 +0000
ROA not before: Thu 02 Jan 2025 15:50:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210329
IP address blocks: 45.91.170.0/24 maxlen: 24
63.250.58.0/24 maxlen: 24
81.28.4.0/24 maxlen: 24
81.28.5.0/24 maxlen: 24
83.229.68.0/24 maxlen: 24
83.229.69.0/24 maxlen: 24
83.229.75.0/24 maxlen: 24
91.223.236.0/24 maxlen: 24
103.13.208.0/24 maxlen: 24
103.13.209.0/24 maxlen: 24
103.240.145.0/24 maxlen: 24
103.241.64.0/24 maxlen: 24
103.241.65.0/24 maxlen: 24
185.53.211.0/24 maxlen: 24
185.127.16.0/24 maxlen: 24
185.127.17.0/24 maxlen: 24
185.127.18.0/24 maxlen: 24
185.127.19.0/24 maxlen: 24
185.181.9.0/24 maxlen: 24
185.181.11.0/24 maxlen: 24
185.227.109.0/24 maxlen: 24
185.237.12.0/24 maxlen: 24
185.237.13.0/24 maxlen: 24
185.237.98.0/24 maxlen: 24
185.237.99.0/24 maxlen: 24
185.247.116.0/24 maxlen: 24
185.247.119.0/24 maxlen: 24
194.37.82.0/24 maxlen: 24
194.146.24.0/24 maxlen: 24
194.146.25.0/24 maxlen: 24
195.238.123.0/24 maxlen: 24
212.86.104.0/24 maxlen: 24
212.86.105.0/24 maxlen: 24
2a06:c5c0:600::/48 maxlen: 48
2a07:3b80:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:3c:9b:9a:47:fd:a1:d9:e3:c1:4c:0f:28:bd:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Validity
Not Before: Jan 2 15:50:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2410fe0c216bae9e836869b74ca109d8165c3c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:88:e8:24:95:30:1c:24:cf:4b:67:71:ee:26:
fe:22:15:cf:70:a5:18:db:dc:13:a5:c9:49:06:8a:
78:e3:ea:86:87:a3:23:fa:be:19:78:c2:3e:07:7b:
33:b5:02:47:1d:74:42:cf:d4:7c:76:ab:f8:4c:67:
66:d0:1d:0c:b1:4e:0f:91:1b:ec:55:fb:8b:2f:68:
d3:64:12:bc:24:b5:99:51:50:c9:8c:0b:8f:c8:e9:
b9:f5:95:af:85:9c:f4:6b:05:fb:e4:ab:47:cd:cf:
1f:da:17:8f:f4:95:49:6c:8f:35:a3:03:0a:33:39:
24:2a:91:cc:c4:d2:8c:6a:e3:d8:d9:af:0b:63:d0:
fd:41:c8:e1:d8:9d:ee:46:17:28:47:92:0d:bb:a9:
ff:7c:37:43:ab:ab:7e:17:f5:0a:d2:7f:f6:24:35:
44:ed:a9:a0:38:ff:09:28:56:b5:17:9a:ac:7c:df:
0b:bf:5e:0c:1e:21:b9:83:30:bb:03:fc:ed:9b:10:
7d:17:6f:b9:8a:60:cd:34:e8:b4:f0:e7:89:2e:7d:
c5:47:ca:f5:4e:8b:46:9b:fa:0d:b2:d7:d5:d3:cb:
15:22:10:6d:ad:a2:f4:b3:c7:bc:a2:20:1a:04:f7:
c3:e7:27:66:04:74:1d:21:49:55:7c:d7:5f:4b:08:
8c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:10:FE:0C:21:6B:AE:9E:83:68:69:B7:4C:A1:09:D8:16:5C:3C:12
X509v3 Authority Key Identifier:
keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/JBD-DCFrrp6DaGm3TKEJ2BZcPBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.170.0/24
63.250.58.0/24
81.28.4.0/23
83.229.68.0/23
83.229.75.0/24
91.223.236.0/24
103.13.208.0/23
103.240.145.0/24
103.241.64.0/23
185.53.211.0/24
185.127.16.0/22
185.181.9.0/24
185.181.11.0/24
185.227.109.0/24
185.237.12.0/23
185.237.98.0/23
185.247.116.0/24
185.247.119.0/24
194.37.82.0/24
194.146.24.0/23
195.238.123.0/24
212.86.104.0/23
IPv6:
2a06:c5c0:600::/48
2a07:3b80:2::/48
Signature Algorithm: sha256WithRSAEncryption
16:87:b7:4a:4a:cf:b3:df:a0:a5:f9:e3:a4:a5:a2:5f:ac:79:
a3:8f:81:5b:5b:80:5e:51:07:66:5e:f6:2d:d8:d0:5c:c5:58:
8e:b1:cd:f8:3f:e1:81:ab:12:0d:b9:26:e8:eb:bc:bf:96:03:
c1:0e:ca:fb:ec:9e:65:8b:02:2b:17:02:f5:b4:67:d5:39:33:
21:e4:79:af:9f:99:3a:bf:a1:e5:2d:a5:46:a3:2b:52:d4:01:
af:39:7a:7e:d7:4c:93:01:d1:9d:92:41:38:a6:ca:f2:1b:5c:
2f:e2:17:87:d5:39:b4:8c:ae:4f:38:4d:82:8e:6e:19:e6:45:
d7:4f:62:be:21:b3:77:f7:64:e3:af:60:d4:85:3b:35:c2:d4:
48:db:ca:2e:ac:4b:2a:85:87:a8:e0:77:ad:e4:33:8c:5b:4f:
d2:1a:6a:6f:fb:93:fa:23:c9:b0:6d:e3:89:5d:fe:00:43:0a:
86:e2:8f:3c:85:3a:54:e2:f9:d3:24:b8:ca:f6:d8:e0:a4:81:
3b:12:ab:4e:71:dd:f6:74:cb:2e:1f:c6:6c:e5:1b:77:91:64:
8f:29:c0:59:fc:54:ef:db:d3:44:71:60:fa:ef:0e:d4:a6:47:
45:3b:66:ad:c9:61:d8:86:5d:a0:9a:5d:e8:3f:cf:00:6d:60:
75:b8:5d:ef
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:02:00 2025 by rpki-client