Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/jrzKo-lt5J6MsHDsEMxREvgxfZ8.roa
File: jrzKo-lt5J6MsHDsEMxREvgxfZ8.roa (raw, json)
Hash identifier: NadiGgxjhYXuzdbS81cV9tBbpe6k6vvKuOl8KjAS3hU=
Subject key identifier: 8E:BC:CA:A3:E9:6D:E4:9E:8C:B0:70:EC:10:CC:51:12:F8:31:7D:9F
Certificate issuer: /CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
Certificate serial: 019425FDD998F9A4A9E40842BBF634E10E6F
Authority key identifier: DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/jrzKo-lt5J6MsHDsEMxREvgxfZ8.roa
Signing time: Thu 02 Jan 2025 07:49:40 +0000
ROA not before: Thu 02 Jan 2025 07:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197831
IP address blocks: 91.228.30.0/23 maxlen: 23
91.228.30.0/24 maxlen: 24
91.228.31.0/24 maxlen: 24
91.234.80.0/22 maxlen: 22
91.244.80.0/20 maxlen: 20
176.104.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:d9:98:f9:a4:a9:e4:08:42:bb:f6:34:e1:0e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
Validity
Not Before: Jan 2 07:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ebccaa3e96de49e8cb070ec10cc5112f8317d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8d:43:86:9c:ee:35:d1:b8:3c:bc:4c:d8:dd:
3d:5b:bd:35:53:56:0f:fe:d8:71:47:a8:21:a5:e0:
f6:34:f8:b8:41:42:49:96:43:f4:4a:f2:c8:20:a5:
38:e6:6c:cf:84:56:49:5c:b6:7b:a5:05:8d:17:52:
fe:1d:87:6f:19:9b:97:68:8e:29:34:1c:55:5d:2e:
84:66:f9:bc:62:72:2c:c7:c3:bf:bd:45:ad:1c:11:
dc:40:7a:2e:e9:57:c5:a3:21:1a:c7:65:66:d9:86:
d3:b4:86:97:86:b0:57:7b:ff:81:7c:e4:71:79:51:
26:77:33:7c:8a:1d:d9:cb:00:24:48:17:74:c7:48:
64:ad:ea:1c:2d:64:f6:b4:ed:6f:ad:6a:45:97:8d:
17:9e:a2:7c:39:93:05:6d:fa:19:bc:8d:83:6a:42:
bc:6d:88:cb:1d:02:ea:62:7a:82:ef:39:dc:7f:c4:
7c:2a:4c:82:bb:33:ab:46:00:30:b7:5f:08:46:d8:
51:cc:6b:f6:91:76:d0:cf:f1:6c:51:c2:eb:c7:e8:
ad:97:b3:da:a3:8a:84:36:98:5a:8b:c0:f6:4a:15:
bc:0f:7a:26:3e:0b:1e:7e:82:16:1d:82:30:40:fe:
11:cc:89:c7:cd:7f:a4:f3:f7:b7:c7:d2:cf:72:9a:
cf:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BC:CA:A3:E9:6D:E4:9E:8C:B0:70:EC:10:CC:51:12:F8:31:7D:9F
X509v3 Authority Key Identifier:
keyid:DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/jrzKo-lt5J6MsHDsEMxREvgxfZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.30.0/23
91.234.80.0/22
91.244.80.0/20
176.104.120.0/21
Signature Algorithm: sha256WithRSAEncryption
67:f2:d4:45:f8:21:07:b4:89:82:89:14:15:f7:51:a2:82:78:
e3:22:84:54:17:31:42:71:3d:d1:68:b2:2a:44:41:f8:88:c0:
94:11:1f:16:ff:20:71:d4:65:ec:1c:dc:e5:59:90:86:56:73:
60:f8:ea:05:d7:70:81:70:3f:7f:7c:41:9b:22:8b:ed:60:44:
b7:2f:1b:55:64:8e:3e:b3:72:29:4e:fa:b7:71:a5:2e:18:f3:
cc:0c:1f:5f:d9:0d:8a:ed:33:71:65:ee:8f:20:0a:43:b4:44:
e4:48:67:e9:95:62:4c:96:8f:f2:fd:d9:5b:b3:5d:3f:05:b3:
81:4b:94:25:06:1b:f2:24:5a:1b:9c:c9:77:21:8a:4e:68:56:
1b:71:b9:2f:d9:e5:8b:6d:09:06:e6:99:a4:ae:dd:95:15:13:
2d:32:0c:87:30:2b:ad:be:7c:63:e8:c9:4f:b8:7e:ec:6e:9f:
6a:30:6a:b0:c2:88:09:b4:7e:24:c5:b8:ec:82:12:c4:6d:4f:
c6:96:c4:83:2a:7c:27:1a:d7:74:4a:3e:34:45:1e:d0:a5:c9:
9a:08:21:ff:34:09:53:74:2d:0f:19:4a:81:31:7f:a6:9e:3f:
44:4c:49:be:e7:0f:db:0d:20:a1:3d:0a:73:22:6f:08:05:02:
e4:ce:ae:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:41:15 2025 by rpki-client