Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/jlmeoUxgI0KhFHV99BItMxAYMbc.roa
File: jlmeoUxgI0KhFHV99BItMxAYMbc.roa (raw, json)
Hash identifier: NI9SzLu0aApCsGkR0hpBvVimZxaK1yHkWwQafkG2nq8=
Subject key identifier: 8E:59:9E:A1:4C:60:23:42:A1:14:75:7D:F4:12:2D:33:10:18:31:B7
Certificate issuer: /CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5
Certificate serial: 01942747E4137EA3042BD0EFC965A9F83380
Authority key identifier: FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/jlmeoUxgI0KhFHV99BItMxAYMbc.roa
Signing time: Thu 02 Jan 2025 13:50:10 +0000
ROA not before: Thu 02 Jan 2025 13:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206314
IP address blocks: 91.226.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:e4:13:7e:a3:04:2b:d0:ef:c9:65:a9:f8:33:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5
Validity
Not Before: Jan 2 13:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e599ea14c602342a114757df4122d33101831b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:dc:dd:36:b8:45:4e:42:22:58:ac:29:0c:0b:
3c:fc:61:7f:8f:13:59:d2:d2:31:b6:d4:88:f7:d6:
d5:57:8b:53:fc:03:90:21:85:f4:ae:45:d8:14:30:
53:92:30:d5:ba:6a:36:e9:20:44:b7:96:97:5b:b5:
c3:37:82:19:91:b1:63:ff:1b:89:a0:44:11:ba:fc:
a9:09:5b:6a:00:73:c3:5e:f6:be:6c:07:18:81:d5:
f2:11:51:93:5d:fd:fb:63:63:a7:cc:ca:76:45:57:
e2:f6:a7:1d:1e:14:65:66:b1:05:77:68:24:24:f5:
a5:15:3d:99:d7:ce:64:0f:b2:58:12:bb:fb:a8:60:
c8:e2:8f:9f:dd:a5:91:00:21:75:97:1d:f8:73:da:
40:70:f6:e9:69:c3:70:df:7a:28:3f:ac:b6:3d:09:
64:75:33:e9:4c:d8:3f:54:13:b2:ed:86:40:8a:f6:
ac:0a:92:55:59:b9:49:8f:89:af:ac:43:97:b3:5d:
3c:4e:8d:b5:6c:ab:04:9c:cb:23:cd:b5:77:71:4a:
9f:11:35:29:16:f4:38:a1:1c:ff:0c:76:75:3b:29:
72:e3:b0:fd:13:23:54:0d:88:7d:c0:72:43:45:76:
35:dc:28:c4:75:cf:be:a6:ba:5f:07:3f:2e:4f:c2:
70:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:59:9E:A1:4C:60:23:42:A1:14:75:7D:F4:12:2D:33:10:18:31:B7
X509v3 Authority Key Identifier:
keyid:FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/jlmeoUxgI0KhFHV99BItMxAYMbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.236.0/22
Signature Algorithm: sha256WithRSAEncryption
43:9c:7a:67:fd:7e:16:a5:cc:bf:0c:3e:13:63:d3:79:99:10:
d1:4d:38:7d:f8:4b:68:83:ae:86:ab:41:40:7e:1f:bf:ab:4e:
b2:0f:67:4e:de:ca:2c:c7:31:28:19:f6:a1:9f:91:66:bb:ac:
65:e7:d1:0e:97:d5:34:6c:a2:55:50:7e:5b:0e:a2:bd:74:7c:
a7:22:82:ab:cf:a2:89:f2:d9:21:e2:2c:45:00:78:ae:90:be:
39:b6:5f:c0:bc:58:d2:65:65:78:a3:72:ac:21:52:31:e7:fa:
cb:27:a8:47:a0:63:ea:db:7c:46:31:a1:b9:1d:4c:24:8d:4d:
91:6f:c4:b7:d9:89:b0:2b:ae:06:59:0f:0d:6d:e7:5a:9f:04:
d4:db:7a:86:de:d0:81:7a:da:0e:e1:74:fd:fd:7f:22:3c:7b:
72:f5:e6:69:00:6d:4a:6a:be:fe:a2:c6:fe:c7:6c:0e:1f:e1:
71:61:14:2c:41:a3:8e:d0:8a:ae:9b:ce:9b:79:e4:64:e0:a6:
b1:9f:c3:0e:e7:18:4e:e9:12:24:f7:1b:96:4b:2d:74:1d:ef:
65:c0:3f:6a:c4:58:4e:eb:d9:0e:4b:73:40:df:3c:3f:0d:1b:
e0:da:f4:4e:93:ad:ce:a8:c9:a2:cf:59:78:c6:c8:fc:90:62:
70:00:2e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:24:19 2025 by rpki-client