Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/JgMZeAUanuTnCMO5W4WxtNoWnOo.roa
File: JgMZeAUanuTnCMO5W4WxtNoWnOo.roa (raw, json)
Hash identifier: BVGJrmWx20uZpeiVIuLqA9VCxnxpKFPgWew2DOU2kQc=
Subject key identifier: 26:03:19:78:05:1A:9E:E4:E7:08:C3:B9:5B:85:B1:B4:DA:16:9C:EA
Certificate issuer: /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Certificate serial: 01942445A8997BD4F7C3CB77584F4C738DB5
Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/JgMZeAUanuTnCMO5W4WxtNoWnOo.roa
Signing time: Wed 01 Jan 2025 23:48:52 +0000
ROA not before: Wed 01 Jan 2025 23:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60695
IP address blocks: 155.133.33.0/24 maxlen: 24
155.133.60.0/23 maxlen: 23
185.225.100.0/22 maxlen: 22
185.228.108.0/22 maxlen: 22
2a06:1e00::/29 maxlen: 48
2a0d:a00::/29 maxlen: 29
2a0d:b400::/29 maxlen: 48
2a0e:4d00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:a8:99:7b:d4:f7:c3:cb:77:58:4f:4c:73:8d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Validity
Not Before: Jan 1 23:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26031978051a9ee4e708c3b95b85b1b4da169cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:76:84:63:ce:75:a8:c8:0a:ad:5e:cf:d0:7f:
1a:ce:e5:6c:b7:f2:2d:35:3f:35:e1:37:26:41:30:
87:85:f5:88:47:b7:b0:ef:73:e4:6e:74:e4:86:4f:
dc:86:ba:1a:42:39:fb:ad:78:6c:1a:98:21:c5:5f:
b2:26:a5:98:d1:9e:a1:2b:1f:a7:b8:40:b7:f4:b3:
ac:07:ae:f6:e7:79:c9:73:c0:32:05:64:d3:86:3b:
6a:aa:02:73:77:c0:17:84:89:56:8c:d3:d6:da:5a:
0b:28:53:2e:9c:8c:03:a4:f4:5b:32:aa:4b:5e:40:
4e:d4:0c:ae:9e:71:e8:84:22:ed:86:58:c8:65:b6:
2d:f3:20:1b:cb:05:a1:75:23:59:8c:d3:3e:4e:ba:
b0:c7:05:8d:b6:44:25:50:db:e6:91:77:16:62:70:
7c:e1:71:e4:e1:96:a7:fb:fa:a9:b7:3e:74:fd:3c:
b7:36:2d:fe:1d:ca:d3:d7:81:d1:f2:04:00:fc:35:
f7:cb:ad:b1:a6:7a:7e:bc:9e:fe:99:a3:53:fd:f2:
6d:1d:f9:22:1a:ed:b6:0f:52:1b:2d:b7:9e:03:9a:
8b:de:ef:9c:89:d5:a7:39:ec:91:b9:0d:37:b3:8c:
6b:6a:a5:f4:9e:ba:2c:23:05:17:9c:1f:9d:c6:07:
72:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:03:19:78:05:1A:9E:E4:E7:08:C3:B9:5B:85:B1:B4:DA:16:9C:EA
X509v3 Authority Key Identifier:
keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/JgMZeAUanuTnCMO5W4WxtNoWnOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.33.0/24
155.133.60.0/23
185.225.100.0/22
185.228.108.0/22
IPv6:
2a06:1e00::/29
2a0d:a00::/29
2a0d:b400::/29
2a0e:4d00::/29
Signature Algorithm: sha256WithRSAEncryption
0b:a1:5c:08:f2:2b:ca:2c:4f:f8:11:a9:81:6e:d4:71:72:f0:
b9:aa:2c:c2:0f:7b:5e:48:4a:de:2b:0f:4c:bb:36:d6:d0:16:
eb:ee:1b:6e:c3:b3:f6:64:49:f3:9c:72:30:36:7d:ae:e2:3b:
ff:e0:a2:15:fa:ff:61:00:42:ad:44:97:fe:0d:d1:b7:9a:5f:
bc:34:ed:69:8e:57:ae:b1:ef:ee:d6:1a:89:f6:20:97:9f:1e:
b5:3e:8d:5c:a5:16:5f:f4:71:9c:8d:7b:68:40:f0:cf:7d:31:
83:98:81:a6:49:ad:75:c3:e0:0d:44:89:45:52:19:9c:73:16:
f6:b3:c6:63:05:83:a8:f6:94:0d:79:0d:dd:54:e9:5d:03:15:
6d:1d:0b:a3:05:02:8d:2f:2e:3d:2c:4f:39:e7:7b:b3:a1:f0:
4e:e0:82:37:bd:5b:74:88:ee:cf:e1:69:8e:aa:ed:85:bc:38:
e6:c9:b0:f3:1e:d2:04:37:4f:ee:ab:d9:e0:a0:c6:e5:99:b5:
1e:74:01:e0:2e:3f:81:5a:36:b9:ed:f2:c3:18:1b:78:a8:78:
66:a0:1f:71:59:eb:28:b1:ea:42:45:5d:fc:8d:d9:dd:c4:09:
d5:03:24:35:51:1c:95:50:0c:b6:d1:3b:89:80:2d:00:3d:25:
b5:ed:54:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:04:48 2025 by rpki-client