Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/jmjQM-Af7YixW0lhj7IQRUe7D0c.roa
File: jmjQM-Af7YixW0lhj7IQRUe7D0c.roa (raw, json)
Hash identifier: Tb54ESX/F3Guxq8pdf9XF/gmXcXHx+T4/bKA3b9RF5c=
Subject key identifier: 8E:68:D0:33:E0:1F:ED:88:B1:5B:49:61:8F:B2:10:45:47:BB:0F:47
Certificate issuer: /CN=8a26f476d608625ad1fe06e52b974a9f66f0141a
Certificate serial: 01942827A47EAEBDC473476348C4C451ED3C
Authority key identifier: 8A:26:F4:76:D6:08:62:5A:D1:FE:06:E5:2B:97:4A:9F:66:F0:14:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/jmjQM-Af7YixW0lhj7IQRUe7D0c.roa
Signing time: Thu 02 Jan 2025 17:54:34 +0000
ROA not before: Thu 02 Jan 2025 17:54:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15436
IP address blocks: 81.88.96.0/21 maxlen: 24
193.109.117.0/24 maxlen: 24
193.109.121.0/24 maxlen: 24
193.109.125.0/24 maxlen: 24
193.201.0.0/24 maxlen: 24
193.201.1.0/24 maxlen: 24
193.201.2.0/24 maxlen: 24
193.201.3.0/24 maxlen: 24
193.201.4.0/24 maxlen: 24
193.201.5.0/24 maxlen: 24
193.201.6.0/24 maxlen: 24
193.201.7.0/24 maxlen: 24
2a02:c18::/32 maxlen: 48
2a02:c18::/48 maxlen: 48
2a02:c18:1::/48 maxlen: 48
2a02:c18:2::/48 maxlen: 48
2a02:c18:6::/48 maxlen: 48
2a02:c18:7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:a4:7e:ae:bd:c4:73:47:63:48:c4:c4:51:ed:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a26f476d608625ad1fe06e52b974a9f66f0141a
Validity
Not Before: Jan 2 17:54:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e68d033e01fed88b15b49618fb2104547bb0f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d7:74:3b:3d:2a:f4:db:da:ef:13:99:29:b1:
2f:76:6b:23:bb:69:a6:c1:71:dc:c1:49:e1:00:9b:
a1:e0:dd:d0:92:81:92:8b:50:4b:5b:dc:da:38:8c:
52:fc:29:16:ef:fd:1e:c3:7b:e3:82:2d:f4:30:83:
44:6b:22:20:d8:50:f2:5a:45:10:f3:d8:d4:b5:6a:
dd:c6:f5:06:cf:49:21:20:de:8c:7c:8d:58:f5:c8:
c7:1f:0f:2f:7d:95:d6:88:09:63:38:c8:ed:45:3a:
14:33:a9:14:71:b5:92:21:86:d2:99:4e:e9:27:85:
dc:77:a5:eb:d8:c5:86:37:0c:e8:4b:aa:f2:f1:46:
f6:3f:03:2a:d0:02:d7:77:86:10:57:2e:cf:12:45:
b0:8d:5c:b4:14:77:56:18:71:29:7c:54:81:48:2b:
6b:bc:7a:39:4c:dc:b5:7a:c1:d7:c0:73:d1:07:ea:
a3:18:ba:6a:c2:70:7a:46:9e:ce:d3:5d:01:f5:06:
8e:e0:a3:4b:2e:cd:e5:79:60:ae:99:5b:2f:da:10:
ac:e4:bf:c8:1c:b4:f7:e4:d9:e8:0f:3d:2d:80:e8:
5e:ae:bf:fa:c7:d9:0f:bc:76:28:74:1f:b8:f7:9f:
96:37:58:c8:ab:53:28:bd:cf:7c:7c:8f:6f:0e:6c:
69:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:68:D0:33:E0:1F:ED:88:B1:5B:49:61:8F:B2:10:45:47:BB:0F:47
X509v3 Authority Key Identifier:
keyid:8A:26:F4:76:D6:08:62:5A:D1:FE:06:E5:2B:97:4A:9F:66:F0:14:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/jmjQM-Af7YixW0lhj7IQRUe7D0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.88.96.0/21
193.109.117.0/24
193.109.121.0/24
193.109.125.0/24
193.201.0.0/21
IPv6:
2a02:c18::/32
Signature Algorithm: sha256WithRSAEncryption
82:a6:5f:3a:4c:10:e9:2f:63:18:7f:db:f3:a8:80:ec:c8:78:
04:be:18:13:5a:b9:c1:54:51:ef:4e:64:bf:22:3d:2d:1f:6f:
7f:70:b8:2e:a7:d9:f4:a0:4c:3d:c2:61:1e:9c:99:8c:45:3c:
ba:05:35:96:4a:ca:5c:4e:9a:df:5d:54:89:60:c8:00:75:4f:
3f:65:5e:74:81:5f:d6:99:60:dc:6d:a9:c8:17:0f:cd:5a:92:
71:b7:8d:a9:1d:8d:b0:33:72:a7:e3:17:dc:90:cb:ef:ca:f7:
8f:6e:40:c0:d0:49:6e:13:de:ca:03:8c:5d:92:2a:c0:fb:23:
37:3d:10:96:9c:d0:f5:63:bd:24:df:48:0b:a6:ec:eb:ca:5a:
6f:4d:60:ac:30:f4:a3:48:07:e0:17:71:e0:ce:79:8a:71:b2:
32:58:cc:9a:95:13:0e:0b:97:89:e2:5d:2a:75:12:21:23:52:
e5:18:67:6a:87:2a:6d:ee:7c:eb:46:69:61:a6:94:99:a8:e7:
6a:c6:f6:e2:38:9b:14:36:3a:98:f6:5f:e0:de:0b:a2:89:d1:
fc:6a:8c:04:e3:76:06:f2:e4:e2:ad:c7:b6:87:42:26:05:ba:
8c:3d:59:1e:63:1a:a2:76:91:de:f5:ba:d3:88:aa:e5:27:d4:
c4:6b:00:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:58 2025 by rpki-client on console.sobornost.net