Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/jz020xA1C19wxQv3fLec4Mw4eFw.roa
File: jz020xA1C19wxQv3fLec4Mw4eFw.roa (raw, json)
Hash identifier: wv42alMvv64VjXNtptyuiUzd0LYity6d/cR+47hrYrY=
Subject key identifier: 8F:3D:36:D3:10:35:0B:5F:70:C5:0B:F7:7C:B7:9C:E0:CC:38:78:5C
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 019514E9D15C8AC121AC0D7CA2141796FAB1
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/jz020xA1C19wxQv3fLec4Mw4eFw.roa
Signing time: Mon 17 Feb 2025 17:17:02 +0000
ROA not before: Mon 17 Feb 2025 17:17:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213355
IP address blocks: 80.64.16.0/24 maxlen: 24
80.64.18.0/24 maxlen: 24
80.64.19.0/24 maxlen: 24
185.39.16.0/24 maxlen: 24
185.39.17.0/24 maxlen: 24
185.39.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:14:e9:d1:5c:8a:c1:21:ac:0d:7c:a2:14:17:96:fa:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Feb 17 17:17:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f3d36d310350b5f70c50bf77cb79ce0cc38785c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:57:de:80:12:12:48:c2:78:49:33:f2:cd:df:
fb:4b:b1:1f:95:72:6e:10:27:3e:ab:4d:69:c3:59:
9c:48:fa:7f:5a:bc:2a:e7:02:1a:db:0a:55:c1:16:
21:38:1c:10:88:08:d8:e5:72:b9:f0:86:33:fb:b4:
51:42:87:1b:b7:ee:ac:9f:1a:02:ed:0a:77:e0:6c:
d8:db:a9:3a:42:ee:e8:49:ef:1c:f5:30:86:7a:78:
d0:b2:74:d7:0d:1e:c4:0f:b3:78:2c:1b:0b:8a:b2:
4e:8b:69:c2:b4:18:ad:9e:96:42:7a:b7:78:31:01:
d0:25:c9:9c:65:8c:77:99:19:b9:fc:ad:df:1c:79:
24:89:1f:bf:11:96:1e:76:83:14:88:aa:e3:aa:9c:
01:79:62:51:e9:cf:4f:1a:c4:4d:ce:9c:6a:0d:1f:
a5:fc:4e:75:8a:a1:a9:64:8b:5c:6e:11:ce:1c:fe:
ea:2b:d8:0d:71:4d:03:f3:05:45:4b:4a:2b:fe:b0:
dd:fe:2d:c6:22:75:20:b5:5d:1c:c5:ae:91:70:e9:
d5:1e:c4:40:c6:50:c5:93:1d:0b:05:b3:92:a8:9e:
ca:5d:e8:ae:ec:a2:78:51:d7:65:5e:05:a0:a6:96:
cb:78:6f:5f:c0:b0:fb:17:c8:c6:7f:8b:3e:36:b6:
02:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:3D:36:D3:10:35:0B:5F:70:C5:0B:F7:7C:B7:9C:E0:CC:38:78:5C
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/jz020xA1C19wxQv3fLec4Mw4eFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.16.0/24
80.64.18.0/23
185.39.16.0/23
185.39.19.0/24
Signature Algorithm: sha256WithRSAEncryption
70:c9:77:cb:eb:f5:8c:f1:e8:be:86:25:5f:31:f6:c6:80:df:
77:c4:e6:33:63:4a:e4:59:2e:1c:59:b4:06:83:87:f0:e1:7b:
68:c5:f6:65:1b:a8:05:99:14:1b:e8:36:38:82:46:70:5b:f4:
b5:fe:bb:0c:2c:12:bb:1a:0f:c1:4d:52:71:26:d3:91:22:39:
6a:90:25:a5:69:21:0a:b8:2e:40:1a:11:75:94:6f:f8:4d:0e:
ba:ed:29:62:1f:db:65:cb:8e:8a:75:14:72:9e:1f:83:bf:df:
0e:a7:52:09:07:22:e8:c2:ef:59:22:19:01:64:eb:46:7d:3f:
a2:d6:19:18:12:7f:9b:40:6a:2c:83:57:47:5f:ab:93:51:01:
14:be:c6:4e:c6:12:92:ce:50:67:63:6e:66:6e:66:c2:cd:29:
12:8b:6e:a6:1d:8e:20:d3:d3:91:94:62:91:b3:8f:85:b0:38:
00:86:3b:73:6b:41:d5:99:28:43:ab:1a:e4:12:93:19:b1:65:
05:13:b1:f8:b3:e1:2f:39:77:dd:9b:72:4c:1c:86:a2:d9:e7:
61:05:67:93:50:fd:00:12:84:a8:95:72:7a:a1:e9:a4:15:7d:
49:5b:5c:d4:a4:ee:06:f0:b4:32:66:69:45:1d:b6:97:30:c7:
bb:6a:3d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:55:43 2025 by rpki-client on console.sobornost.net