Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/JnmV1uE_4MebBupIVKh1ma1H1gk.roa
File: JnmV1uE_4MebBupIVKh1ma1H1gk.roa (raw, json)
Hash identifier: gqWBeudhH/bbVTFkoWrwLWUFH+5dKTSMRsmE9JKpVbo=
Subject key identifier: 26:79:95:D6:E1:3F:E0:C7:9B:06:EA:48:54:A8:75:99:AD:47:D6:09
Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial: 123D749D
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/JnmV1uE_4MebBupIVKh1ma1H1gk.roa
Signing time: Sat 01 Jan 2022 04:01:48 +0000
ROA not before: Sat 01 Jan 2022 04:01:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21196
IP address blocks: 217.199.128.0/20 maxlen: 20
217.199.128.0/21 maxlen: 21
217.199.133.0/24 maxlen: 24
80.65.161.0/24 maxlen: 24
217.199.136.0/21 maxlen: 21
80.65.160.0/21 maxlen: 21
80.65.160.0/20 maxlen: 20
80.65.167.0/24 maxlen: 24
80.65.168.0/21 maxlen: 21
217.199.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 306017437 (0x123d749d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Validity
Not Before: Jan 1 04:01:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=267995d6e13fe0c79b06ea4854a87599ad47d609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:63:48:55:84:ce:f6:e8:00:d0:27:d1:a8:f2:
0b:3c:29:e7:cb:dd:1b:67:0c:7f:9f:ca:d2:ca:12:
e5:50:6f:07:9b:29:4b:11:ea:eb:21:01:3a:ba:12:
f1:91:ba:2b:3f:35:8d:6f:bc:7c:87:f4:05:5b:b3:
cf:ae:7c:8f:b8:2a:fc:42:1d:cd:c5:db:48:ef:e4:
c8:08:1c:55:3e:2c:1b:d5:91:27:26:80:90:c3:0d:
14:8e:b0:15:ae:a1:83:a2:69:c4:e8:ff:f2:20:11:
c1:bb:9b:d3:4f:73:64:0d:56:f2:08:f1:8b:9a:49:
62:6e:96:13:da:6c:2c:70:1d:de:3c:1b:a5:56:a6:
22:b1:8c:23:e4:04:48:98:4c:2a:a3:5b:a1:6c:08:
84:e1:15:b5:9f:03:d5:2f:2b:75:3c:b3:eb:95:2a:
11:69:b3:74:6e:1b:d8:9c:21:9a:8d:e1:96:5f:8e:
90:a4:0a:e9:26:32:a7:96:ef:d1:85:4f:21:e7:16:
94:6b:be:3a:3e:f6:e1:c0:44:b4:04:15:04:f6:26:
a7:8c:63:e5:c8:39:a2:55:4a:23:60:fe:87:1e:1a:
2e:36:6a:83:31:06:2d:23:4b:2c:4b:60:20:ca:b4:
93:b4:f3:ee:4d:1a:a5:1f:99:25:15:a2:00:83:c2:
ec:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:79:95:D6:E1:3F:E0:C7:9B:06:EA:48:54:A8:75:99:AD:47:D6:09
X509v3 Authority Key Identifier:
keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/JnmV1uE_4MebBupIVKh1ma1H1gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.65.160.0/20
217.199.128.0/20
Signature Algorithm: sha256WithRSAEncryption
32:d8:0c:52:61:37:18:b3:c0:7d:ed:c2:51:e9:85:15:86:40:
d2:47:96:9a:fe:1b:f7:b0:8e:7d:ea:56:d9:1f:d1:01:29:a6:
ed:fb:de:8f:0b:f1:0b:ae:c0:27:a7:6d:c2:19:c9:ff:45:be:
b7:9b:cd:83:c2:10:97:c4:b0:30:f0:a6:af:da:51:d4:98:db:
8e:4f:fa:9d:e9:0f:30:0b:20:52:8b:38:6b:b9:44:79:bb:39:
29:13:d6:4d:f0:d8:ba:93:24:a2:0a:44:4c:66:36:7c:95:c2:
87:45:7b:79:75:aa:42:bd:d0:b0:4a:2c:7f:0d:82:5b:74:00:
5c:d6:87:cb:90:d1:ec:f1:d1:5c:93:f2:3b:d0:59:fd:79:f9:
36:a1:73:30:c2:61:ca:8a:a5:6d:9e:24:2c:c2:42:34:f0:cc:
c6:81:05:08:33:ee:a2:8f:ab:90:96:e0:f9:21:d7:13:f9:98:
1b:43:8c:b3:fc:b6:f8:0f:2d:95:39:bc:81:73:13:9d:60:98:
9b:e3:29:9e:1d:8c:f1:c4:22:65:b7:25:f4:1f:da:40:83:5d:
72:1b:a1:99:85:3b:0c:cc:df:3b:1d:83:21:5c:57:85:c4:26:
88:5a:03:79:22:20:14:7d:ef:52:15:aa:be:bd:a4:09:4c:92:
db:14:9a:88
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEEj10nTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
YzdiMDZiZjQxMzAwZGM0ZDMwZjNkMGUxODBjOWI5NWQyYmNkZGZmMB4XDTIyMDEw
MTA0MDE0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjY3OTk1ZDZlMTNm
ZTBjNzliMDZlYTQ4NTRhODc1OTlhZDQ3ZDYwOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALdjSFWEzvboANAn0ajyCzwp58vdG2cMf5/K0soS5VBvB5sp
SxHq6yEBOroS8ZG6Kz81jW+8fIf0BVuzz658j7gq/EIdzcXbSO/kyAgcVT4sG9WR
JyaAkMMNFI6wFa6hg6JpxOj/8iARwbub009zZA1W8gjxi5pJYm6WE9psLHAd3jwb
pVamIrGMI+QESJhMKqNboWwIhOEVtZ8D1S8rdTyz65UqEWmzdG4b2Jwhmo3hll+O
kKQK6SYyp5bv0YVPIecWlGu+Oj724cBEtAQVBPYmp4xj5cg5olVKI2D+hx4aLjZq
gzEGLSNLLEtgIMq0k7Tz7k0apR+ZJRWiAIPC7PECAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQmeZXW4T/gx5sG6khUqHWZrUfWCTAfBgNVHSMEGDAWgBQcewa/QTANxNMP
PQ4YDJuV0rzd/zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0hIc0d2MEV3RGNUVER6ME9HQXlibGRLODNmOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWEvNzAyYjI4LWUxNTgtNDBjMC04MzMwLTI0ZmRkYzZkMTQ3Yi8x
L0pubVYxdUVfNE1lYkJ1cElWS2gxbWExSDFnay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEv
NzAyYjI4LWUxNTgtNDBjMC04MzMwLTI0ZmRkYzZkMTQ3Yi8xL0hIc0d2MEV3RGNU
VER6ME9HQXlibGRLODNmOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEBFBBoAMEBNnHgDANBgkqhkiG9w0B
AQsFAAOCAQEAMtgMUmE3GLPAfe3CUemFFYZA0keWmv4b97COfepW2R/RASmm7fve
jwvxC67AJ6dtwhnJ/0W+t5vNg8IQl8SwMPCmr9pR1Jjbjk/6nekPMAsgUos4a7lE
ebs5KRPWTfDYupMkogpETGY2fJXCh0V7eXWqQr3QsEosfw2CW3QAXNaHy5DR7PHR
XJPyO9BZ/Xn5NqFzMMJhyoqlbZ4kLMJCNPDMxoEFCDPuoo+rkJbg+SHXE/mYG0OM
s/y2+A8tlTm8gXMTnWCYm+Mpnh2M8cQiZbcl9B/aQINdchuhmYU7DMzfOx2DIVxX
hcQmiFoDeSIgFH3vUhWqvr2kCUyS2xSaiA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:54:17 2025 by rpki-client