Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/6cf2e6-b083-4afd-8cc7-20a1173589df/1/jcO427iGfBzsg9viRbTLRoS8ZWU.roa
File: jcO427iGfBzsg9viRbTLRoS8ZWU.roa (raw, json)
Hash identifier: Y6V0erCerQruV0cUUaJW04CNenYTyHvCckFxFBLhaZU=
Subject key identifier: 8D:C3:B8:DB:B8:86:7C:1C:EC:83:DB:E2:45:B4:CB:46:84:BC:65:65
Certificate issuer: /CN=9e38bc2e142fbebe5bd5575eaaeefb9f7890dd6b
Certificate serial: 02EB9C3D
Authority key identifier: 9E:38:BC:2E:14:2F:BE:BE:5B:D5:57:5E:AA:EE:FB:9F:78:90:DD:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nji8LhQvvr5b1Vdequ77n3iQ3Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/6cf2e6-b083-4afd-8cc7-20a1173589df/1/jcO427iGfBzsg9viRbTLRoS8ZWU.roa
Signing time: Sat 01 Jan 2022 16:05:22 +0000
ROA not before: Sat 01 Jan 2022 16:05:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58212
IP address blocks: 194.48.217.0/24 maxlen: 24
45.157.232.0/22 maxlen: 24
185.254.96.0/22 maxlen: 24
2a0c:4ac0:1200::/40 maxlen: 40
2a0c:4ac0:1100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48995389 (0x2eb9c3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e38bc2e142fbebe5bd5575eaaeefb9f7890dd6b
Validity
Not Before: Jan 1 16:05:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8dc3b8dbb8867c1cec83dbe245b4cb4684bc6565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:14:7a:a2:e8:36:67:2b:d9:be:7b:3a:5f:ce:
d9:3c:75:34:69:d9:41:68:5b:d5:67:c7:c4:fe:0d:
55:13:34:9c:f2:9a:97:3b:94:32:86:51:16:ae:8c:
a8:60:e4:f0:9b:35:db:f9:49:13:bc:82:2a:40:55:
ec:be:66:e2:65:ff:88:5b:5d:fa:d0:e8:3d:2a:c0:
79:9c:3d:36:fc:46:ca:71:d4:bb:f0:d6:71:9d:35:
2a:7d:b4:e6:73:68:ba:30:6e:e4:b7:ef:51:46:67:
1a:a3:9e:a2:8a:f4:a6:23:ca:7f:c2:d9:5f:74:2b:
da:5b:ac:f6:b2:4a:8d:98:8d:13:36:0f:70:f5:da:
25:1e:30:fb:b1:de:de:eb:d2:46:22:97:d7:55:de:
19:f3:41:82:59:f5:1b:ae:3e:e1:12:f5:2c:d6:ef:
ba:43:b8:e4:f7:fa:17:b1:87:8c:2b:2c:44:f9:f6:
30:6f:d5:6c:4a:c1:38:30:c7:62:f5:9f:a0:7e:10:
79:74:ba:2f:7b:e8:ab:93:20:df:ed:c5:30:24:5c:
36:34:18:45:fa:50:b2:67:6a:ce:e7:3a:94:f6:2e:
d7:71:a1:5e:36:33:75:93:02:90:15:19:c1:0c:c5:
5a:97:ec:07:fb:cd:d8:86:8d:3f:ea:33:74:fc:a6:
31:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C3:B8:DB:B8:86:7C:1C:EC:83:DB:E2:45:B4:CB:46:84:BC:65:65
X509v3 Authority Key Identifier:
keyid:9E:38:BC:2E:14:2F:BE:BE:5B:D5:57:5E:AA:EE:FB:9F:78:90:DD:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nji8LhQvvr5b1Vdequ77n3iQ3Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6cf2e6-b083-4afd-8cc7-20a1173589df/1/jcO427iGfBzsg9viRbTLRoS8ZWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6cf2e6-b083-4afd-8cc7-20a1173589df/1/nji8LhQvvr5b1Vdequ77n3iQ3Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.232.0/22
185.254.96.0/22
194.48.217.0/24
IPv6:
2a0c:4ac0:1100::-2a0c:4ac0:12ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
47:1f:55:eb:3c:2f:03:90:76:23:ed:43:07:86:fc:e8:ea:03:
e2:e3:bc:f9:dc:38:22:c4:c1:00:0d:f7:c9:38:65:84:a3:f0:
71:2a:2e:a4:f0:3f:19:1a:e7:d5:50:8f:99:2a:cc:ce:06:d3:
6f:c9:e5:74:2e:97:86:c4:a5:53:73:bc:dd:1a:a2:d5:b3:e6:
76:17:f0:2c:94:64:00:10:b4:da:97:9a:cf:a8:6b:92:47:ab:
8f:f8:fd:0f:c1:8b:54:aa:28:c9:38:93:32:7d:d4:41:70:51:
a7:40:47:db:6a:41:1a:d6:92:b7:3e:e5:cd:7a:5f:ab:45:3b:
bd:42:19:83:d5:31:66:83:e4:1d:3d:9d:77:d9:1a:f7:82:03:
18:f9:df:01:d6:56:25:8d:6f:66:84:a4:b2:f0:96:16:74:f3:
30:75:d7:6e:b7:95:63:a2:2f:ae:54:22:81:2a:8f:ee:5f:32:
5a:a3:90:f0:56:d5:0d:b9:e7:d6:12:02:cd:42:d6:66:53:b3:
28:92:d3:a9:c0:28:81:ae:52:c6:d3:e9:12:e9:01:ba:9b:40:
d0:dc:76:b5:fc:68:2d:cb:19:45:5a:87:dd:12:44:2d:99:42:
e7:73:41:8e:f5:ca:12:f7:75:25:a1:e3:03:92:af:32:9d:8c:
e7:82:45:67
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgIEAuucPTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZTM4YmMyZTE0MmZiZWJlNWJkNTU3NWVhYWVlZmI5Zjc4OTBkZDZiMB4XDTIyMDEw
MTE2MDUyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGRjM2I4ZGJiODg2
N2MxY2VjODNkYmUyNDViNGNiNDY4NGJjNjU2NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANIUeqLoNmcr2b57Ol/O2Tx1NGnZQWhb1WfHxP4NVRM0nPKa
lzuUMoZRFq6MqGDk8Js12/lJE7yCKkBV7L5m4mX/iFtd+tDoPSrAeZw9NvxGynHU
u/DWcZ01Kn205nNoujBu5LfvUUZnGqOeoor0piPKf8LZX3Qr2lus9rJKjZiNEzYP
cPXaJR4w+7He3uvSRiKX11XeGfNBgln1G64+4RL1LNbvukO45Pf6F7GHjCssRPn2
MG/VbErBODDHYvWfoH4QeXS6L3voq5Mg3+3FMCRcNjQYRfpQsmdqzuc6lPYu13Gh
XjYzdZMCkBUZwQzFWpfsB/vN2IaNP+ozdPymMZUCAwEAAaOCAi8wggIrMB0GA1Ud
DgQWBBSNw7jbuIZ8HOyD2+JFtMtGhLxlZTAfBgNVHSMEGDAWgBSeOLwuFC++vlvV
V16q7vufeJDdazAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25qaThMaFF2dnI1YjFWZGVxdTc3bjNpUTNXcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzMvNmNmMmU2LWIwODMtNGFmZC04Y2M3LTIwYTExNzM1ODlkZi8x
L2pjTzQyN2lHZkJ6c2c5dmlSYlRMUm9TOFpXVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMv
NmNmMmU2LWIwODMtNGFmZC04Y2M3LTIwYTExNzM1ODlkZi8xL25qaThMaFF2dnI1
YjFWZGVxdTc3bjNpUTNXcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBF
BggrBgEFBQcBBwEB/wQ2MDQwGAQCAAEwEgMEAi2d6AMEArn+YAMEAMIw2TAYBAIA
AjASMBADBgAqDErAEQMGACoMSsASMA0GCSqGSIb3DQEBCwUAA4IBAQBHH1XrPC8D
kHYj7UMHhvzo6gPi47z53DgixMEADffJOGWEo/BxKi6k8D8ZGufVUI+ZKszOBtNv
yeV0LpeGxKVTc7zdGqLVs+Z2F/AslGQAELTal5rPqGuSR6uP+P0PwYtUqijJOJMy
fdRBcFGnQEfbakEa1pK3PuXNel+rRTu9QhmD1TFmg+QdPZ132Rr3ggMY+d8B1lYl
jW9mhKSy8JYWdPMwdddut5Vjoi+uVCKBKo/uXzJao5DwVtUNuefWEgLNQtZmU7Mo
ktOpwCiBrlLG0+kS6QG6m0DQ3Ha1/GgtyxlFWofdEkQtmULnc0GO9coS93UloeMD
kq8ynYzngkVn
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:55:09 2025 by rpki-client