Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/jvpcLjBfXq2k1CyzEi-i4yMMJCg.roa
File: jvpcLjBfXq2k1CyzEi-i4yMMJCg.roa (raw, json)
Hash identifier: d6CrkQWol3xr2PKuUL7zdsYsRYcblyvcCYZMvOC8fx8=
Subject key identifier: 8E:FA:5C:2E:30:5F:5E:AD:A4:D4:2C:B3:12:2F:A2:E3:23:0C:24:28
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 0194266B8DE599D94594ECDC0B71640FCA0F
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/jvpcLjBfXq2k1CyzEi-i4yMMJCg.roa
Signing time: Thu 02 Jan 2025 09:49:30 +0000
ROA not before: Thu 02 Jan 2025 09:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 78.142.216.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:8d:e5:99:d9:45:94:ec:dc:0b:71:64:0f:ca:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Jan 2 09:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8efa5c2e305f5eada4d42cb3122fa2e3230c2428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6e:6b:a4:9d:ad:c2:4d:ea:e9:9d:27:49:3d:
d9:43:c7:8c:4a:1c:b9:56:e9:d4:b9:82:49:6b:5b:
c7:88:87:88:7d:0b:15:b7:3d:aa:a7:9c:ca:b1:cf:
a4:24:61:39:d2:63:b2:1e:51:16:9a:33:e1:cb:9c:
28:f0:d8:4e:23:69:66:46:73:58:ef:d0:52:df:ad:
bc:65:61:f4:b4:85:81:a6:c7:d8:f7:f1:ac:4a:a7:
7d:eb:e6:00:bf:94:f9:f6:62:d3:65:27:0a:fb:01:
8b:b2:d8:d4:aa:a1:ee:4a:e7:4f:bf:15:d3:4c:50:
0e:fe:97:3b:2f:21:33:52:c5:b6:78:3e:5e:b5:c1:
d9:39:ab:67:5a:e7:ed:82:21:28:8f:eb:c7:70:8c:
68:e7:36:c6:85:0f:fe:f4:57:2e:df:57:e1:75:c7:
ae:7c:37:91:d6:10:4f:94:fe:54:42:90:0b:5d:76:
d3:b6:94:a1:f9:27:ba:f1:7e:22:18:35:1d:18:98:
54:a0:e4:f1:e9:37:e9:a8:26:b9:ef:41:dd:db:ff:
80:df:64:9d:b7:6a:3f:a6:f7:cf:78:c8:bd:6c:17:
94:a4:1c:63:99:d7:b5:e5:96:88:a2:07:1c:ca:cd:
34:67:0b:a6:df:ab:1f:a7:d1:74:2e:2a:fd:d7:66:
d0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FA:5C:2E:30:5F:5E:AD:A4:D4:2C:B3:12:2F:A2:E3:23:0C:24:28
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/jvpcLjBfXq2k1CyzEi-i4yMMJCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.216.0/22
Signature Algorithm: sha256WithRSAEncryption
69:d8:8c:e2:e3:58:c9:f4:30:de:47:37:8c:0c:06:23:51:1a:
91:67:c7:53:9b:14:3d:41:a3:6d:6b:a6:7f:43:61:5f:e2:f1:
43:c0:a2:91:a2:97:00:3c:c6:9a:58:a0:25:3c:74:b2:69:b0:
a8:19:92:29:c9:98:46:f2:32:b2:73:09:12:30:42:20:84:84:
e4:15:13:de:d3:73:c9:f7:c8:d8:97:55:33:f5:3e:24:74:08:
8a:3b:88:6d:dc:4e:f5:1f:a1:fb:7c:ff:67:d8:52:2d:47:74:
3f:fa:6e:d9:5c:a3:1c:47:fe:99:f0:27:f4:9c:ef:3e:3b:a9:
8e:ad:7c:9b:43:50:50:67:08:27:53:05:2e:97:9f:72:b6:5b:
10:6b:6d:78:f7:65:fe:b5:cb:ac:bb:bd:91:76:44:4e:84:de:
9f:bb:53:a8:c9:ec:50:84:b6:27:6c:b2:d0:14:0d:8b:c0:88:
bf:f3:10:2e:90:04:64:f1:8a:a5:f6:e6:70:b8:37:7e:6a:f4:
b9:62:25:60:ef:a8:3e:e8:08:f0:18:2c:e4:41:09:64:31:6e:
72:eb:08:5e:14:9c:8a:3f:f2:d8:1d:76:c8:a8:3e:85:11:34:
2d:55:fa:e8:d7:66:ee:55:b5:4a:d7:c1:a2:03:0b:63:fe:56:
1f:0a:62:42
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma43lmdlFlOzcC3FkD8oPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2
OGIxZTEwHhcNMjUwMTAyMDk0OTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWZhNWMyZTMwNWY1ZWFkYTRkNDJjYjMxMjJmYTJlMzIzMGMyNDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvm5rpJ2twk3q6Z0nST3ZQ8eMShy5
VunUuYJJa1vHiIeIfQsVtz2qp5zKsc+kJGE50mOyHlEWmjPhy5wo8NhOI2lmRnNY
79BS3628ZWH0tIWBpsfY9/GsSqd96+YAv5T59mLTZScK+wGLstjUqqHuSudPvxXT
TFAO/pc7LyEzUsW2eD5etcHZOatnWuftgiEoj+vHcIxo5zbGhQ/+9Fcu31fhdceu
fDeR1hBPlP5UQpALXXbTtpSh+Se68X4iGDUdGJhUoOTx6TfpqCa570Hd2/+A32Sd
t2o/pvfPeMi9bBeUpBxjmde15ZaIogccys00Zwum36sfp9F0Lir912bQeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI76XC4wX16tpNQssxIvouMjDCQoMB8GA1UdIwQY
MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut
ZGNlOTQ3ZTI5NGI2LzEvanZwY0xqQmZYcTJrMUN5ekVpLWk0eU1NSkNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2
LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTo7YMA0G
CSqGSIb3DQEBCwUAA4IBAQBp2Izi41jJ9DDeRzeMDAYjURqRZ8dTmxQ9QaNta6Z/
Q2Ff4vFDwKKRopcAPMaaWKAlPHSyabCoGZIpyZhG8jKycwkSMEIghITkFRPe03PJ
98jYl1Uz9T4kdAiKO4ht3E71H6H7fP9n2FItR3Q/+m7ZXKMcR/6Z8Cf0nO8+O6mO
rXybQ1BQZwgnUwUul59ytlsQa21492X+tcusu72RdkROhN6fu1OoyexQhLYnbLLQ
FA2LwIi/8xAukARk8Yql9uZwuDd+avS5YiVg76g+6AjwGCzkQQlkMW5y6wheFJyK
P/LYHXbIqD6FETQtVfro12buVbVK18GiAwtj/lYfCmJC
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:50:57 2025 by rpki-client