Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/jHTP33yl1wRqWX8GtFt4mY-Ujqk.roa
File: jHTP33yl1wRqWX8GtFt4mY-Ujqk.roa (raw, json)
Hash identifier: ZmeIR/HiMPo2cRoFPWUYH8GvupvDGcgqNg9sL2L7rpM=
Subject key identifier: 8C:74:CF:DF:7C:A5:D7:04:6A:59:7F:06:B4:5B:78:99:8F:94:8E:A9
Certificate issuer: /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Certificate serial: 019425FD4B0B37463081936006FF549FD4C9
Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/jHTP33yl1wRqWX8GtFt4mY-Ujqk.roa
Signing time: Thu 02 Jan 2025 07:49:04 +0000
ROA not before: Thu 02 Jan 2025 07:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 194.33.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:4b:0b:37:46:30:81:93:60:06:ff:54:9f:d4:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Validity
Not Before: Jan 2 07:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c74cfdf7ca5d7046a597f06b45b78998f948ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:73:cc:eb:c4:46:be:df:d9:14:61:04:ab:cc:
e5:c3:bc:78:b3:d7:29:fb:d2:04:8f:c4:f7:04:a9:
e4:76:34:ee:68:50:50:b0:f0:c9:e0:1e:e2:e7:87:
3b:8d:70:da:13:88:60:0a:e7:02:df:d7:45:53:1b:
06:97:fc:f5:80:8e:bb:3e:a3:8f:a7:af:ff:14:4a:
3a:a4:ea:ae:0e:dc:03:ba:66:2a:1b:e6:eb:52:04:
e5:0e:dc:b8:fa:2b:ad:af:2c:0f:0e:1d:28:f8:ca:
aa:cc:f1:4a:af:cc:9b:1e:28:66:e1:94:24:c1:9b:
c4:1c:c4:7f:78:f4:b0:66:e2:42:18:6e:e7:ad:0b:
82:3e:e1:ff:65:ac:ce:3a:be:f6:bf:a9:01:ed:17:
19:11:f4:f9:5b:5b:56:ca:ea:fe:f2:b4:02:02:71:
71:f6:06:59:e8:f4:2e:f2:48:bc:ad:ce:6d:12:2e:
aa:9a:eb:d7:f3:e0:32:31:26:dc:ef:70:35:37:11:
36:5c:d4:bf:f8:f1:ef:98:44:53:a7:e4:66:9c:84:
88:bd:80:d5:f1:bf:5a:ae:d0:7a:0c:ca:dc:7a:95:
97:bf:fa:1f:db:a7:c1:49:9c:d3:81:0e:3b:60:1c:
ad:e3:82:cc:9b:67:f0:b2:2e:a7:29:39:b6:c0:e7:
fb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:74:CF:DF:7C:A5:D7:04:6A:59:7F:06:B4:5B:78:99:8F:94:8E:A9
X509v3 Authority Key Identifier:
keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/jHTP33yl1wRqWX8GtFt4mY-Ujqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.59.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:ca:cd:28:35:dc:eb:f7:9b:87:54:88:f8:a5:21:c6:4c:65:
a2:f9:d6:01:e5:4c:71:e4:ab:6f:38:cc:8f:3f:49:20:aa:9d:
8b:8f:40:7d:c6:0f:ca:39:81:2a:7a:87:97:2a:ac:17:1c:e8:
e2:02:0e:ec:e8:85:bc:aa:d7:c0:81:c8:5f:9b:a2:c0:58:d7:
69:ca:ec:13:2d:cd:db:05:86:65:e4:ef:da:8f:4a:ba:c9:2f:
5a:ed:06:44:fc:c5:4c:6e:da:ef:6d:2a:e7:93:0a:15:d8:b9:
5f:3c:72:82:82:3c:cb:ad:1b:f0:2b:cd:da:f4:98:23:60:68:
21:d7:f3:66:2d:81:84:a8:a8:32:4f:7e:ba:73:77:ad:60:59:
52:e9:ee:be:9e:ae:6e:45:87:07:ef:86:12:0d:35:1f:ca:b4:
4d:33:38:57:1d:d8:8d:29:3b:f0:ee:db:dd:cc:56:66:cc:f5:
ce:10:01:84:e1:22:2e:68:0a:3c:f6:4f:7e:76:95:7b:3d:99:
49:6a:c7:3f:b6:e5:25:b9:42:4b:93:cd:eb:37:dc:cf:f3:60:
24:c3:e9:1e:47:5a:2b:ae:e6:b7:84:fe:6e:94:d6:16:ae:8b:
6f:2d:81:33:24:20:33:70:b6:83:d7:bc:4d:4d:77:5b:fd:b0:
72:24:6c:7b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/UsLN0YwgZNgBv9Un9TJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMGQ0ZTg1OTM3YjdhMGYyNzEwNTRkMjg2MTRmMjkzNGQ0
ZWE1MDAwHhcNMjUwMTAyMDc0OTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Yzc0Y2ZkZjdjYTVkNzA0NmE1OTdmMDZiNDViNzg5OThmOTQ4ZWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HPM68RGvt/ZFGEEq8zlw7x4s9cp
+9IEj8T3BKnkdjTuaFBQsPDJ4B7i54c7jXDaE4hgCucC39dFUxsGl/z1gI67PqOP
p6//FEo6pOquDtwDumYqG+brUgTlDty4+iutrywPDh0o+MqqzPFKr8ybHihm4ZQk
wZvEHMR/ePSwZuJCGG7nrQuCPuH/ZazOOr72v6kB7RcZEfT5W1tWyur+8rQCAnFx
9gZZ6PQu8ki8rc5tEi6qmuvX8+AyMSbc73A1NxE2XNS/+PHvmERTp+RmnISIvYDV
8b9artB6DMrcepWXv/of26fBSZzTgQ47YByt44LMm2fwsi6nKTm2wOf71wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIx0z998pdcEall/BrRbeJmPlI6pMB8GA1UdIwQY
MBaAFLsNToWTe3oPJxBU0oYU8pNNTqUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kMTc1MjctY2Y5OC00ZDM3LTg2NmYt
OGU5Yjk4YTk5Y2RiLzEvakhUUDMzeWwxd1JxV1g4R3RGdDRtWS1VanFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9kMTc1MjctY2Y5OC00ZDM3LTg2NmYtOGU5Yjk4YTk5Y2Ri
LzEvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiE7MA0G
CSqGSIb3DQEBCwUAA4IBAQA6ys0oNdzr95uHVIj4pSHGTGWi+dYB5Uxx5KtvOMyP
P0kgqp2Lj0B9xg/KOYEqeoeXKqwXHOjiAg7s6IW8qtfAgchfm6LAWNdpyuwTLc3b
BYZl5O/aj0q6yS9a7QZE/MVMbtrvbSrnkwoV2LlfPHKCgjzLrRvwK83a9JgjYGgh
1/NmLYGEqKgyT366c3etYFlS6e6+nq5uRYcH74YSDTUfyrRNMzhXHdiNKTvw7tvd
zFZmzPXOEAGE4SIuaAo89k9+dpV7PZlJasc/tuUluUJLk83rN9zP82Akw+keR1or
rua3hP5ulNYWrotvLYEzJCAzcLaD17xNTXdb/bByJGx7
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:40:10 2025 by rpki-client