Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/JUPuO1gEOlswf-Lc9sFNwbQY2sk.roa
File: JUPuO1gEOlswf-Lc9sFNwbQY2sk.roa (raw, json)
Hash identifier: F2a9v9DtNfzg2pGhzLy8m60T9NMjD+/lLg0geLxjtHo=
Subject key identifier: 25:43:EE:3B:58:04:3A:5B:30:7F:E2:DC:F6:C1:4D:C1:B4:18:DA:C9
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019422FC1CBAFAC34F07CDA575D915D32DF8
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/JUPuO1gEOlswf-Lc9sFNwbQY2sk.roa
Signing time: Wed 01 Jan 2025 17:48:55 +0000
ROA not before: Wed 01 Jan 2025 17:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206654
IP address blocks: 37.77.144.0/24 maxlen: 24
45.88.124.0/22 maxlen: 22
185.212.11.0/24 maxlen: 24
195.211.48.0/24 maxlen: 24
2a0f:fa00::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:1c:ba:fa:c3:4f:07:cd:a5:75:d9:15:d3:2d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 17:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2543ee3b58043a5b307fe2dcf6c14dc1b418dac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:50:b4:76:4b:97:8c:ba:74:6c:b5:1c:d1:c9:
12:e6:0a:d0:b4:b5:65:af:01:f6:85:47:85:6c:54:
e9:e0:b0:a7:94:d2:69:f8:b3:56:72:52:e9:70:98:
ba:f8:e3:3b:d3:0b:39:1e:9f:28:e9:a4:db:ad:47:
b0:88:2a:b3:d3:92:ad:43:68:62:3d:e3:23:39:8a:
53:db:95:3f:4a:ee:9f:66:29:05:4a:35:17:df:90:
e1:36:e3:07:19:51:ce:ae:9d:ad:a9:24:1d:eb:12:
ee:fd:4e:fd:22:cb:90:02:08:51:71:c0:99:8c:08:
3e:80:ac:7d:0f:38:c4:ef:60:87:a0:e2:d2:96:4f:
8d:ae:cd:b1:d7:a6:89:aa:40:c9:1b:c7:de:d6:67:
3a:89:f9:23:27:6d:fc:79:f3:96:56:60:54:0c:41:
96:39:bf:08:c0:d9:0d:b1:43:18:fa:3e:bb:b1:c0:
fe:20:b2:61:73:b0:f0:99:d0:61:5b:68:3e:c6:03:
04:4f:f9:d2:64:9c:54:20:e4:64:1f:82:13:2c:28:
46:87:83:95:f7:03:b4:dd:bd:94:15:7f:3c:07:97:
77:27:08:c1:bf:80:4a:98:4c:86:19:23:d3:4b:48:
96:94:9c:0f:f2:a8:9c:3e:c4:d1:78:5d:88:3d:88:
04:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:43:EE:3B:58:04:3A:5B:30:7F:E2:DC:F6:C1:4D:C1:B4:18:DA:C9
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/JUPuO1gEOlswf-Lc9sFNwbQY2sk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.144.0/24
45.88.124.0/22
185.212.11.0/24
195.211.48.0/24
IPv6:
2a0f:fa00::/29
Signature Algorithm: sha256WithRSAEncryption
16:e6:c0:3d:1c:00:5a:3c:63:11:db:f3:34:5d:71:b7:06:5f:
44:5d:ba:4b:86:c4:0e:a5:dc:36:45:fc:83:54:ae:c5:9e:4f:
54:b0:76:b6:fb:0d:fa:7e:1b:fb:70:92:45:c1:19:14:5b:22:
47:eb:2c:7e:8c:5d:11:25:9b:bb:5f:b4:5d:36:4e:c8:23:37:
b2:80:99:78:7f:86:72:ef:76:4b:cd:28:e1:76:da:d9:11:a3:
ea:d6:f4:a1:e2:48:63:48:56:d5:b2:eb:b0:d4:34:98:9a:aa:
34:47:66:73:58:5c:bb:81:2e:38:b5:32:41:28:44:09:5b:d9:
c1:81:3e:44:ea:aa:ae:dd:8d:ad:00:46:90:ca:a9:e9:49:61:
d6:e8:bc:8f:3d:1c:6c:e6:88:ce:3c:c1:74:4f:a2:1c:1e:45:
3c:74:d8:83:b0:1e:50:aa:8e:7c:2a:e9:21:a7:23:38:33:af:
79:02:f6:f2:56:b8:ba:8e:4a:5b:d6:42:3f:cb:fa:00:0e:3e:
9f:1b:1b:09:55:0d:24:45:d0:48:9a:df:49:6e:6f:89:30:4e:
58:77:a0:07:77:cc:55:b2:a2:f1:fb:d5:a8:b3:54:28:2c:ba:
f6:e7:15:92:fd:66:16:80:71:a3:87:ad:ef:09:8b:ba:ff:b7:
c4:4a:cf:bf
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQi/By6+sNPB82lddkV0y34MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjUwMTAxMTc0ODU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTQzZWUzYjU4MDQzYTViMzA3ZmUyZGNmNmMxNGRjMWI0MThkYWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1C0dkuXjLp0bLUc0ckS5grQtLVl
rwH2hUeFbFTp4LCnlNJp+LNWclLpcJi6+OM70ws5Hp8o6aTbrUewiCqz05KtQ2hi
PeMjOYpT25U/Su6fZikFSjUX35DhNuMHGVHOrp2tqSQd6xLu/U79IsuQAghRccCZ
jAg+gKx9DzjE72CHoOLSlk+Nrs2x16aJqkDJG8fe1mc6ifkjJ238efOWVmBUDEGW
Ob8IwNkNsUMY+j67scD+ILJhc7DwmdBhW2g+xgMET/nSZJxUIORkH4ITLChGh4OV
9wO03b2UFX88B5d3JwjBv4BKmEyGGSPTS0iWlJwP8qicPsTReF2IPYgE5wIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFCVD7jtYBDpbMH/i3PbBTcG0GNrJMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvSlVQdU8xZ0VPbHN3Zi1MYzlzRk53YlFZMnNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAJU2QAwQC
LVh8AwQAudQLAwQAw9MwMA0EAgACMAcDBQMqD/oAMA0GCSqGSIb3DQEBCwUAA4IB
AQAW5sA9HABaPGMR2/M0XXG3Bl9EXbpLhsQOpdw2RfyDVK7Fnk9UsHa2+w36fhv7
cJJFwRkUWyJH6yx+jF0RJZu7X7RdNk7IIzeygJl4f4Zy73ZLzSjhdtrZEaPq1vSh
4khjSFbVsuuw1DSYmqo0R2ZzWFy7gS44tTJBKEQJW9nBgT5E6qqu3Y2tAEaQyqnp
SWHW6LyPPRxs5ojOPMF0T6IcHkU8dNiDsB5Qqo58KukhpyM4M695AvbyVri6jkpb
1kI/y/oADj6fGxsJVQ0kRdBImt9Jbm+JME5Yd6AHd8xVsqLx+9Wos1QoLLr25xWS
/WYWgHGjh63vCYu6/7fESs+/
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:10:13 2025 by rpki-client