Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/JQj924cUZ739dTo2CAmTW-Nn1zw.roa
File: JQj924cUZ739dTo2CAmTW-Nn1zw.roa (raw, json)
Hash identifier: wLvSRyuv0hEPp/uJ8ZfBwX5TJv2CK5mAgRM5bxes1Tg=
Subject key identifier: 25:08:FD:DB:87:14:67:BD:FD:75:3A:36:08:09:93:5B:E3:67:D7:3C
Certificate issuer: /CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Certificate serial: 019424B3DD146F7B55E7BCE287FDDA99372C
Authority key identifier: 80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/JQj924cUZ739dTo2CAmTW-Nn1zw.roa
Signing time: Thu 02 Jan 2025 01:49:14 +0000
ROA not before: Thu 02 Jan 2025 01:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59441
IP address blocks: 185.113.9.0/24 maxlen: 24
2a12:9340::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:dd:14:6f:7b:55:e7:bc:e2:87:fd:da:99:37:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Validity
Not Before: Jan 2 01:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2508fddb871467bdfd753a360809935be367d73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:58:b0:54:b3:3d:3f:5f:c3:a9:a8:4a:8a:b9:
6a:a6:72:6d:84:25:b8:3d:d0:27:21:4e:28:3d:04:
51:34:e9:a6:6a:eb:d8:98:6d:4b:7f:bb:cd:4e:50:
8d:3d:aa:f3:e1:42:d9:27:15:fd:71:ed:26:ec:58:
3c:eb:31:64:f8:d2:0d:95:60:d2:67:dd:e7:51:2d:
ed:b6:e5:9c:50:b1:cf:da:b4:ce:ee:50:9a:42:a3:
98:44:ce:02:df:24:08:4d:6c:99:c6:6b:3d:49:55:
24:cc:af:6d:70:a6:a7:0b:aa:38:84:22:17:dd:e2:
1d:76:7b:37:b4:7e:98:f6:ee:8b:c5:64:41:1a:9d:
96:7b:ad:ba:b9:47:86:12:63:33:c1:e0:b3:45:f1:
36:dd:c5:63:f5:0b:ac:e9:c6:6c:aa:ac:04:2b:88:
50:ae:2e:4f:21:d3:b2:77:33:ff:eb:31:77:00:0a:
5d:22:0b:2a:23:a1:15:60:da:34:3a:10:10:71:f0:
6f:e2:e0:4c:fe:f3:d8:83:ce:26:36:e9:e8:63:1d:
c6:35:fa:c0:41:cb:b0:24:e3:1a:bc:d9:d5:b5:d4:
b6:c4:e9:d3:bc:f6:0f:39:5c:8f:ca:90:af:4b:0d:
8f:ad:b6:22:5c:21:55:41:26:57:a3:9d:1d:12:15:
f6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:08:FD:DB:87:14:67:BD:FD:75:3A:36:08:09:93:5B:E3:67:D7:3C
X509v3 Authority Key Identifier:
keyid:80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/JQj924cUZ739dTo2CAmTW-Nn1zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.9.0/24
IPv6:
2a12:9340::/29
Signature Algorithm: sha256WithRSAEncryption
8b:fb:81:2f:1f:e6:22:e9:55:a8:1f:63:81:74:49:e9:41:70:
65:3a:24:75:47:7b:17:9f:b3:a2:0d:df:bf:75:75:88:f5:00:
d2:56:48:3c:f0:1f:d4:f0:84:f0:af:a4:39:1e:cc:52:ee:67:
bf:ea:f6:ef:5d:3b:b8:18:cd:f0:0b:10:b7:24:44:25:89:85:
46:2b:45:fb:90:58:5b:2d:05:28:14:50:61:49:43:c6:30:bc:
9b:d6:11:7b:27:9e:48:8e:ad:5b:54:62:31:cc:8f:44:c8:1f:
d3:12:6f:04:17:f5:aa:62:aa:e0:dc:f7:07:aa:75:de:57:1b:
3c:58:14:b2:23:43:7e:a5:b6:3e:bb:e5:89:d7:ac:6e:f0:db:
82:36:ab:3e:36:5c:7d:f9:e6:c4:af:53:08:d0:2d:3c:c7:2a:
76:77:07:e8:ab:5a:bc:3b:d0:9a:31:32:1f:d4:fa:61:1c:4b:
2b:8e:1e:db:96:cc:3b:ad:b3:ff:aa:03:51:6d:c7:60:6a:30:
a2:5e:60:cf:17:4b:22:7e:91:dd:5a:f2:ab:47:ac:3f:29:55:
d0:27:88:50:48:72:3d:0f:5f:1c:39:42:f7:5a:f5:60:56:0b:
ab:ac:c2:7c:4c:98:9d:fc:45:22:a2:39:6d:89:df:84:68:51:
42:67:77:02
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQks90Ub3tV57zih/3amTcsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNTNkOWI1MWY0N2FhNTVmOWU1MjcwNDc1NDg2OWY1NTM2
YmFlNGMwHhcNMjUwMTAyMDE0OTE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTA4ZmRkYjg3MTQ2N2JkZmQ3NTNhMzYwODA5OTM1YmUzNjdkNzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01iwVLM9P1/DqahKirlqpnJthCW4
PdAnIU4oPQRRNOmmauvYmG1Lf7vNTlCNParz4ULZJxX9ce0m7Fg86zFk+NINlWDS
Z93nUS3ttuWcULHP2rTO7lCaQqOYRM4C3yQITWyZxms9SVUkzK9tcKanC6o4hCIX
3eIddns3tH6Y9u6LxWRBGp2We626uUeGEmMzweCzRfE23cVj9Qus6cZsqqwEK4hQ
ri5PIdOydzP/6zF3AApdIgsqI6EVYNo0OhAQcfBv4uBM/vPYg84mNunoYx3GNfrA
QcuwJOMavNnVtdS2xOnTvPYPOVyPypCvSw2PrbYiXCFVQSZXo50dEhX28QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFCUI/duHFGe9/XU6NggJk1vjZ9c8MB8GA1UdIwQY
MBaAFIBT2bUfR6pV+eUnBHVIafVTa65MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0ZQWnRSOUhxbFg1NVNjRWRVaHA5Vk5ycmt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hNDZiZjUtY2M4Zi00MGM3LTkxNWIt
YTE1YWY1ZThmMTNjLzEvSlFqOTI0Y1VaNzM5ZFRvMkNBbVRXLU5uMXp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hNDZiZjUtY2M4Zi00MGM3LTkxNWItYTE1YWY1ZThmMTNj
LzEvZ0ZQWnRSOUhxbFg1NVNjRWRVaHA5Vk5ycmt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuXEJMA0E
AgACMAcDBQMqEpNAMA0GCSqGSIb3DQEBCwUAA4IBAQCL+4EvH+Yi6VWoH2OBdEnp
QXBlOiR1R3sXn7OiDd+/dXWI9QDSVkg88B/U8ITwr6Q5HsxS7me/6vbvXTu4GM3w
CxC3JEQliYVGK0X7kFhbLQUoFFBhSUPGMLyb1hF7J55Ijq1bVGIxzI9EyB/TEm8E
F/WqYqrg3PcHqnXeVxs8WBSyI0N+pbY+u+WJ16xu8NuCNqs+Nlx9+ebEr1MI0C08
xyp2dwfoq1q8O9CaMTIf1PphHEsrjh7blsw7rbP/qgNRbcdgajCiXmDPF0sifpHd
WvKrR6w/KVXQJ4hQSHI9D18cOUL3WvVgVgurrMJ8TJid/EUiojltid+EaFFCZ3cC
-----END CERTIFICATE-----
Generated at Fri Apr 11 02:29:45 2025 by rpki-client