Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/j2IAXuDDxL9R5htveS2h7u2YZbk.roa
File: j2IAXuDDxL9R5htveS2h7u2YZbk.roa (raw, json)
Hash identifier: znjWCCItAdjYTrrA4TwcAum8T33INI1kjoCAB+b3jbk=
Subject key identifier: 8F:62:00:5E:E0:C3:C4:BF:51:E6:1B:6F:79:2D:A1:EE:ED:98:65:B9
Certificate issuer: /CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Certificate serial: 019421B219112B833E1B8D1154B0E197C883
Authority key identifier: 4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/j2IAXuDDxL9R5htveS2h7u2YZbk.roa
Signing time: Wed 01 Jan 2025 11:48:27 +0000
ROA not before: Wed 01 Jan 2025 11:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49010
IP address blocks: 91.236.210.0/23 maxlen: 23
185.147.144.0/22 maxlen: 22
2a0a:5400::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:19:11:2b:83:3e:1b:8d:11:54:b0:e1:97:c8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Validity
Not Before: Jan 1 11:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f62005ee0c3c4bf51e61b6f792da1eeed9865b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:81:64:84:63:f5:5a:ba:ad:d6:56:8e:75:40:
fa:af:2c:f6:91:fc:6f:16:12:5e:15:dd:c7:72:47:
b3:57:d1:ea:e3:37:4e:1b:80:bc:70:b4:98:c6:e3:
a5:ba:d7:82:e4:ef:8b:b6:47:7f:06:9d:8f:8d:26:
20:30:2d:92:3b:27:a7:49:68:0e:b2:e9:92:bd:61:
e8:2a:c8:05:50:41:e8:0f:2d:a0:75:15:da:32:e2:
8d:de:59:5d:79:a7:8f:20:cb:7d:18:8a:ba:0c:88:
db:b6:27:8a:5f:41:6b:89:74:ac:7f:03:2e:3e:66:
f1:ae:6a:22:dc:8b:ee:71:47:d3:ab:bd:f1:cb:9f:
c4:9c:72:7b:c9:dc:a4:94:51:7f:c4:18:06:45:4c:
2b:1d:cd:4d:27:c7:86:56:bf:b8:b2:b0:80:56:2f:
23:9e:07:e8:f5:ff:ff:b2:80:b4:5f:ba:df:b2:78:
da:48:07:6f:2d:9d:81:5e:95:82:da:d3:bc:45:4f:
e3:06:56:39:85:ef:04:10:37:f8:a2:9a:13:bf:ab:
b7:9d:b9:aa:96:a0:cd:69:18:ac:e1:f0:ad:0c:ab:
1c:ea:6e:35:5b:3c:5f:d0:27:dd:a2:e0:95:4e:00:
36:f9:8b:0a:ac:00:d8:73:fc:d0:dd:7e:51:39:a6:
f7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:62:00:5E:E0:C3:C4:BF:51:E6:1B:6F:79:2D:A1:EE:ED:98:65:B9
X509v3 Authority Key Identifier:
keyid:4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/j2IAXuDDxL9R5htveS2h7u2YZbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.210.0/23
185.147.144.0/22
IPv6:
2a0a:5400::/29
Signature Algorithm: sha256WithRSAEncryption
35:b4:fd:53:a4:97:75:36:9d:bc:be:25:51:f8:59:5e:ce:fd:
ec:ec:41:4f:ba:5d:83:f6:c5:e8:d2:7b:e0:11:dd:77:19:73:
49:03:5a:c8:68:b4:40:45:4a:48:15:82:bf:9d:84:7b:76:ca:
eb:c1:15:75:90:db:43:dd:58:9a:d3:b4:af:02:73:2a:d4:20:
7b:30:62:f7:ff:12:70:fb:ab:55:b5:6f:85:87:f3:dc:ec:52:
93:a3:62:0d:a3:fa:d3:2e:9f:bf:fa:83:ff:0c:f6:d5:9f:22:
0e:0b:b8:5c:35:7c:6e:32:76:f7:66:d8:59:4c:7b:87:65:d3:
2b:da:ff:dc:ea:69:5a:7e:d8:20:ae:90:1e:e4:06:71:4f:f8:
f9:21:ee:4b:3b:cf:4b:23:88:5e:42:f4:66:4a:df:ea:d9:c6:
cf:62:a5:7c:b0:93:e0:fe:6b:70:66:30:98:0b:c3:fe:cb:33:
12:e3:e3:85:07:d4:d3:67:70:04:b1:b9:e2:e2:e0:26:88:64:
28:55:96:d4:80:ec:52:f0:5d:f7:83:03:3f:53:8f:a5:69:9e:
0d:96:d1:6f:53:6c:fb:4f:c2:ff:e7:fe:11:fa:8d:05:65:05:
cd:db:06:49:9f:e3:c0:99:f5:3c:2c:07:65:cf:9a:ee:0a:1d:
a3:68:bc:23
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQhshkRK4M+G40RVLDhl8iDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNDBjNzExMWMyOTE2YTVmNWFkYWYxZTUwNTBhOTQwYzI2
YjIzNzgwHhcNMjUwMTAxMTE0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjYyMDA1ZWUwYzNjNGJmNTFlNjFiNmY3OTJkYTFlZWVkOTg2NWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYFkhGP1Wrqt1laOdUD6ryz2kfxv
FhJeFd3HckezV9Hq4zdOG4C8cLSYxuOluteC5O+Ltkd/Bp2PjSYgMC2SOyenSWgO
sumSvWHoKsgFUEHoDy2gdRXaMuKN3lldeaePIMt9GIq6DIjbtieKX0FriXSsfwMu
Pmbxrmoi3IvucUfTq73xy5/EnHJ7ydyklFF/xBgGRUwrHc1NJ8eGVr+4srCAVi8j
ngfo9f//soC0X7rfsnjaSAdvLZ2BXpWC2tO8RU/jBlY5he8EEDf4opoTv6u3nbmq
lqDNaRis4fCtDKsc6m41Wzxf0CfdouCVTgA2+YsKrADYc/zQ3X5ROab3eQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFI9iAF7gw8S/UeYbb3ktoe7tmGW5MB8GA1UdIwQY
MBaAFExAxxEcKRal9a2vHlBQqUDCayN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEVESEVSd3BGcVgxcmE4ZVVGQ3BRTUpySTNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hZDRlODctNWIyOC00MmQ3LTk3NDgt
NGFiNDk4YjU5NmEzLzEvajJJQVh1RER4TDlSNWh0dmVTMmg3dTJZWmJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hZDRlODctNWIyOC00MmQ3LTk3NDgtNGFiNDk4YjU5NmEz
LzEvVEVESEVSd3BGcVgxcmE4ZVVGQ3BRTUpySTNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBW+zSAwQC
uZOQMA0EAgACMAcDBQMqClQAMA0GCSqGSIb3DQEBCwUAA4IBAQA1tP1TpJd1Np28
viVR+Flezv3s7EFPul2D9sXo0nvgEd13GXNJA1rIaLRARUpIFYK/nYR7dsrrwRV1
kNtD3Via07SvAnMq1CB7MGL3/xJw+6tVtW+Fh/Pc7FKTo2INo/rTLp+/+oP/DPbV
nyIOC7hcNXxuMnb3ZthZTHuHZdMr2v/c6mlaftggrpAe5AZxT/j5Ie5LO89LI4he
QvRmSt/q2cbPYqV8sJPg/mtwZjCYC8P+yzMS4+OFB9TTZ3AEsbni4uAmiGQoVZbU
gOxS8F33gwM/U4+laZ4NltFvU2z7T8L/5/4R+o0FZQXN2wZJn+PAmfU8LAdlz5ru
Ch2jaLwj
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:27 2025 by rpki-client