Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/24995c-4e07-4c15-81f2-55ce62c1b260/1/Jx19RyHFI3p5zIg7JHPgYBxLfA4.roa
File: Jx19RyHFI3p5zIg7JHPgYBxLfA4.roa (raw, json)
Hash identifier: 2mKbsdjcyi6pyG5/WOeJhflQ0U/h8m86jDel9WtNYTM=
Subject key identifier: 27:1D:7D:47:21:C5:23:7A:79:CC:88:3B:24:73:E0:60:1C:4B:7C:0E
Certificate issuer: /CN=58fc6b870a103b470dbe2d25ce69101f533fef1b
Certificate serial: 5D9440
Authority key identifier: 58:FC:6B:87:0A:10:3B:47:0D:BE:2D:25:CE:69:10:1F:53:3F:EF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WPxrhwoQO0cNvi0lzmkQH1M_7xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/24995c-4e07-4c15-81f2-55ce62c1b260/1/Jx19RyHFI3p5zIg7JHPgYBxLfA4.roa
Signing time: Sat 01 Jan 2022 01:01:39 +0000
ROA not before: Sat 01 Jan 2022 01:01:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 194.110.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6132800 (0x5d9440)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58fc6b870a103b470dbe2d25ce69101f533fef1b
Validity
Not Before: Jan 1 01:01:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=271d7d4721c5237a79cc883b2473e0601c4b7c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:76:dd:98:00:cf:24:c2:ba:09:e5:52:22:5b:
f9:09:25:14:b6:27:d0:ac:ce:83:60:62:eb:12:07:
73:33:d4:c9:24:84:89:a3:c9:9f:cc:61:87:bb:5c:
31:f3:12:fb:57:37:5e:b4:85:99:84:b2:1b:e4:5d:
c0:3d:b6:d1:8b:ab:80:bb:e0:de:01:48:97:a7:d5:
2b:3d:f5:98:4c:62:00:e0:02:02:8d:88:9d:f5:6f:
d6:64:98:2e:f5:be:f0:0e:e0:91:c2:de:02:35:37:
c0:b7:f5:37:57:a5:94:b2:0a:60:04:65:4d:42:95:
cb:f6:61:01:ad:5c:5d:60:8d:0d:30:ee:01:14:9e:
31:71:c8:5d:c5:5b:43:22:ec:3d:af:7f:da:1e:eb:
ae:70:be:ad:7d:55:b8:5a:32:e0:2c:d0:73:4f:67:
12:65:95:e3:0c:f3:4c:aa:0a:77:15:28:6b:4b:01:
9c:3b:02:cb:77:03:d8:46:ab:5e:6a:12:5c:89:4e:
85:0e:2a:65:63:b1:2f:d8:43:80:19:3a:ac:8c:1b:
22:07:fa:bb:65:ef:80:56:98:55:c8:38:a4:e2:76:
18:9e:86:1f:82:5b:4b:6e:ef:87:69:f3:03:dc:7f:
88:d1:ee:38:fc:55:f5:68:99:0f:d9:7b:22:5b:6d:
01:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1D:7D:47:21:C5:23:7A:79:CC:88:3B:24:73:E0:60:1C:4B:7C:0E
X509v3 Authority Key Identifier:
keyid:58:FC:6B:87:0A:10:3B:47:0D:BE:2D:25:CE:69:10:1F:53:3F:EF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPxrhwoQO0cNvi0lzmkQH1M_7xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24995c-4e07-4c15-81f2-55ce62c1b260/1/Jx19RyHFI3p5zIg7JHPgYBxLfA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24995c-4e07-4c15-81f2-55ce62c1b260/1/WPxrhwoQO0cNvi0lzmkQH1M_7xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.251.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:b3:e4:b9:96:a6:fd:43:bc:ae:f8:e8:f7:bf:bf:6d:0c:e9:
06:8a:f4:08:1f:17:be:fd:8b:ff:60:38:01:19:84:51:71:13:
d0:3c:c3:f9:c2:60:0f:b2:92:1d:6b:6b:fb:28:96:4d:ed:63:
be:c1:e5:e7:21:21:e9:6e:eb:17:b4:96:2c:a2:95:9e:b0:42:
7e:53:39:60:96:82:04:99:ca:e1:de:fb:ea:65:26:b5:b3:29:
fb:85:0f:c6:a1:7f:d1:b7:35:1a:98:b7:87:b3:09:0a:30:6d:
11:6b:3f:bf:af:5f:20:c3:17:42:11:60:f5:eb:14:7e:e5:46:
87:e9:02:40:0d:fc:e2:09:04:87:97:20:07:7f:b8:94:8f:22:
d9:02:52:54:0b:7a:19:42:b3:fc:3f:2f:ea:6d:4e:d0:21:5d:
e1:02:ea:fa:c9:57:05:c4:53:9b:c0:5c:94:ba:62:37:e9:35:
a2:11:e4:6e:6e:ae:ad:2a:e2:fa:2b:2f:f4:9c:e3:67:53:19:
73:40:87:4a:dd:a4:4c:8b:2a:30:dd:a7:73:54:45:54:d9:61:
28:d8:78:3d:11:22:9b:73:af:3f:fb:ba:1d:8e:04:f5:a6:eb:
09:ef:b3:0b:79:f5:a9:24:7a:ae:2a:cb:bf:b1:ec:3f:a6:fa:
ef:13:a6:a4
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDXZRAMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDU4
ZmM2Yjg3MGExMDNiNDcwZGJlMmQyNWNlNjkxMDFmNTMzZmVmMWIwHhcNMjIwMTAx
MDEwMTM5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygyNzFkN2Q0NzIxYzUy
MzdhNzljYzg4M2IyNDczZTA2MDFjNGI3YzBlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtXbdmADPJMK6CeVSIlv5CSUUtifQrM6DYGLrEgdzM9TJJISJ
o8mfzGGHu1wx8xL7VzdetIWZhLIb5F3APbbRi6uAu+DeAUiXp9UrPfWYTGIA4AIC
jYid9W/WZJgu9b7wDuCRwt4CNTfAt/U3V6WUsgpgBGVNQpXL9mEBrVxdYI0NMO4B
FJ4xcchdxVtDIuw9r3/aHuuucL6tfVW4WjLgLNBzT2cSZZXjDPNMqgp3FShrSwGc
OwLLdwPYRqteahJciU6FDiplY7Ev2EOAGTqsjBsiB/q7Ze+AVphVyDik4nYYnoYf
gltLbu+HafMD3H+I0e44/FX1aJkP2XsiW20BDwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFCcdfUchxSN6ecyIOyRz4GAcS3wOMB8GA1UdIwQYMBaAFFj8a4cKEDtHDb4t
Jc5pEB9TP+8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
V1B4cmh3b1FPMGNOdmkwbHpta1FIMU1fN3hzLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8yYy8yNDk5NWMtNGUwNy00YzE1LTgxZjItNTVjZTYyYzFiMjYwLzEv
SngxOVJ5SEZJM3A1eklnN0pIUGdZQnhMZkE0LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8y
NDk5NWMtNGUwNy00YzE1LTgxZjItNTVjZTYyYzFiMjYwLzEvV1B4cmh3b1FPMGNO
dmkwbHpta1FIMU1fN3hzLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwm77MA0GCSqGSIb3DQEBCwUAA4IB
AQCxs+S5lqb9Q7yu+Oj3v79tDOkGivQIHxe+/Yv/YDgBGYRRcRPQPMP5wmAPspId
a2v7KJZN7WO+weXnISHpbusXtJYsopWesEJ+UzlgloIEmcrh3vvqZSa1syn7hQ/G
oX/RtzUamLeHswkKMG0Raz+/r18gwxdCEWD16xR+5UaH6QJADfziCQSHlyAHf7iU
jyLZAlJUC3oZQrP8Py/qbU7QIV3hAur6yVcFxFObwFyUumI36TWiEeRubq6tKuL6
Ky/0nONnUxlzQIdK3aRMiyow3adzVEVU2WEo2Hg9ESKbc68/+7odjgT1pusJ77ML
efWpJHquKsu/sew/pvrvE6ak
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:44:55 2025 by rpki-client