Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/JQPVZ-UDh5zUZ3dIY1XGJBBcNTY.roa
File: JQPVZ-UDh5zUZ3dIY1XGJBBcNTY.roa (raw, json)
Hash identifier: x269Uk2KHZr5hH3/tZI9lbAsTb3B9Rs3OB43fnuBZFg=
Subject key identifier: 25:03:D5:67:E5:03:87:9C:D4:67:77:48:63:55:C6:24:10:5C:35:36
Certificate issuer: /CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Certificate serial: 0194266BAADC49B5D9730491FB2E1D65D482
Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/JQPVZ-UDh5zUZ3dIY1XGJBBcNTY.roa
Signing time: Thu 02 Jan 2025 09:49:37 +0000
ROA not before: Thu 02 Jan 2025 09:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31493
IP address blocks: 185.76.36.0/22 maxlen: 22
212.124.192.0/19 maxlen: 19
2a00:19e8::/29 maxlen: 29
2a00:19e8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:aa:dc:49:b5:d9:73:04:91:fb:2e:1d:65:d4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Validity
Not Before: Jan 2 09:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2503d567e503879cd46777486355c624105c3536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ed:ec:59:bf:4d:1c:c8:76:83:1c:8f:37:11:
8c:b0:7d:fe:2c:3b:60:67:44:4b:1a:96:5d:28:53:
52:6f:ca:e4:56:52:80:12:2e:5b:23:82:d0:20:62:
e6:60:a9:3f:e4:b1:c4:7b:fc:cb:d7:ce:47:0e:7e:
d0:ed:4d:35:81:62:53:bf:05:91:9f:29:90:9b:bd:
7a:c2:d7:0f:24:b6:66:d2:fe:03:e6:ab:7a:64:6a:
60:4a:7c:2d:68:5b:d8:21:d9:52:06:78:ad:f5:d5:
c5:0b:2c:82:ac:4c:8f:26:4c:de:54:ad:58:4d:38:
85:08:05:0a:b9:84:2b:0b:73:3a:f1:fa:f3:ec:31:
84:89:0d:a5:e5:13:db:e1:7b:7d:73:72:c5:0d:72:
49:8a:6d:1f:6b:4b:71:63:db:cf:42:f2:89:d9:fc:
ed:25:b8:9c:66:9d:4f:a8:6e:9d:9d:75:e4:96:ed:
3b:6a:c4:de:db:d5:43:47:f0:e6:5c:ec:63:ac:68:
1e:63:a8:32:51:56:82:8c:39:a5:60:65:a4:69:37:
91:fb:96:60:fd:04:6b:cc:0a:0e:8d:12:d2:3c:c3:
6d:df:3a:09:42:0d:30:22:f0:80:dc:bc:80:33:b6:
84:d1:e8:07:62:f9:f2:05:58:55:e0:c4:be:25:48:
51:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:03:D5:67:E5:03:87:9C:D4:67:77:48:63:55:C6:24:10:5C:35:36
X509v3 Authority Key Identifier:
keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/JQPVZ-UDh5zUZ3dIY1XGJBBcNTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.36.0/22
212.124.192.0/19
IPv6:
2a00:19e8::/29
Signature Algorithm: sha256WithRSAEncryption
3c:d4:ec:df:67:ce:b3:09:31:5b:ae:db:68:cc:a4:c8:eb:81:
55:3d:56:80:9a:a6:c2:bf:7d:c0:79:a9:fb:05:e9:13:42:7c:
4b:87:38:74:d3:20:68:3c:f1:20:94:33:40:20:39:16:9f:c5:
36:1e:92:60:c0:da:31:ad:b4:8e:89:2a:52:29:8f:88:1e:cf:
94:9f:81:0c:dc:59:17:4e:ec:a6:32:48:0e:74:6c:92:99:ab:
f5:c4:5e:7f:bf:86:ef:96:a1:15:74:a9:46:ed:a3:b0:07:7a:
8c:b7:b2:43:5a:5e:0d:b6:c1:dd:7b:85:f9:64:32:1d:f4:01:
e2:1d:4a:dc:00:c8:47:ec:1c:74:0a:18:af:dc:e2:31:7a:3f:
a9:eb:46:e9:0b:52:f2:b9:50:2f:83:45:86:cc:06:97:e2:0f:
16:51:33:8a:57:11:5d:6e:24:06:5c:67:28:cb:dd:a0:51:84:
88:9d:c4:73:cd:6c:9b:26:f5:56:b9:a7:8b:39:3b:76:62:bd:
17:7f:d5:bd:86:f0:51:53:f8:d6:77:c0:3a:04:20:30:ba:ad:
65:f9:1b:7c:ba:a4:b7:13:f9:84:9b:74:fa:bb:ab:49:48:06:
e1:81:54:d2:72:96:b6:6a:d8:2c:39:cb:fa:df:69:25:fe:7f:
f6:3b:b9:06
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZQma6rcSbXZcwSR+y4dZdSCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5YzllMDMwNWNmZWQ1Nzk0NDQ4NzMyYThiMGJkODQyNzQ1
MGQ4MTMwHhcNMjUwMTAyMDk0OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTAzZDU2N2U1MDM4NzljZDQ2Nzc3NDg2MzU1YzYyNDEwNWMzNTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+3sWb9NHMh2gxyPNxGMsH3+LDtg
Z0RLGpZdKFNSb8rkVlKAEi5bI4LQIGLmYKk/5LHEe/zL185HDn7Q7U01gWJTvwWR
nymQm716wtcPJLZm0v4D5qt6ZGpgSnwtaFvYIdlSBnit9dXFCyyCrEyPJkzeVK1Y
TTiFCAUKuYQrC3M68frz7DGEiQ2l5RPb4Xt9c3LFDXJJim0fa0txY9vPQvKJ2fzt
JbicZp1PqG6dnXXklu07asTe29VDR/DmXOxjrGgeY6gyUVaCjDmlYGWkaTeR+5Zg
/QRrzAoOjRLSPMNt3zoJQg0wIvCA3LyAM7aE0egHYvnyBVhV4MS+JUhR+wIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFCUD1WflA4ec1Gd3SGNVxiQQXDU2MB8GA1UdIwQY
MBaAFPnJ4DBc/tV5REhzKosL2EJ0UNgTMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1jbmdNRnotMVhsRVNITXFpd3ZZUW5SUTJCTS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvMzYxOTBkLTFjNmMtNDhjNi1hNDE0
LTJmYmIyMDhhZDE4Mi8xL0pRUFZaLVVEaDV6VVozZElZMVhHSkJCY05UWS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMzcvMzYxOTBkLTFjNmMtNDhjNi1hNDE0LTJmYmIyMDhhZDE4
Mi8xLzEtY25nTUZ6LTFYbEVTSE1xaXd2WVFuUlEyQk0uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAK5TCQD
BAXUfMAwDQQCAAIwBwMFAyoAGegwDQYJKoZIhvcNAQELBQADggEBADzU7N9nzrMJ
MVuu22jMpMjrgVU9VoCapsK/fcB5qfsF6RNCfEuHOHTTIGg88SCUM0AgORafxTYe
kmDA2jGttI6JKlIpj4gez5SfgQzcWRdO7KYySA50bJKZq/XEXn+/hu+WoRV0qUbt
o7AHeoy3skNaXg22wd17hflkMh30AeIdStwAyEfsHHQKGK/c4jF6P6nrRukLUvK5
UC+DRYbMBpfiDxZRM4pXEV1uJAZcZyjL3aBRhIidxHPNbJsm9Va5p4s5O3ZivRd/
1b2G8FFT+NZ3wDoEIDC6rWX5G3y6pLcT+YSbdPq7q0lIBuGBVNJylrZq2Cw5y/rf
aSX+f/Y7uQY=
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:55:28 2025 by rpki-client