Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/41d4ce-9fd1-49ef-866c-375c8b7f88c7/1/JspRxqcnvYnWBDByAwOwObTY6xg.roa
File: JspRxqcnvYnWBDByAwOwObTY6xg.roa (raw, json)
Hash identifier: k0L4HeFvQfMQ2f/jXh5XLGpAF75QrB4egP2ve6B5+e4=
Subject key identifier: 26:CA:51:C6:A7:27:BD:89:D6:04:30:72:03:03:B0:39:B4:D8:EB:18
Certificate issuer: /CN=25235bec8f78418a88e7b79c2113940fa4bc2dba
Certificate serial: 01856E1D2C7AF6C917242CD95ED9A70D299C
Authority key identifier: 25:23:5B:EC:8F:78:41:8A:88:E7:B7:9C:21:13:94:0F:A4:BC:2D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSNb7I94QYqI57ecIROUD6S8Lbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/41d4ce-9fd1-49ef-866c-375c8b7f88c7/1/JspRxqcnvYnWBDByAwOwObTY6xg.roa
Signing time: Sun 01 Jan 2023 16:14:43 +0000
ROA not before: Sun 01 Jan 2023 16:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203020
IP address blocks: 185.5.145.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:1d:2c:7a:f6:c9:17:24:2c:d9:5e:d9:a7:0d:29:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25235bec8f78418a88e7b79c2113940fa4bc2dba
Validity
Not Before: Jan 1 16:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26ca51c6a727bd89d60430720303b039b4d8eb18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:40:6e:47:54:ed:10:2a:c9:54:ec:95:8e:af:
88:51:68:f6:d0:5b:f4:55:98:8a:81:82:f8:45:51:
8a:3f:d2:6d:c6:58:8f:f1:fc:ec:1c:70:c0:87:c2:
71:62:c0:69:26:62:e6:3d:5a:e2:aa:ae:a5:1b:fd:
c9:42:5c:6d:79:93:1d:f4:67:ac:2c:eb:d7:51:2d:
ae:30:5e:90:29:9b:3f:5b:3a:74:f7:21:08:3c:26:
95:6f:5a:44:c3:ab:e9:47:47:8c:2b:c2:dd:c0:c1:
e2:df:8b:7c:65:e9:f7:f4:72:52:7b:80:2c:2d:2b:
b2:eb:bb:68:cd:e4:80:60:67:1a:8c:ad:9d:49:fb:
1b:0a:a7:48:50:70:bb:48:9e:d9:56:a1:4b:8a:69:
04:e0:85:ce:86:47:fb:62:89:50:9f:0e:47:f3:d4:
9e:a4:2e:2d:42:62:88:01:a7:31:ac:2b:60:e2:c6:
9c:b9:d0:0a:3b:71:28:74:aa:f8:98:a8:4d:e8:10:
30:80:fd:80:13:f9:11:f4:16:36:43:1b:51:61:94:
f4:3a:b2:dc:37:61:4e:94:1c:0f:86:97:a4:e4:6e:
22:c7:5f:c0:ac:2c:2f:8c:08:6c:a7:9e:f4:94:7f:
d9:de:1b:4d:9d:af:b6:ac:ea:e4:c2:c5:09:da:0d:
13:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:CA:51:C6:A7:27:BD:89:D6:04:30:72:03:03:B0:39:B4:D8:EB:18
X509v3 Authority Key Identifier:
keyid:25:23:5B:EC:8F:78:41:8A:88:E7:B7:9C:21:13:94:0F:A4:BC:2D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSNb7I94QYqI57ecIROUD6S8Lbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/41d4ce-9fd1-49ef-866c-375c8b7f88c7/1/JspRxqcnvYnWBDByAwOwObTY6xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/41d4ce-9fd1-49ef-866c-375c8b7f88c7/1/JSNb7I94QYqI57ecIROUD6S8Lbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.145.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:c5:38:36:2d:85:0f:f7:7f:a4:d3:87:b7:b9:be:b8:47:09:
6d:7f:dd:d7:4e:4b:c4:56:dd:df:7e:fb:42:e9:50:7b:c6:10:
ed:cd:dd:48:c5:27:bf:39:e6:e9:61:80:b1:eb:bf:3d:da:e1:
80:1b:2d:fe:83:57:43:36:85:ff:89:aa:b8:a0:3a:cd:dd:fe:
4e:ce:38:61:2e:da:4e:06:38:8a:55:f3:00:06:b7:00:55:5f:
d1:77:eb:66:df:32:58:31:dc:0f:0e:62:50:91:ad:57:59:fa:
db:49:f4:7b:90:d2:ba:6b:99:cb:37:47:ba:d6:e8:fa:05:8f:
c1:18:40:69:7a:3b:88:da:3b:f7:8d:0e:a4:da:fa:64:7e:8d:
4b:a5:65:6d:8d:52:74:a1:6a:1f:3d:b6:ae:2c:3a:2f:14:ec:
3d:cd:e8:3d:d7:5d:27:c2:d5:55:86:a7:b1:b3:20:0c:19:7d:
fb:40:54:50:c5:7b:4b:74:71:e2:72:04:74:11:12:aa:1c:30:
33:71:9d:f2:f5:4b:5e:93:a0:74:44:a6:af:9b:af:54:5d:ef:
6a:76:9b:68:4b:25:16:9c:3b:24:e8:24:02:74:70:95:34:b7:
c8:d5:b4:47:be:41:c9:77:0d:b6:dd:1f:a3:02:4f:1b:81:3c:
1c:65:6e:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuHSx69skXJCzZXtmnDSmcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MjM1YmVjOGY3ODQxOGE4OGU3Yjc5YzIxMTM5NDBmYTRi
YzJkYmEwHhcNMjMwMTAxMTYxNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmNhNTFjNmE3MjdiZDg5ZDYwNDMwNzIwMzAzYjAzOWI0ZDhlYjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEBuR1TtECrJVOyVjq+IUWj20Fv0
VZiKgYL4RVGKP9JtxliP8fzsHHDAh8JxYsBpJmLmPVriqq6lG/3JQlxteZMd9Ges
LOvXUS2uMF6QKZs/Wzp09yEIPCaVb1pEw6vpR0eMK8LdwMHi34t8Zen39HJSe4As
LSuy67tozeSAYGcajK2dSfsbCqdIUHC7SJ7ZVqFLimkE4IXOhkf7YolQnw5H89Se
pC4tQmKIAacxrCtg4sacudAKO3EodKr4mKhN6BAwgP2AE/kR9BY2QxtRYZT0OrLc
N2FOlBwPhpek5G4ix1/ArCwvjAhsp570lH/Z3htNna+2rOrkwsUJ2g0T6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCbKUcanJ72J1gQwcgMDsDm02OsYMB8GA1UdIwQY
MBaAFCUjW+yPeEGKiOe3nCETlA+kvC26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlNOYjdJOTRRWXFJNTdlY0lST1VENlM4TGJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80MWQ0Y2UtOWZkMS00OWVmLTg2NmMt
Mzc1YzhiN2Y4OGM3LzEvSnNwUnhxY252WW5XQkRCeUF3T3dPYlRZNnhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS80MWQ0Y2UtOWZkMS00OWVmLTg2NmMtMzc1YzhiN2Y4OGM3
LzEvSlNOYjdJOTRRWXFJNTdlY0lST1VENlM4TGJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQWRMA0G
CSqGSIb3DQEBCwUAA4IBAQDGxTg2LYUP93+k04e3ub64Rwltf93XTkvEVt3ffvtC
6VB7xhDtzd1IxSe/OebpYYCx67892uGAGy3+g1dDNoX/iaq4oDrN3f5OzjhhLtpO
BjiKVfMABrcAVV/Rd+tm3zJYMdwPDmJQka1XWfrbSfR7kNK6a5nLN0e61uj6BY/B
GEBpejuI2jv3jQ6k2vpkfo1LpWVtjVJ0oWofPbauLDovFOw9zeg9110nwtVVhqex
syAMGX37QFRQxXtLdHHicgR0ERKqHDAzcZ3y9Utek6B0RKavm69UXe9qdptoSyUW
nDsk6CQCdHCVNLfI1bRHvkHJdw223R+jAk8bgTwcZW76
-----END CERTIFICATE-----
Generated at Sat Apr 19 03:08:31 2025 by rpki-client