Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/JFMyA-XTfzJ98LwUaDo6uCal6eE.roa
File: JFMyA-XTfzJ98LwUaDo6uCal6eE.roa (raw, json)
Hash identifier: 53iyOJ7/FikpZ4x6oYvSunvmMxLDuiMuvaZO1jcps9k=
Subject key identifier: 24:53:32:03:E5:D3:7F:32:7D:F0:BC:14:68:3A:3A:B8:26:A5:E9:E1
Certificate issuer: /CN=091cc5d90c9b681a6cb4e772ccaebec342fb9b05
Certificate serial: 019426D91EE188FD4A34044AA35BF91D12DC
Authority key identifier: 09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/JFMyA-XTfzJ98LwUaDo6uCal6eE.roa
Signing time: Thu 02 Jan 2025 11:49:10 +0000
ROA not before: Thu 02 Jan 2025 11:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31175
IP address blocks: 185.117.204.0/22 maxlen: 24
185.117.204.0/24 maxlen: 24
185.117.205.0/24 maxlen: 24
185.117.206.0/24 maxlen: 24
185.117.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:1e:e1:88:fd:4a:34:04:4a:a3:5b:f9:1d:12:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091cc5d90c9b681a6cb4e772ccaebec342fb9b05
Validity
Not Before: Jan 2 11:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24533203e5d37f327df0bc14683a3ab826a5e9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4c:da:e0:4e:45:bd:35:ff:1d:a8:4b:fa:25:
28:e0:fe:8c:48:d6:72:4f:59:b2:4a:83:fa:25:13:
0e:17:39:d2:3f:49:a9:72:fe:d2:01:3f:84:7f:60:
68:1d:9e:00:55:7f:63:c1:ac:c7:4e:88:06:73:17:
11:d5:ae:a3:64:d5:6c:f4:72:f8:57:9d:fd:79:71:
3f:45:8f:d8:88:ef:94:6f:7a:62:3d:65:66:d0:ff:
01:44:f5:ee:bb:df:91:2c:a3:1b:c5:0a:c4:e9:7e:
2f:74:09:24:38:df:ac:b4:dd:f3:b1:59:4f:7f:0e:
f3:09:d9:ab:cd:92:1f:19:76:da:72:2e:5e:9b:89:
bb:d9:22:28:3b:9f:d1:b3:76:6d:f9:61:de:4a:35:
2b:07:71:c7:18:bb:63:a4:8d:db:b6:12:33:88:2e:
f5:1a:34:3b:10:51:ba:2b:d0:16:d6:8a:95:dd:cf:
e8:53:25:1d:4d:bc:fe:f2:ff:cb:cb:6f:3a:04:94:
98:fa:b8:9f:f9:a3:ac:0d:cb:74:55:7f:df:9a:53:
58:be:d0:38:14:33:f7:8d:a4:13:9a:5f:dd:8d:eb:
20:13:5d:7a:df:e9:fe:02:99:b4:6b:4a:8b:0e:b0:
61:4a:a2:39:15:69:bf:b0:1c:42:db:8c:65:07:e8:
07:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:53:32:03:E5:D3:7F:32:7D:F0:BC:14:68:3A:3A:B8:26:A5:E9:E1
X509v3 Authority Key Identifier:
keyid:09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/JFMyA-XTfzJ98LwUaDo6uCal6eE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.204.0/22
Signature Algorithm: sha256WithRSAEncryption
28:55:0f:8f:93:35:a3:d5:43:c4:b3:40:72:db:09:e0:c5:32:
99:4e:f9:ec:be:1a:fc:1f:3f:24:bf:6c:86:1d:92:f2:6e:68:
b9:40:f0:bd:61:58:b2:d2:eb:ed:12:23:75:71:7d:73:87:62:
23:c0:ca:4e:6a:33:96:ce:a4:7a:7c:0d:bd:6a:0b:cd:37:15:
71:96:3a:85:be:e5:07:87:ef:1a:72:d7:73:9c:2c:4b:49:6e:
ba:3f:3f:c1:df:a8:41:6e:40:f5:96:85:df:fd:b4:ae:2e:5b:
c1:de:e2:5e:73:b6:3d:4d:54:ea:97:26:5b:02:df:10:1b:0a:
dd:11:dc:54:b4:fa:1d:cf:65:15:12:0c:6d:05:5c:3c:06:8e:
64:44:74:d7:73:b0:a3:2a:3b:16:50:38:2f:24:b5:c8:9f:78:
5f:e6:28:85:d2:67:d7:5f:22:d5:20:f5:b9:a5:1a:78:dd:2c:
8d:e7:6c:a1:5c:52:11:ae:18:e2:8e:06:56:b1:6e:67:c5:1f:
12:62:12:f5:b6:91:1c:43:70:52:f3:91:a2:bc:31:72:fb:8e:
33:87:57:1c:01:6a:c5:63:ff:2f:3c:6d:bc:e6:b9:8e:79:aa:
a8:c1:d6:da:2b:7f:07:66:bb:ef:47:e0:1b:cd:26:a3:f9:31:
25:88:c8:58
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2R7hiP1KNARKo1v5HRLcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MWNjNWQ5MGM5YjY4MWE2Y2I0ZTc3MmNjYWViZWMzNDJm
YjliMDUwHhcNMjUwMTAyMTE0OTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDUzMzIwM2U1ZDM3ZjMyN2RmMGJjMTQ2ODNhM2FiODI2YTVlOWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0za4E5FvTX/HahL+iUo4P6MSNZy
T1mySoP6JRMOFznSP0mpcv7SAT+Ef2BoHZ4AVX9jwazHTogGcxcR1a6jZNVs9HL4
V539eXE/RY/YiO+Ub3piPWVm0P8BRPXuu9+RLKMbxQrE6X4vdAkkON+stN3zsVlP
fw7zCdmrzZIfGXbaci5em4m72SIoO5/Rs3Zt+WHeSjUrB3HHGLtjpI3bthIziC71
GjQ7EFG6K9AW1oqV3c/oUyUdTbz+8v/Ly286BJSY+rif+aOsDct0VX/fmlNYvtA4
FDP3jaQTml/djesgE1163+n+Apm0a0qLDrBhSqI5FWm/sBxC24xlB+gH8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCRTMgPl038yffC8FGg6OrgmpenhMB8GA1UdIwQY
MBaAFAkcxdkMm2gabLTncsyuvsNC+5sFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1J6RjJReWJhQnBzdE9keXpLNi13MEw3bXdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny83MzhmNzgtNDM4Yy00YmZkLTgwNmIt
NzNiZmFkODMyZDJkLzEvSkZNeUEtWFRmeko5OEx3VWFEbzZ1Q2FsNmVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny83MzhmNzgtNDM4Yy00YmZkLTgwNmItNzNiZmFkODMyZDJk
LzEvQ1J6RjJReWJhQnBzdE9keXpLNi13MEw3bXdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXXMMA0G
CSqGSIb3DQEBCwUAA4IBAQAoVQ+PkzWj1UPEs0By2wngxTKZTvnsvhr8Hz8kv2yG
HZLybmi5QPC9YViy0uvtEiN1cX1zh2IjwMpOajOWzqR6fA29agvNNxVxljqFvuUH
h+8actdznCxLSW66Pz/B36hBbkD1loXf/bSuLlvB3uJec7Y9TVTqlyZbAt8QGwrd
EdxUtPodz2UVEgxtBVw8Bo5kRHTXc7CjKjsWUDgvJLXIn3hf5iiF0mfXXyLVIPW5
pRp43SyN52yhXFIRrhjijgZWsW5nxR8SYhL1tpEcQ3BS85GivDFy+44zh1ccAWrF
Y/8vPG285rmOeaqowdbaK38HZrvvR+AbzSaj+TEliMhY
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:55:50 2025 by rpki-client