Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/jPA51IVoNgHj7WtWvD3gzuO1ESo.roa
File: jPA51IVoNgHj7WtWvD3gzuO1ESo.roa (raw, json)
Hash identifier: 1OIwLVWMLOnuWB49hstWycn0Dp3PUqU3H2e7UthawGk=
Subject key identifier: 8C:F0:39:D4:85:68:36:01:E3:ED:6B:56:BC:3D:E0:CE:E3:B5:11:2A
Certificate issuer: /CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Certificate serial: 0194258E180946CCCC39D2EA1D05F6556C87
Authority key identifier: EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/jPA51IVoNgHj7WtWvD3gzuO1ESo.roa
Signing time: Thu 02 Jan 2025 05:47:36 +0000
ROA not before: Thu 02 Jan 2025 05:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34476
IP address blocks: 45.139.200.0/22 maxlen: 24
185.86.82.0/24 maxlen: 24
185.254.94.0/24 maxlen: 24
212.102.103.0/24 maxlen: 24
2a0f:8c80::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:18:09:46:cc:cc:39:d2:ea:1d:05:f6:55:6c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Validity
Not Before: Jan 2 05:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8cf039d485683601e3ed6b56bc3de0cee3b5112a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fd:37:36:15:b0:18:87:f1:5b:4a:ef:26:9e:
f2:bc:6d:bd:73:2d:a2:b5:4e:93:d5:50:bd:99:a0:
8b:74:d0:51:35:4d:57:32:a0:36:d3:a2:24:8e:84:
86:bc:37:73:73:88:09:cc:ae:ff:1c:6c:7f:07:14:
8c:cf:6d:c9:ef:35:cb:2d:df:bb:50:a0:75:a1:a0:
b9:17:ba:58:e0:15:5a:b4:b7:31:c3:17:a4:19:be:
1d:25:36:ce:53:41:5f:6a:97:00:00:91:64:ae:b6:
75:75:86:2d:fd:42:16:9c:6e:c9:ec:5b:63:c6:cb:
88:72:eb:c4:9e:f4:d6:90:3e:6d:6d:c5:85:5d:7f:
2a:fb:a1:6b:6d:b2:a2:44:11:6e:9d:37:18:e6:51:
fa:5d:0b:e0:ca:64:19:ec:4b:e1:3e:f2:d0:3b:a2:
a5:53:8e:a8:89:30:fc:5f:48:20:b8:cc:bb:93:17:
74:83:34:be:f7:70:9b:b5:81:cc:c3:ff:a8:c0:08:
d3:3b:95:0e:da:a9:57:cb:92:60:32:88:a7:60:60:
e0:f1:bc:09:9b:1c:19:c6:e2:dd:be:92:54:b6:c0:
d8:1f:ef:54:a9:67:8a:b5:29:91:fc:94:27:bb:da:
47:43:50:6f:b2:16:70:d5:e6:38:f6:3c:9e:f4:c8:
d0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F0:39:D4:85:68:36:01:E3:ED:6B:56:BC:3D:E0:CE:E3:B5:11:2A
X509v3 Authority Key Identifier:
keyid:EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/jPA51IVoNgHj7WtWvD3gzuO1ESo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.200.0/22
185.86.82.0/24
185.254.94.0/24
212.102.103.0/24
IPv6:
2a0f:8c80::/29
Signature Algorithm: sha256WithRSAEncryption
9a:94:f5:f2:d5:ed:70:92:4f:50:07:ef:6d:cf:e4:81:56:d4:
ca:f1:16:d2:ec:ad:e9:dd:40:d5:31:ab:99:f0:59:93:cf:b2:
ae:3c:a7:97:3d:83:e7:60:29:5b:1b:ee:f4:2c:ae:90:2a:4a:
0b:08:13:2a:4c:3f:a4:a0:23:23:b5:e0:85:be:50:a5:d2:bc:
b7:62:18:c4:82:8d:d8:7d:d6:79:46:13:0d:1d:7e:5b:a0:12:
84:1b:55:99:36:da:dc:ad:60:a7:5f:ec:83:ea:b5:8f:d9:e5:
6f:2b:e0:da:ff:0e:3c:dc:18:27:3c:25:54:6a:9c:46:35:02:
c9:fd:ef:0a:09:ee:5a:a1:54:52:ae:c1:b7:d7:16:69:71:a6:
51:84:73:c9:aa:09:b8:f3:d7:b9:81:1c:43:39:bd:0d:12:26:
5f:7d:d6:c7:52:35:6e:97:45:2e:6c:b2:98:49:58:b2:8e:82:
d4:2e:51:16:e3:96:5c:d9:99:65:3e:eb:89:d1:5a:61:c1:8f:
e8:eb:73:63:2c:3c:cc:84:c9:00:5c:4e:6a:c9:0c:66:10:d6:
6f:74:1a:f5:13:8d:0f:e5:fd:5a:22:34:5e:04:9f:79:91:b6:
a5:9d:80:74:e6:3a:dd:27:4f:53:d0:3d:25:8f:7e:6f:64:09:
e5:b1:65:eb
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQljhgJRszMOdLqHQX2VWyHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMjI1OWYxNThiOWFhNzZhYWQwYjFhZGZhNjJjMWVlZDQ1
NTlkMTQwHhcNMjUwMTAyMDU0NzM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2YwMzlkNDg1NjgzNjAxZTNlZDZiNTZiYzNkZTBjZWUzYjUxMTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlv03NhWwGIfxW0rvJp7yvG29cy2i
tU6T1VC9maCLdNBRNU1XMqA206IkjoSGvDdzc4gJzK7/HGx/BxSMz23J7zXLLd+7
UKB1oaC5F7pY4BVatLcxwxekGb4dJTbOU0FfapcAAJFkrrZ1dYYt/UIWnG7J7Ftj
xsuIcuvEnvTWkD5tbcWFXX8q+6FrbbKiRBFunTcY5lH6XQvgymQZ7EvhPvLQO6Kl
U46oiTD8X0gguMy7kxd0gzS+93CbtYHMw/+owAjTO5UO2qlXy5JgMoinYGDg8bwJ
mxwZxuLdvpJUtsDYH+9UqWeKtSmR/JQnu9pHQ1BvshZw1eY49jye9MjQtQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFIzwOdSFaDYB4+1rVrw94M7jtREqMB8GA1UdIwQY
MBaAFO4iWfFYuap2qtCxrfpiwe7UVZ0UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2lKWjhWaTVxbmFxMExHdC1tTEI3dFJWblJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80MTAxMmUtNzg4NS00ZjQwLWJkZjQt
MzQ5N2NlMWI3MWJmLzEvalBBNTFJVm9OZ0hqN1d0V3ZEM2d6dU8xRVNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC80MTAxMmUtNzg4NS00ZjQwLWJkZjQtMzQ5N2NlMWI3MWJm
LzEvN2lKWjhWaTVxbmFxMExHdC1tTEI3dFJWblJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCLYvIAwQA
uVZSAwQAuf5eAwQA1GZnMA0EAgACMAcDBQMqD4yAMA0GCSqGSIb3DQEBCwUAA4IB
AQCalPXy1e1wkk9QB+9tz+SBVtTK8RbS7K3p3UDVMauZ8FmTz7KuPKeXPYPnYClb
G+70LK6QKkoLCBMqTD+koCMjteCFvlCl0ry3YhjEgo3YfdZ5RhMNHX5boBKEG1WZ
NtrcrWCnX+yD6rWP2eVvK+Da/w483BgnPCVUapxGNQLJ/e8KCe5aoVRSrsG31xZp
caZRhHPJqgm489e5gRxDOb0NEiZffdbHUjVul0UubLKYSViyjoLULlEW45Zc2Zll
PuuJ0VphwY/o63NjLDzMhMkAXE5qyQxmENZvdBr1E40P5f1aIjReBJ95kbalnYB0
5jrdJ09T0D0lj35vZAnlsWXr
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:16:05 2025 by rpki-client