Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/JPfPPVmim_oMGeKjFN51mz2DXZs.roa
File: JPfPPVmim_oMGeKjFN51mz2DXZs.roa (raw, json)
Hash identifier: huLyNUibR3FOKspRTI8zL5oJYiyI6ApwBCQ1/RFqhSE=
Subject key identifier: 24:F7:CF:3D:59:A2:9B:FA:0C:19:E2:A3:14:DE:75:9B:3D:83:5D:9B
Certificate issuer: /CN=c32fc9333db43e24b3f23bc64a3ae13f40fb0aa7
Certificate serial: 0194228DA2079E32EF800CB09AFC96AB5B3E
Authority key identifier: C3:2F:C9:33:3D:B4:3E:24:B3:F2:3B:C6:4A:3A:E1:3F:40:FB:0A:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/JPfPPVmim_oMGeKjFN51mz2DXZs.roa
Signing time: Wed 01 Jan 2025 15:48:14 +0000
ROA not before: Wed 01 Jan 2025 15:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49178
IP address blocks: 185.237.180.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:a2:07:9e:32:ef:80:0c:b0:9a:fc:96:ab:5b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c32fc9333db43e24b3f23bc64a3ae13f40fb0aa7
Validity
Not Before: Jan 1 15:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24f7cf3d59a29bfa0c19e2a314de759b3d835d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8c:d7:45:52:1e:b7:9b:09:32:a3:fa:2d:ef:
b6:78:63:b5:88:a0:26:8e:58:db:7d:84:6b:e9:b2:
01:3e:90:ec:20:bf:c4:72:c4:44:81:06:4d:ed:e9:
fe:c0:ab:74:ec:cc:19:30:41:a1:46:0c:8d:50:45:
85:e8:a9:10:0f:f0:92:8c:61:40:3e:a1:be:ae:d1:
3f:03:f5:50:cf:cd:cc:d8:45:12:d2:8b:8f:ed:69:
eb:22:df:f2:3a:ca:18:bc:0c:c7:6c:ad:d0:6e:e2:
f8:d3:c5:0a:a4:2c:6c:08:dc:69:1e:0c:1f:09:09:
c7:09:67:22:1b:e6:dd:e8:f9:f3:2e:ae:5d:32:5c:
47:d6:8a:50:21:32:95:74:65:61:6f:65:fc:95:f0:
80:9c:ce:f6:61:bd:7f:aa:b8:09:51:cf:08:24:6c:
64:ed:10:f0:54:42:20:a5:b7:d9:7d:b0:e2:c5:3c:
e4:2b:38:a6:5d:40:27:3d:82:9b:0a:46:56:b7:14:
65:ce:c2:e2:28:7b:ab:68:bc:11:33:4d:0d:38:c7:
98:5a:b4:64:f9:75:f4:ee:bb:4e:bc:33:87:67:26:
a5:e6:76:8d:0e:50:f0:1b:52:0f:b5:71:36:10:68:
3a:2a:3d:a3:48:51:a2:05:78:bf:c8:72:1f:1f:db:
fc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F7:CF:3D:59:A2:9B:FA:0C:19:E2:A3:14:DE:75:9B:3D:83:5D:9B
X509v3 Authority Key Identifier:
keyid:C3:2F:C9:33:3D:B4:3E:24:B3:F2:3B:C6:4A:3A:E1:3F:40:FB:0A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/JPfPPVmim_oMGeKjFN51mz2DXZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.180.0/22
Signature Algorithm: sha256WithRSAEncryption
02:34:82:fc:93:e1:02:8d:ce:bc:7a:50:78:28:df:f7:da:59:
e7:b1:fd:f0:39:75:de:f8:55:1b:01:bb:c4:52:33:f8:f4:bb:
37:7a:8f:b0:f6:e5:d0:7d:ca:ac:31:04:a2:2d:f3:79:15:3e:
c0:2f:7c:2a:a7:79:7d:84:fb:33:a3:8f:c1:4c:83:28:33:97:
f6:7d:93:20:28:46:35:9d:f7:bb:03:e6:1d:31:79:f6:9b:08:
87:69:9c:8f:b0:a7:ad:19:47:39:62:a1:87:ed:90:21:3b:5b:
f6:58:38:7a:e0:e2:f8:3c:6c:07:6d:5c:7f:3e:5b:d9:df:db:
e8:e1:6c:09:cb:38:49:2e:4a:b8:56:0f:bd:b1:3a:5e:63:c5:
f0:08:a7:4d:22:90:51:1b:72:69:d6:fa:ca:40:a7:f9:af:2d:
2b:ed:d5:25:e0:3b:71:5d:e8:30:66:a4:26:0d:7f:50:be:4f:
ab:77:42:8c:eb:cd:35:1b:82:e6:c0:34:57:fe:41:88:ea:ab:
0a:b2:8e:d8:76:94:60:d4:2a:65:50:b0:08:b8:0b:d9:43:08:
75:ba:ce:c9:1f:06:45:65:8b:93:4c:85:aa:3a:3b:c6:fe:e3:
6b:37:d9:61:06:d0:c3:76:19:69:e9:52:66:4c:0f:94:65:19:
1b:00:68:2b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijaIHnjLvgAywmvyWq1s+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMmZjOTMzM2RiNDNlMjRiM2YyM2JjNjRhM2FlMTNmNDBm
YjBhYTcwHhcNMjUwMTAxMTU0ODE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGY3Y2YzZDU5YTI5YmZhMGMxOWUyYTMxNGRlNzU5YjNkODM1ZDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7IzXRVIet5sJMqP6Le+2eGO1iKAm
jljbfYRr6bIBPpDsIL/EcsREgQZN7en+wKt07MwZMEGhRgyNUEWF6KkQD/CSjGFA
PqG+rtE/A/VQz83M2EUS0ouP7WnrIt/yOsoYvAzHbK3QbuL408UKpCxsCNxpHgwf
CQnHCWciG+bd6PnzLq5dMlxH1opQITKVdGVhb2X8lfCAnM72Yb1/qrgJUc8IJGxk
7RDwVEIgpbfZfbDixTzkKzimXUAnPYKbCkZWtxRlzsLiKHuraLwRM00NOMeYWrRk
+XX07rtOvDOHZyal5naNDlDwG1IPtXE2EGg6Kj2jSFGiBXi/yHIfH9v81wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCT3zz1Zopv6DBnioxTedZs9g12bMB8GA1UdIwQY
MBaAFMMvyTM9tD4ks/I7xko64T9A+wqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3lfSk16MjBQaVN6OGp2R1NqcmhQMEQ3Q3FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85YWNhYTAtMDVlMS00NzIxLTg5ZWIt
YTY3MTkxNWVlOTlhLzEvSlBmUFBWbWltX29NR2VLakZONTFtejJEWFpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC85YWNhYTAtMDVlMS00NzIxLTg5ZWItYTY3MTkxNWVlOTlh
LzEvd3lfSk16MjBQaVN6OGp2R1NqcmhQMEQ3Q3FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCue20MA0G
CSqGSIb3DQEBCwUAA4IBAQACNIL8k+ECjc68elB4KN/32lnnsf3wOXXe+FUbAbvE
UjP49Ls3eo+w9uXQfcqsMQSiLfN5FT7AL3wqp3l9hPszo4/BTIMoM5f2fZMgKEY1
nfe7A+YdMXn2mwiHaZyPsKetGUc5YqGH7ZAhO1v2WDh64OL4PGwHbVx/PlvZ39vo
4WwJyzhJLkq4Vg+9sTpeY8XwCKdNIpBRG3Jp1vrKQKf5ry0r7dUl4DtxXegwZqQm
DX9Qvk+rd0KM6801G4LmwDRX/kGI6qsKso7YdpRg1CplULAIuAvZQwh1us7JHwZF
ZYuTTIWqOjvG/uNrN9lhBtDDdhlp6VJmTA+UZRkbAGgr
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:52:56 2025 by rpki-client