Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jKfvj4Xywc6X63DWkdaMvg1-ltw.roa
File: jKfvj4Xywc6X63DWkdaMvg1-ltw.roa (raw, json)
Hash identifier: UxMN7VGhqJiLMUgCUidSvycJhqdsfBE2g0NQS1EFzRo=
Subject key identifier: 8C:A7:EF:8F:85:F2:C1:CE:97:EB:70:D6:91:D6:8C:BE:0D:7E:96:DC
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 0194228DA0E7D8AF8D417D877FF93D615C5E
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jKfvj4Xywc6X63DWkdaMvg1-ltw.roa
Signing time: Wed 01 Jan 2025 15:48:14 +0000
ROA not before: Wed 01 Jan 2025 15:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48678
IP address blocks: 85.153.136.0/24 maxlen: 24
85.153.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:a0:e7:d8:af:8d:41:7d:87:7f:f9:3d:61:5c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 15:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ca7ef8f85f2c1ce97eb70d691d68cbe0d7e96dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2b:bc:aa:c6:1a:df:ca:0a:51:d0:1a:34:23:
1b:b1:16:48:29:9f:de:1a:b3:95:20:48:49:6b:c8:
97:b1:86:0b:67:59:80:2f:f1:cb:34:92:06:e8:49:
7b:c7:7f:a0:88:61:a8:5f:6b:47:3e:74:9b:e3:01:
7a:40:8b:0c:62:c5:08:8c:f6:24:1f:fc:00:48:df:
77:e9:8f:2d:2f:79:f0:35:d5:ca:9e:58:2e:19:b3:
d5:95:50:60:01:1a:2c:40:a4:16:83:da:95:15:cf:
41:20:3b:2b:a6:56:f2:fd:47:65:d7:b6:75:e1:bd:
f0:4f:ac:f3:39:bd:42:d0:5a:6e:4f:e6:a7:d7:1c:
79:6b:2d:a8:50:b4:57:aa:85:ae:ba:74:7f:7d:6d:
af:cb:0c:75:42:1d:43:36:59:fb:50:88:25:07:34:
cd:c2:ba:4c:a2:74:fa:57:94:85:1f:a3:74:f8:5c:
57:a4:5e:51:63:fc:ff:69:78:2e:9c:92:e4:56:d5:
a6:13:89:96:04:79:17:15:e0:18:87:8e:ca:06:e5:
2a:a7:00:28:65:c3:2f:1f:fc:d9:3f:c6:b3:86:96:
76:b5:84:c0:a8:6c:8f:ba:18:b4:39:92:ae:c2:db:
ad:53:7f:83:cb:fe:22:dc:b5:10:b7:fa:ac:de:a9:
12:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A7:EF:8F:85:F2:C1:CE:97:EB:70:D6:91:D6:8C:BE:0D:7E:96:DC
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jKfvj4Xywc6X63DWkdaMvg1-ltw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.136.0/24
85.153.142.0/24
Signature Algorithm: sha256WithRSAEncryption
32:f6:b5:a0:08:10:f3:8d:7f:af:ad:20:cb:ba:f0:56:c6:8f:
42:c6:c8:cf:1f:47:fe:a5:c6:03:d9:f7:f2:ee:9b:f5:aa:9d:
e9:28:44:65:9d:34:15:b3:0a:0f:32:e8:8f:fc:3c:af:99:b8:
73:16:62:fd:e3:15:4b:90:d0:13:d7:1d:1b:bb:71:68:36:6e:
73:c1:e7:5a:7e:33:98:40:e0:03:5a:35:d8:1e:30:a4:bb:6b:
05:bd:17:14:1a:d3:1a:af:ca:e2:ff:b1:b1:dc:25:60:f7:68:
11:0c:9d:df:be:34:d9:79:92:12:a1:cc:ad:86:05:3d:27:70:
22:0a:9f:7f:58:88:b8:b2:d8:29:99:a8:9e:36:a5:66:e3:65:
7b:be:8c:ea:4a:3c:33:76:8b:a0:6e:4b:94:1f:9e:8a:9d:e3:
80:41:5e:4a:51:72:8e:3e:f3:e0:fc:a3:8e:27:60:3e:3a:65:
cd:b0:7b:bb:97:22:87:35:87:ed:47:e0:a1:49:03:fe:3b:6b:
f2:b2:f2:8c:e4:1f:7c:61:41:0d:68:b8:f7:19:30:f8:a8:64:
d5:32:b5:b6:de:2b:18:73:5d:65:2e:e4:68:3a:d5:64:ec:2d:
d9:c7:07:ba:ec:ef:f6:9c:be:cb:eb:fe:14:ca:e6:f4:e8:b6:
f6:16:89:aa
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQijaDn2K+NQX2Hf/k9YVxeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm
YmQzZTkwHhcNMjUwMTAxMTU0ODE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2E3ZWY4Zjg1ZjJjMWNlOTdlYjcwZDY5MWQ2OGNiZTBkN2U5NmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiu8qsYa38oKUdAaNCMbsRZIKZ/e
GrOVIEhJa8iXsYYLZ1mAL/HLNJIG6El7x3+giGGoX2tHPnSb4wF6QIsMYsUIjPYk
H/wASN936Y8tL3nwNdXKnlguGbPVlVBgARosQKQWg9qVFc9BIDsrplby/Udl17Z1
4b3wT6zzOb1C0FpuT+an1xx5ay2oULRXqoWuunR/fW2vywx1Qh1DNln7UIglBzTN
wrpMonT6V5SFH6N0+FxXpF5RY/z/aXgunJLkVtWmE4mWBHkXFeAYh47KBuUqpwAo
ZcMvH/zZP8azhpZ2tYTAqGyPuhi0OZKuwtutU3+Dy/4i3LUQt/qs3qkSLwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIyn74+F8sHOl+tw1pHWjL4NfpbcMB8GA1UdIwQY
MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt
ZjJiZTlmNmM2NjRjLzEvaktmdmo0WHl3YzZYNjNEV2tkYU12ZzEtbHR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj
LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVZmIAwQA
VZmOMA0GCSqGSIb3DQEBCwUAA4IBAQAy9rWgCBDzjX+vrSDLuvBWxo9CxsjPH0f+
pcYD2ffy7pv1qp3pKERlnTQVswoPMuiP/DyvmbhzFmL94xVLkNAT1x0bu3FoNm5z
wedafjOYQOADWjXYHjCku2sFvRcUGtMar8ri/7Gx3CVg92gRDJ3fvjTZeZISocyt
hgU9J3AiCp9/WIi4stgpmaieNqVm42V7vozqSjwzdougbkuUH56KneOAQV5KUXKO
PvPg/KOOJ2A+OmXNsHu7lyKHNYftR+ChSQP+O2vysvKM5B98YUENaLj3GTD4qGTV
MrW23isYc11lLuRoOtVk7C3Zxwe67O/2nL7L6/4Uyub06Lb2Fomq
-----END CERTIFICATE-----
Generated at Mon Apr 7 12:06:35 2025 by rpki-client