Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/jEQgQ5u-cIT6wr_gnKjGMqExUdY.roa
File: jEQgQ5u-cIT6wr_gnKjGMqExUdY.roa (raw, json)
Hash identifier: ayM4Jyr8L4v0cfEk0Dyld4VwWxPRHyhP2RUjQDoY3UA=
Subject key identifier: 8C:44:20:43:9B:BE:70:84:FA:C2:BF:E0:9C:A8:C6:32:A1:31:51:D6
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019421B225D1EE9BD98168E870ABFF3FB01B
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/jEQgQ5u-cIT6wr_gnKjGMqExUdY.roa
Signing time: Wed 01 Jan 2025 11:48:30 +0000
ROA not before: Wed 01 Jan 2025 11:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196928
IP address blocks: 82.177.138.0/23 maxlen: 23
82.177.163.0/24 maxlen: 24
88.220.98.0/23 maxlen: 23
88.220.182.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:25:d1:ee:9b:d9:81:68:e8:70:ab:ff:3f:b0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 11:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c4420439bbe7084fac2bfe09ca8c632a13151d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6d:60:b7:18:6e:b1:f3:08:a1:42:b7:aa:c1:
a4:21:d1:28:2d:41:43:33:fb:c1:79:72:01:5e:94:
3b:da:bd:9c:02:d3:f3:af:f7:1e:75:87:66:d1:61:
ae:0f:c6:8a:08:37:a8:48:dd:bb:e3:18:24:6c:29:
c3:76:01:e7:d7:89:7a:98:e8:84:ca:2b:e4:8a:d9:
45:40:59:0a:54:f1:3c:7c:3a:ee:38:cf:3a:ed:a0:
3c:9f:1d:07:e1:db:e6:81:b8:70:48:25:d2:03:25:
0b:ea:7e:e6:c7:ee:b4:a5:9f:93:10:60:09:c8:97:
75:8d:98:64:64:16:0a:75:ca:67:ec:a1:09:50:16:
0c:a0:a4:bb:96:36:fd:01:c2:78:93:b3:ba:5d:cd:
90:82:34:35:a9:26:41:38:16:0e:de:e8:5e:ca:3e:
20:74:20:10:9e:1c:3e:f7:9c:71:0d:be:c6:de:f2:
a7:55:f3:ad:01:41:01:18:c7:3e:0b:fd:6a:bb:95:
0c:43:f0:5d:21:43:49:9d:d2:52:72:ae:b6:e3:dd:
d7:b0:74:db:aa:c3:69:b7:33:21:d2:b3:37:0b:74:
d9:41:0f:10:7c:dd:87:43:3b:61:13:3a:4d:e5:76:
30:35:e3:f5:a0:94:35:a6:ad:c4:1e:6c:85:87:7d:
03:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:44:20:43:9B:BE:70:84:FA:C2:BF:E0:9C:A8:C6:32:A1:31:51:D6
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/jEQgQ5u-cIT6wr_gnKjGMqExUdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.138.0/23
82.177.163.0/24
88.220.98.0/23
88.220.182.0/23
Signature Algorithm: sha256WithRSAEncryption
10:9b:a4:9d:3d:3e:ef:14:47:1f:34:14:5e:c4:ba:68:3e:8b:
a8:ce:b3:fc:75:43:f2:1e:19:3e:e5:30:b2:55:ff:05:4f:36:
b8:03:99:76:64:6a:02:8d:67:e6:cf:ab:cb:5d:46:9d:07:ba:
81:7e:ff:dd:6d:ab:21:25:55:55:74:60:68:4c:02:b3:60:9c:
3e:17:4c:e4:ba:7b:d4:f3:76:68:c4:a0:85:0b:74:2b:2d:d8:
0e:bc:bd:3f:11:ac:73:19:be:07:c9:95:f8:ae:8b:45:7d:3e:
c6:5f:c6:cf:e0:e4:18:6c:c2:d0:5d:34:a4:c3:fd:31:bb:48:
09:53:5b:92:2b:53:ff:20:1f:e1:87:65:cb:d1:42:88:02:6b:
9b:c0:24:d8:69:6d:85:c4:a4:14:56:e0:d6:a8:57:3c:9e:12:
c7:a6:6c:f4:bb:90:96:30:06:ca:80:3b:8f:e4:e4:f4:ae:b5:
85:f3:d1:1c:9d:3e:f4:e0:c8:c0:0d:75:99:bb:3f:59:f0:cb:
59:e3:b3:83:19:65:e1:b1:e3:1e:02:28:5a:91:e0:6f:ed:a7:
c5:89:36:06:1e:1f:77:13:c2:b5:c7:67:6c:7e:75:69:5a:20:
19:94:53:2b:48:67:ad:11:70:e9:3b:59:89:ee:e2:23:5f:6d:
1f:b4:94:3f
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQhsiXR7pvZgWjocKv/P7AbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj
MmQ3NmIwHhcNMjUwMTAxMTE0ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzQ0MjA0MzliYmU3MDg0ZmFjMmJmZTA5Y2E4YzYzMmExMzE1MWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW1gtxhusfMIoUK3qsGkIdEoLUFD
M/vBeXIBXpQ72r2cAtPzr/cedYdm0WGuD8aKCDeoSN274xgkbCnDdgHn14l6mOiE
yivkitlFQFkKVPE8fDruOM867aA8nx0H4dvmgbhwSCXSAyUL6n7mx+60pZ+TEGAJ
yJd1jZhkZBYKdcpn7KEJUBYMoKS7ljb9AcJ4k7O6Xc2QgjQ1qSZBOBYO3uheyj4g
dCAQnhw+95xxDb7G3vKnVfOtAUEBGMc+C/1qu5UMQ/BdIUNJndJScq62493XsHTb
qsNptzMh0rM3C3TZQQ8QfN2HQzthEzpN5XYwNeP1oJQ1pq3EHmyFh30D8QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFIxEIEObvnCE+sK/4JyoxjKhMVHWMB8GA1UdIwQY
MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt
NTI3NjZiMjRiYWE0LzEvakVRZ1E1dS1jSVQ2d3JfZ25LakdNcUV4VWRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0
LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBUrGKAwQA
UrGjAwQBWNxiAwQBWNy2MA0GCSqGSIb3DQEBCwUAA4IBAQAQm6SdPT7vFEcfNBRe
xLpoPouozrP8dUPyHhk+5TCyVf8FTza4A5l2ZGoCjWfmz6vLXUadB7qBfv/dbash
JVVVdGBoTAKzYJw+F0zkunvU83ZoxKCFC3QrLdgOvL0/EaxzGb4HyZX4rotFfT7G
X8bP4OQYbMLQXTSkw/0xu0gJU1uSK1P/IB/hh2XL0UKIAmubwCTYaW2FxKQUVuDW
qFc8nhLHpmz0u5CWMAbKgDuP5OT0rrWF89EcnT704MjADXWZuz9Z8MtZ47ODGWXh
seMeAihakeBv7afFiTYGHh93E8K1x2dsfnVpWiAZlFMrSGetEXDpO1mJ7uIjX20f
tJQ/
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:09 2025 by rpki-client