Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/jBvm8nUfbpb7BfrHRo0OOHuGMWU.roa
File: jBvm8nUfbpb7BfrHRo0OOHuGMWU.roa (raw, json)
Hash identifier: U/SoJD450psv5yiGY8liudDbGaNYsigdE8gEZegGneM=
Subject key identifier: 8C:1B:E6:F2:75:1F:6E:96:FB:05:FA:C7:46:8D:0E:38:7B:86:31:65
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 0194236A61A9470BC4F26C88906FA397354E
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/jBvm8nUfbpb7BfrHRo0OOHuGMWU.roa
Signing time: Wed 01 Jan 2025 19:49:21 +0000
ROA not before: Wed 01 Jan 2025 19:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14813
IP address blocks: 145.26.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:61:a9:47:0b:c4:f2:6c:88:90:6f:a3:97:35:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 19:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c1be6f2751f6e96fb05fac7468d0e387b863165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4a:8d:b9:dd:8a:91:4e:c4:26:b2:e0:a3:5e:
f8:7f:38:bc:71:46:f7:ee:ae:fe:37:30:80:be:c4:
b5:36:f9:79:bb:f5:99:85:70:c3:2c:6d:b8:b8:b1:
5d:3e:bb:6f:4a:a2:cf:de:ff:ae:b2:87:d4:28:f6:
a2:bc:b3:e5:ee:c3:41:72:07:19:1c:a6:86:81:14:
ec:83:ec:c3:3d:b1:5f:45:1e:0b:49:a4:41:8b:8a:
b5:70:df:3f:26:68:b4:27:0c:60:2f:5c:35:9d:b8:
9f:9e:f7:f9:26:ae:e6:70:66:48:e9:aa:49:30:8c:
55:d3:c2:d0:f6:01:7f:52:99:f5:1a:f8:21:3d:6d:
9f:07:b0:b4:93:c9:57:fa:b4:4f:21:55:c3:5b:c1:
6e:1d:2c:f2:82:18:11:eb:8b:cc:21:7d:ee:13:11:
d9:49:46:4f:00:1e:3c:29:3a:b1:8f:ce:c5:e1:c5:
c9:52:ef:bd:0a:c4:21:57:07:9e:db:5e:40:b0:d9:
aa:4a:95:a5:f4:76:77:14:9d:ac:e7:69:21:f0:3f:
97:0e:2e:91:f6:d0:e6:c0:a5:36:5a:1e:99:1b:58:
9c:fa:15:52:c2:97:a0:45:1c:b2:b3:e7:ad:dc:38:
a8:1b:7f:6c:ac:95:73:f9:a4:81:f3:06:0a:25:c0:
74:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:1B:E6:F2:75:1F:6E:96:FB:05:FA:C7:46:8D:0E:38:7B:86:31:65
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/jBvm8nUfbpb7BfrHRo0OOHuGMWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.26.205.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:5a:60:62:bc:ad:e2:cb:12:ee:a3:cd:c6:72:44:b9:8c:66:
d8:49:95:6a:d8:cc:15:b1:ff:21:64:0f:70:7a:1d:7c:46:5c:
4d:de:83:23:73:a1:31:ea:9d:a1:92:c8:53:5e:03:8f:bc:fc:
ac:21:88:73:77:c0:45:eb:eb:27:8b:aa:b9:56:e2:45:0b:6d:
32:52:29:3f:d2:6c:65:77:3b:30:62:e5:bb:63:53:e8:91:c4:
c5:f8:d7:4a:f3:5a:af:ff:2a:d7:37:74:f2:bb:4a:82:d6:08:
6d:9e:4e:00:bc:e5:ef:3e:2f:f9:c4:96:7c:37:2f:c7:ec:28:
11:0c:40:66:9a:78:ef:ce:6a:ba:7a:dc:b2:b2:90:08:81:8f:
10:f3:4c:d7:1c:0a:32:27:bf:25:b0:2d:0d:3a:4c:c1:29:b2:
79:32:c0:f9:7b:08:69:d0:13:40:02:4b:13:20:a5:3f:b1:98:
fc:fc:db:91:58:1c:29:d2:cd:85:c5:c2:b5:ed:d5:78:fa:70:
09:a6:d6:32:eb:b0:43:ad:28:15:54:07:ce:a4:a5:da:f9:26:
64:be:e6:6b:bf:b5:c7:3c:c3:11:0b:3d:70:e3:85:d7:a6:f6:
c4:3f:0d:47:da:92:0e:78:9c:54:88:21:b9:fc:a1:a5:36:e2:
53:0c:42:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjamGpRwvE8myIkG+jlzVOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm
NDUyM2UwHhcNMjUwMTAxMTk0OTIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzFiZTZmMjc1MWY2ZTk2ZmIwNWZhYzc0NjhkMGUzODdiODYzMTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0qNud2KkU7EJrLgo174fzi8cUb3
7q7+NzCAvsS1Nvl5u/WZhXDDLG24uLFdPrtvSqLP3v+usofUKPaivLPl7sNBcgcZ
HKaGgRTsg+zDPbFfRR4LSaRBi4q1cN8/Jmi0JwxgL1w1nbifnvf5Jq7mcGZI6apJ
MIxV08LQ9gF/Upn1GvghPW2fB7C0k8lX+rRPIVXDW8FuHSzyghgR64vMIX3uExHZ
SUZPAB48KTqxj87F4cXJUu+9CsQhVwee215AsNmqSpWl9HZ3FJ2s52kh8D+XDi6R
9tDmwKU2Wh6ZG1ic+hVSwpegRRyys+et3DioG39srJVz+aSB8wYKJcB0XwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIwb5vJ1H26W+wX6x0aNDjh7hjFlMB8GA1UdIwQY
MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt
NTQ4NjFmMjMyNDlkLzEvakJ2bThuVWZicGI3QmZySFJvME9PSHVHTVdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk
LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkRrNMA0G
CSqGSIb3DQEBCwUAA4IBAQAqWmBivK3iyxLuo83GckS5jGbYSZVq2MwVsf8hZA9w
eh18RlxN3oMjc6Ex6p2hkshTXgOPvPysIYhzd8BF6+sni6q5VuJFC20yUik/0mxl
dzswYuW7Y1PokcTF+NdK81qv/yrXN3Tyu0qC1ghtnk4AvOXvPi/5xJZ8Ny/H7CgR
DEBmmnjvzmq6etyyspAIgY8Q80zXHAoyJ78lsC0NOkzBKbJ5MsD5ewhp0BNAAksT
IKU/sZj8/NuRWBwp0s2FxcK17dV4+nAJptYy67BDrSgVVAfOpKXa+SZkvuZrv7XH
PMMRCz1w44XXpvbEPw1H2pIOeJxUiCG5/KGlNuJTDEIh
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:57:22 2025 by rpki-client