Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/juJXvc1Tq8wnuTTLmH47_Gp7M9E.roa
File: juJXvc1Tq8wnuTTLmH47_Gp7M9E.roa (raw, json)
Hash identifier: 0VOZcEuYkeVCjKxlbivQ6RiJ545nUW8o/QChCsfMBNQ=
Subject key identifier: 8E:E2:57:BD:CD:53:AB:CC:27:B9:34:CB:98:7E:3B:FC:6A:7B:33:D1
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 0194236A598A74B3047876E1297CB06C46C0
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/juJXvc1Tq8wnuTTLmH47_Gp7M9E.roa
Signing time: Wed 01 Jan 2025 19:49:19 +0000
ROA not before: Wed 01 Jan 2025 19:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1146
IP address blocks: 145.100.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:59:8a:74:b3:04:78:76:e1:29:7c:b0:6c:46:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 19:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ee257bdcd53abcc27b934cb987e3bfc6a7b33d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ed:d6:7e:41:cb:14:3c:e8:5a:69:3d:8e:8a:
e6:8b:51:4f:3e:54:2a:c7:bc:92:5e:3b:bc:ea:fe:
a9:b7:4a:d3:9b:5a:87:0b:66:b0:7e:c5:e1:79:6b:
d4:d8:4d:88:11:8c:31:35:ee:75:11:14:0d:17:c6:
8b:f2:30:8e:dc:a1:4e:7d:68:14:bc:21:78:7c:15:
e1:68:32:55:82:4d:9a:fc:6f:71:1b:6e:64:14:fc:
7c:7a:62:0c:37:c3:38:fc:a9:e0:49:5b:82:96:92:
32:df:04:01:c4:0a:e4:b6:ed:75:62:10:ad:d6:8b:
f9:e1:13:c9:5f:2e:d2:65:f1:09:d8:f2:23:10:4e:
ba:37:ae:57:37:06:9f:34:a7:0b:17:34:98:fc:ef:
3e:87:74:56:8d:87:69:7c:d7:44:fd:bb:1c:2d:eb:
67:3e:5b:ce:eb:fc:ca:07:50:29:c4:6a:78:aa:e7:
51:0b:ec:d2:6b:6a:33:19:af:04:48:2d:df:13:41:
36:9d:06:28:7d:6a:8d:f5:47:07:d3:f4:9e:a4:8a:
6b:95:9a:7a:42:03:8a:ef:17:69:69:ac:64:8d:4d:
21:de:3d:98:72:2d:51:90:4f:2b:e6:4a:80:8a:8e:
de:60:2c:2c:5b:03:be:d5:2f:22:f1:e5:96:e0:d6:
ff:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E2:57:BD:CD:53:AB:CC:27:B9:34:CB:98:7E:3B:FC:6A:7B:33:D1
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/juJXvc1Tq8wnuTTLmH47_Gp7M9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.100.101.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:e4:55:36:63:ad:22:b6:81:92:8e:54:86:44:7f:b2:43:28:
9c:53:c1:45:fa:d6:41:d4:dc:62:1c:b0:c0:fa:a1:03:63:f1:
6d:3c:79:41:ec:f3:0b:bd:16:6b:c8:3c:20:7b:96:2d:8e:b7:
9a:b1:ff:eb:3d:02:ee:66:0e:82:b7:c1:9f:f7:6f:e7:a8:2e:
54:f2:f9:83:7e:8e:22:60:97:5f:1f:f5:d1:18:f1:f0:9f:1c:
93:8d:57:4a:ee:3f:6a:78:7e:6f:43:df:2b:34:d8:7c:76:48:
ee:d7:d0:79:81:85:1a:65:74:99:c0:26:52:82:ef:50:3d:f2:
1f:57:95:0f:eb:98:55:7a:61:1a:e9:70:5c:31:9a:6b:ac:fa:
84:c0:6d:2e:2e:ff:40:f1:86:c5:6b:f7:29:49:bb:28:03:9b:
99:05:eb:39:8e:dc:df:fe:13:9e:01:15:84:5f:b0:5b:9d:46:
18:60:2a:6f:23:f5:10:04:3e:6c:6d:e6:77:16:d9:ad:cd:7c:
dc:92:03:9f:a8:e1:b3:9c:cd:1e:67:8f:4a:ed:c9:7b:f8:5c:
aa:85:d6:d8:ad:a7:e8:62:09:f5:94:80:69:69:eb:e8:7f:4b:
65:05:05:d5:c1:4e:d4:fc:bd:9f:4c:f7:4a:db:89:11:51:f1:
61:6b:01:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjalmKdLMEeHbhKXywbEbAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm
NDUyM2UwHhcNMjUwMTAxMTk0OTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWUyNTdiZGNkNTNhYmNjMjdiOTM0Y2I5ODdlM2JmYzZhN2IzM2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoO3WfkHLFDzoWmk9jormi1FPPlQq
x7ySXju86v6pt0rTm1qHC2awfsXheWvU2E2IEYwxNe51ERQNF8aL8jCO3KFOfWgU
vCF4fBXhaDJVgk2a/G9xG25kFPx8emIMN8M4/KngSVuClpIy3wQBxArktu11YhCt
1ov54RPJXy7SZfEJ2PIjEE66N65XNwafNKcLFzSY/O8+h3RWjYdpfNdE/bscLetn
PlvO6/zKB1ApxGp4qudRC+zSa2ozGa8ESC3fE0E2nQYofWqN9UcH0/SepIprlZp6
QgOK7xdpaaxkjU0h3j2Yci1RkE8r5kqAio7eYCwsWwO+1S8i8eWW4Nb/IwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI7iV73NU6vMJ7k0y5h+O/xqezPRMB8GA1UdIwQY
MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt
NTQ4NjFmMjMyNDlkLzEvanVKWHZjMVRxOHdudVRUTG1INDdfR3A3TTlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk
LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkWRlMA0G
CSqGSIb3DQEBCwUAA4IBAQCa5FU2Y60itoGSjlSGRH+yQyicU8FF+tZB1NxiHLDA
+qEDY/FtPHlB7PMLvRZryDwge5Ytjreasf/rPQLuZg6Ct8Gf92/nqC5U8vmDfo4i
YJdfH/XRGPHwnxyTjVdK7j9qeH5vQ98rNNh8dkju19B5gYUaZXSZwCZSgu9QPfIf
V5UP65hVemEa6XBcMZprrPqEwG0uLv9A8YbFa/cpSbsoA5uZBes5jtzf/hOeARWE
X7BbnUYYYCpvI/UQBD5sbeZ3FtmtzXzckgOfqOGznM0eZ49K7cl7+FyqhdbYrafo
Ygn1lIBpaevof0tlBQXVwU7U/L2fTPdK24kRUfFhawEX
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:25:27 2025 by rpki-client