Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/c2f028-4643-4fa4-bbb2-28924b056c59/1/jzxMbaozHSEWDaa6xzhlvw6ZaU0.roa
File: jzxMbaozHSEWDaa6xzhlvw6ZaU0.roa (raw, json)
Hash identifier: TY1q9F9dIITFLXn4Wrxxr7YukAZzeUjQMV/iYiEiwVY=
Subject key identifier: 8F:3C:4C:6D:AA:33:1D:21:16:0D:A6:BA:C7:38:65:BF:0E:99:69:4D
Certificate issuer: /CN=a5860cc77cd48b52197cf5bf7b94920c02144bd5
Certificate serial: 01856E6FD6AB3F9FE7508DE1045E7EA1BD24
Authority key identifier: A5:86:0C:C7:7C:D4:8B:52:19:7C:F5:BF:7B:94:92:0C:02:14:4B:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYYMx3zUi1IZfPW_e5SSDAIUS9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/c2f028-4643-4fa4-bbb2-28924b056c59/1/jzxMbaozHSEWDaa6xzhlvw6ZaU0.roa
Signing time: Sun 01 Jan 2023 17:45:01 +0000
ROA not before: Sun 01 Jan 2023 17:45:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 37.72.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:d6:ab:3f:9f:e7:50:8d:e1:04:5e:7e:a1:bd:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5860cc77cd48b52197cf5bf7b94920c02144bd5
Validity
Not Before: Jan 1 17:45:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f3c4c6daa331d21160da6bac73865bf0e99694d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fc:fe:5b:3e:e3:52:03:b8:17:82:83:93:5d:
b6:9a:41:96:84:41:0c:fe:c4:8b:34:04:f2:b6:f4:
0a:13:5c:63:a3:1c:ac:a2:2c:18:65:4a:9f:02:db:
75:a8:a4:ea:af:2a:4d:f4:a2:c9:bb:eb:69:57:6d:
e5:f0:bb:30:14:52:e5:c0:b2:a2:e3:9b:25:f7:84:
b9:38:71:d6:18:3c:0a:3a:08:e7:e5:1c:f5:e6:e2:
06:8e:23:77:11:c0:a6:a6:5f:3d:51:d8:f0:1d:d7:
b1:b4:e3:ca:42:81:aa:ab:0b:f4:9c:cc:d5:da:e8:
e1:a5:67:ce:4b:95:e3:21:91:dd:6f:92:e6:9c:d2:
c0:af:e5:c4:37:aa:29:03:e3:32:ba:57:ce:7d:79:
30:8f:fe:e0:8a:d8:76:00:7c:22:41:71:bc:5a:37:
4e:a0:5c:09:e5:b7:ce:90:75:40:ec:ed:29:c1:68:
fc:df:ec:50:51:5a:3d:74:c5:a0:56:d6:31:04:e8:
a9:04:40:aa:07:e8:37:04:78:7d:db:dd:91:9a:55:
6b:95:ec:27:e8:db:67:e2:25:1d:aa:07:6d:a9:38:
d3:54:4d:ef:66:a7:f0:a0:f7:79:61:8c:c0:7c:93:
b9:ee:ae:e7:5a:af:d3:ba:22:4e:9d:62:0c:20:6e:
c5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:3C:4C:6D:AA:33:1D:21:16:0D:A6:BA:C7:38:65:BF:0E:99:69:4D
X509v3 Authority Key Identifier:
keyid:A5:86:0C:C7:7C:D4:8B:52:19:7C:F5:BF:7B:94:92:0C:02:14:4B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYYMx3zUi1IZfPW_e5SSDAIUS9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c2f028-4643-4fa4-bbb2-28924b056c59/1/jzxMbaozHSEWDaa6xzhlvw6ZaU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c2f028-4643-4fa4-bbb2-28924b056c59/1/pYYMx3zUi1IZfPW_e5SSDAIUS9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.136.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:a1:90:48:70:08:aa:8b:93:8b:e2:ce:a6:ff:72:6c:f2:18:
80:da:41:95:1e:41:a7:65:4b:83:2b:52:10:24:62:67:7a:9b:
67:d7:3a:e5:d6:42:ee:d1:92:2f:1d:ad:2d:20:dc:44:be:fc:
cf:d4:0e:9f:cc:02:68:e4:29:52:ae:bf:66:15:c2:06:49:1f:
d7:db:9a:e1:d2:85:ae:57:bf:a2:05:85:f0:b2:fb:0e:62:c7:
21:77:be:1e:92:fd:ec:e9:6a:1e:a2:55:be:81:75:ba:de:0b:
e4:7a:5a:01:d7:9f:b9:a0:32:f0:9d:b4:b2:40:ed:5e:f5:dc:
74:c7:c8:ce:d6:c9:fa:32:19:07:c7:bc:22:d3:52:2f:ce:69:
1e:09:3f:1d:11:da:5d:59:a3:7d:c7:a2:b8:6f:48:ff:67:68:
94:15:a3:b5:bb:f8:ae:ab:f0:88:ea:6a:ac:58:e7:55:56:d8:
8d:ea:f3:14:53:f8:15:4a:dd:49:10:52:76:8b:24:6d:93:b1:
20:fe:be:56:97:15:eb:88:d8:d0:d5:16:bd:51:6f:60:7e:0a:
a6:ca:b2:c8:d8:55:0d:f2:56:af:f7:33:18:fa:57:6b:2d:c7:
d7:33:26:e6:c4:b3:07:51:da:af:90:45:2e:de:0e:43:05:5b:
10:ff:f8:1d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVub9arP5/nUI3hBF5+ob0kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ODYwY2M3N2NkNDhiNTIxOTdjZjViZjdiOTQ5MjBjMDIx
NDRiZDUwHhcNMjMwMTAxMTc0NTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjNjNGM2ZGFhMzMxZDIxMTYwZGE2YmFjNzM4NjViZjBlOTk2OTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/z+Wz7jUgO4F4KDk122mkGWhEEM
/sSLNATytvQKE1xjoxysoiwYZUqfAtt1qKTqrypN9KLJu+tpV23l8LswFFLlwLKi
45sl94S5OHHWGDwKOgjn5Rz15uIGjiN3EcCmpl89UdjwHdextOPKQoGqqwv0nMzV
2ujhpWfOS5XjIZHdb5LmnNLAr+XEN6opA+MyulfOfXkwj/7gith2AHwiQXG8WjdO
oFwJ5bfOkHVA7O0pwWj83+xQUVo9dMWgVtYxBOipBECqB+g3BHh9292RmlVrlewn
6Ntn4iUdqgdtqTjTVE3vZqfwoPd5YYzAfJO57q7nWq/TuiJOnWIMIG7F1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI88TG2qMx0hFg2musc4Zb8OmWlNMB8GA1UdIwQY
MBaAFKWGDMd81ItSGXz1v3uUkgwCFEvVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFlZTXgzelVpMUlaZlBXX2U1U1NEQUlVUzlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9jMmYwMjgtNDY0My00ZmE0LWJiYjIt
Mjg5MjRiMDU2YzU5LzEvanp4TWJhb3pIU0VXRGFhNnh6aGx2dzZaYVUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9jMmYwMjgtNDY0My00ZmE0LWJiYjItMjg5MjRiMDU2YzU5
LzEvcFlZTXgzelVpMUlaZlBXX2U1U1NEQUlVUzlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJUiIMA0G
CSqGSIb3DQEBCwUAA4IBAQDHoZBIcAiqi5OL4s6m/3Js8hiA2kGVHkGnZUuDK1IQ
JGJneptn1zrl1kLu0ZIvHa0tINxEvvzP1A6fzAJo5ClSrr9mFcIGSR/X25rh0oWu
V7+iBYXwsvsOYschd74ekv3s6WoeolW+gXW63gvkeloB15+5oDLwnbSyQO1e9dx0
x8jO1sn6MhkHx7wi01IvzmkeCT8dEdpdWaN9x6K4b0j/Z2iUFaO1u/iuq/CI6mqs
WOdVVtiN6vMUU/gVSt1JEFJ2iyRtk7Eg/r5WlxXriNjQ1Ra9UW9gfgqmyrLI2FUN
8lav9zMY+ldrLcfXMybmxLMHUdqvkEUu3g5DBVsQ//gd
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:14 2025 by rpki-client