Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/JTpkIG2gAi87qZ4MaDyiSAhDmGs.roa
File: JTpkIG2gAi87qZ4MaDyiSAhDmGs.roa (raw, json)
Hash identifier: pqYQEm9FQENA5hwqBQ6sbfRExLr5G9tm4QJ0ttI7KnA=
Subject key identifier: 25:3A:64:20:6D:A0:02:2F:3B:A9:9E:0C:68:3C:A2:48:08:43:98:6B
Certificate issuer: /CN=3d4276373b040fa9ac77e566c5b6cdf35b53b937
Certificate serial: 01942825F5379FDB8655F93B76949206DABE
Authority key identifier: 3D:42:76:37:3B:04:0F:A9:AC:77:E5:66:C5:B6:CD:F3:5B:53:B9:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/JTpkIG2gAi87qZ4MaDyiSAhDmGs.roa
Signing time: Thu 02 Jan 2025 17:52:43 +0000
ROA not before: Thu 02 Jan 2025 17:52:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5089
IP address blocks: 193.238.234.0/24 maxlen: 24
193.238.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:f5:37:9f:db:86:55:f9:3b:76:94:92:06:da:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d4276373b040fa9ac77e566c5b6cdf35b53b937
Validity
Not Before: Jan 2 17:52:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=253a64206da0022f3ba99e0c683ca2480843986b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:87:a2:c7:e1:bb:db:5e:84:e4:ed:71:db:be:
86:86:8c:f5:b5:d4:db:68:ff:29:df:57:12:a5:b9:
0b:8c:76:c5:86:3e:f5:b9:69:4d:c5:96:5c:9e:ae:
ac:bc:c8:87:f1:84:c9:1f:cf:2b:dd:72:22:c5:f9:
10:f5:bf:4e:e2:ec:23:91:8b:95:8a:d5:b6:23:3c:
5a:b9:b4:f9:57:e2:9c:ff:63:80:8f:54:03:45:f8:
34:ea:f3:02:7e:5f:cd:5d:62:1b:bc:34:0e:f6:73:
08:14:03:bd:8e:16:2c:02:f6:a6:c0:0e:57:09:62:
87:fb:4b:1d:9d:db:20:d9:8b:78:9b:a7:fb:23:e3:
9f:a8:41:36:60:a3:17:2f:22:d5:3f:c0:51:66:7f:
77:8b:f4:05:db:af:07:12:9f:84:93:f5:e2:d3:86:
5a:2f:f9:3b:0c:69:35:e0:ce:f0:4c:fe:c2:df:ba:
68:ed:14:32:46:4d:4a:43:fb:05:e6:41:36:80:0c:
43:07:6b:93:f1:9a:54:3f:81:81:15:6b:aa:41:b9:
1e:49:1c:39:cc:da:bd:33:e8:42:fe:d7:56:5e:ec:
61:e2:5a:9a:63:22:94:7b:01:58:73:87:cc:a4:d8:
3f:d2:f7:3a:3e:07:73:78:fc:65:d8:80:d1:db:82:
a9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3A:64:20:6D:A0:02:2F:3B:A9:9E:0C:68:3C:A2:48:08:43:98:6B
X509v3 Authority Key Identifier:
keyid:3D:42:76:37:3B:04:0F:A9:AC:77:E5:66:C5:B6:CD:F3:5B:53:B9:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/JTpkIG2gAi87qZ4MaDyiSAhDmGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.238.234.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:bd:da:6c:e8:42:c4:77:f7:d4:a4:92:4e:6f:8d:60:17:87:
ea:29:44:50:29:cb:49:93:89:f9:78:da:48:1a:61:68:2b:e8:
76:fa:91:ef:86:1c:ec:83:f5:44:c4:3f:7e:89:95:67:81:68:
23:c4:de:f7:7d:5b:df:aa:1a:cf:ad:66:59:5e:fd:dd:b2:a0:
b9:ea:b8:99:39:5e:8b:13:d6:a6:fb:77:d4:3e:df:5b:48:5b:
8d:d9:b2:bc:62:50:be:de:8e:2a:d4:11:73:83:ba:be:d0:5d:
f1:d2:21:6e:56:43:f0:16:1b:47:43:a7:57:c1:20:9f:68:bb:
ba:2b:28:9b:75:73:70:d5:02:e1:de:b7:23:98:74:e5:2e:ec:
2d:62:64:77:de:48:60:d0:d3:81:35:b8:03:d0:c7:b3:56:6e:
d2:e8:6c:27:ca:1b:34:b9:22:db:41:d1:41:0a:ce:f7:11:42:
91:a3:7b:8b:c6:55:1a:a1:0b:49:df:78:36:84:cd:10:77:46:
7d:3b:0e:3e:4b:4e:ad:2f:96:ce:d0:ba:de:53:a7:4c:cf:3e:
e6:d5:93:58:17:ee:04:8e:ae:2a:10:c5:a0:17:e8:63:1d:98:
3d:b3:11:b5:e1:39:a9:55:83:51:2a:44:40:e0:c9:26:e5:97:
bb:89:e6:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJfU3n9uGVfk7dpSSBtq+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkNDI3NjM3M2IwNDBmYTlhYzc3ZTU2NmM1YjZjZGYzNWI1
M2I5MzcwHhcNMjUwMTAyMTc1MjQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTNhNjQyMDZkYTAwMjJmM2JhOTllMGM2ODNjYTI0ODA4NDM5ODZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoeix+G7216E5O1x276Ghoz1tdTb
aP8p31cSpbkLjHbFhj71uWlNxZZcnq6svMiH8YTJH88r3XIixfkQ9b9O4uwjkYuV
itW2IzxaubT5V+Kc/2OAj1QDRfg06vMCfl/NXWIbvDQO9nMIFAO9jhYsAvamwA5X
CWKH+0sdndsg2Yt4m6f7I+OfqEE2YKMXLyLVP8BRZn93i/QF268HEp+Ek/Xi04Za
L/k7DGk14M7wTP7C37po7RQyRk1KQ/sF5kE2gAxDB2uT8ZpUP4GBFWuqQbkeSRw5
zNq9M+hC/tdWXuxh4lqaYyKUewFYc4fMpNg/0vc6PgdzePxl2IDR24Kp2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCU6ZCBtoAIvO6meDGg8okgIQ5hrMB8GA1UdIwQY
MBaAFD1Cdjc7BA+prHflZsW2zfNbU7k3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFVKMk56c0VENm1zZC1WbXhiYk44MXRUdVRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9hMTlkNTEtMDdlNS00ZGI1LTlkMGUt
NjZkMzE5OGJmMWEyLzEvSlRwa0lHMmdBaTg3cVo0TWFEeWlTQWhEbUdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9hMTlkNTEtMDdlNS00ZGI1LTlkMGUtNjZkMzE5OGJmMWEy
LzEvUFVKMk56c0VENm1zZC1WbXhiYk44MXRUdVRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwe7qMA0G
CSqGSIb3DQEBCwUAA4IBAQDEvdps6ELEd/fUpJJOb41gF4fqKURQKctJk4n5eNpI
GmFoK+h2+pHvhhzsg/VExD9+iZVngWgjxN73fVvfqhrPrWZZXv3dsqC56riZOV6L
E9am+3fUPt9bSFuN2bK8YlC+3o4q1BFzg7q+0F3x0iFuVkPwFhtHQ6dXwSCfaLu6
KyibdXNw1QLh3rcjmHTlLuwtYmR33khg0NOBNbgD0MezVm7S6Gwnyhs0uSLbQdFB
Cs73EUKRo3uLxlUaoQtJ33g2hM0Qd0Z9Ow4+S06tL5bO0LreU6dMzz7m1ZNYF+4E
jq4qEMWgF+hjHZg9sxG14TmpVYNRKkRA4Mkm5Ze7iebO
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:24 2025 by rpki-client