Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/j8J4UXhrjc6IiwoTf2GeAOwn4PY.roa
File: j8J4UXhrjc6IiwoTf2GeAOwn4PY.roa (raw, json)
Hash identifier: DORmHCds9nMeKKyz9uDbFpue1rKHKrsc7ASUb1gEREc=
Subject key identifier: 8F:C2:78:51:78:6B:8D:CE:88:8B:0A:13:7F:61:9E:00:EC:27:E0:F6
Certificate issuer: /CN=6e9a558ad546dcc9abc0b8a131067af02e407007
Certificate serial: 01941FFAA268084C740097F226F3B508D00C
Authority key identifier: 6E:9A:55:8A:D5:46:DC:C9:AB:C0:B8:A1:31:06:7A:F0:2E:40:70:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bppVitVG3MmrwLihMQZ68C5AcAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/j8J4UXhrjc6IiwoTf2GeAOwn4PY.roa
Signing time: Wed 01 Jan 2025 03:48:26 +0000
ROA not before: Wed 01 Jan 2025 03:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43892
IP address blocks: 79.171.96.0/21 maxlen: 21
79.171.96.0/22 maxlen: 22
79.171.96.0/24 maxlen: 24
79.171.100.0/22 maxlen: 22
79.171.101.0/24 maxlen: 24
185.62.60.0/22 maxlen: 24
185.67.180.0/22 maxlen: 22
185.67.182.0/24 maxlen: 24
185.67.183.0/24 maxlen: 24
185.130.12.0/22 maxlen: 24
185.130.12.0/23 maxlen: 23
185.130.14.0/24 maxlen: 24
2a02:3c8::/32 maxlen: 32
2a06:d700::/29 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a2:68:08:4c:74:00:97:f2:26:f3:b5:08:d0:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e9a558ad546dcc9abc0b8a131067af02e407007
Validity
Not Before: Jan 1 03:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fc27851786b8dce888b0a137f619e00ec27e0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b0:40:71:51:7f:21:4f:44:5f:d4:0c:17:64:
bd:01:09:a2:01:92:3e:5d:50:57:f8:9c:3e:da:72:
db:1e:b0:02:17:db:ce:6f:4e:f9:37:ea:4c:0c:29:
b6:63:7f:e5:f9:30:16:85:4d:4e:42:72:55:d4:f1:
9b:4a:17:93:f0:5a:83:9b:e5:93:93:a6:1e:b3:a6:
a4:8b:8e:78:3c:eb:fc:47:30:cb:d0:02:c6:3d:4b:
5f:b1:10:b6:98:6e:04:32:92:54:dc:46:0b:1f:b5:
c4:41:4f:98:a9:cd:e6:9a:7e:7f:51:3a:86:66:1b:
12:0b:b3:ab:8c:64:65:85:b2:97:01:12:e8:15:3d:
5a:b9:2a:38:47:8b:80:f3:48:21:57:10:95:41:95:
8e:86:ce:28:54:8b:a4:8c:89:4c:79:53:7e:4d:4b:
72:6c:92:78:2b:79:e9:7b:d3:9c:2b:99:32:73:6a:
f1:c1:72:35:69:71:b0:f3:51:bc:6c:97:ff:bc:4c:
92:f6:e9:0f:db:6e:01:dc:23:2c:01:14:9c:cb:f2:
76:d8:c3:c6:33:e2:ac:b7:e6:4d:12:ce:53:65:4e:
b8:55:a5:b4:ae:43:8f:06:8f:81:84:0b:8d:e2:a5:
d4:b2:dd:2b:ce:b1:93:cc:ae:f8:2f:07:f5:bd:1c:
47:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C2:78:51:78:6B:8D:CE:88:8B:0A:13:7F:61:9E:00:EC:27:E0:F6
X509v3 Authority Key Identifier:
keyid:6E:9A:55:8A:D5:46:DC:C9:AB:C0:B8:A1:31:06:7A:F0:2E:40:70:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bppVitVG3MmrwLihMQZ68C5AcAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/j8J4UXhrjc6IiwoTf2GeAOwn4PY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/bppVitVG3MmrwLihMQZ68C5AcAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.171.96.0/21
185.62.60.0/22
185.67.180.0/22
185.130.12.0/22
IPv6:
2a02:3c8::/32
2a06:d700::/29
Signature Algorithm: sha256WithRSAEncryption
b9:58:8e:d2:fe:3d:27:c4:8d:d2:cb:ce:33:08:07:ed:9f:b3:
b6:d9:41:ef:44:81:63:da:af:1d:45:46:b3:39:ea:53:57:87:
9b:1f:7c:20:da:80:06:0c:91:32:91:d4:9e:06:38:31:f2:87:
45:40:75:36:40:d3:92:90:0c:78:0c:d1:47:b2:d7:f4:40:1a:
ed:ce:b0:aa:e9:3d:53:a1:ba:6f:82:78:86:7c:d1:be:e7:a8:
88:66:c4:20:5d:bc:5a:d0:f9:77:69:48:e5:6a:b3:0d:f2:b3:
ce:f6:da:24:57:79:ec:24:d5:59:18:eb:03:19:2d:d3:e0:b8:
f4:c1:0d:4e:82:5b:3f:2c:18:bc:e6:b0:1f:62:19:f8:3a:f7:
f4:80:94:09:5c:fd:51:94:a7:ed:e8:28:ac:e7:12:19:a3:d0:
72:b8:c9:02:e7:89:16:b1:4f:9e:17:fa:45:e7:4f:b2:ce:87:
b0:8e:db:ff:8a:88:1c:b1:34:9d:39:fe:16:04:a8:18:5f:e2:
d4:35:08:2c:33:9d:02:06:2f:7e:94:e2:83:d0:f1:dd:42:9c:
4d:3d:25:2e:80:c5:e5:90:ea:03:51:e1:24:85:e1:fc:8b:87:
ff:14:70:8c:58:64:c0:2a:cb:d9:da:7a:3c:04:6e:06:77:fd:
67:a0:25:8d
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAZQf+qJoCEx0AJfyJvO1CNAMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlOWE1NThhZDU0NmRjYzlhYmMwYjhhMTMxMDY3YWYwMmU0
MDcwMDcwHhcNMjUwMTAxMDM0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmMyNzg1MTc4NmI4ZGNlODg4YjBhMTM3ZjYxOWUwMGVjMjdlMGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbBAcVF/IU9EX9QMF2S9AQmiAZI+
XVBX+Jw+2nLbHrACF9vOb075N+pMDCm2Y3/l+TAWhU1OQnJV1PGbSheT8FqDm+WT
k6Yes6aki454POv8RzDL0ALGPUtfsRC2mG4EMpJU3EYLH7XEQU+Yqc3mmn5/UTqG
ZhsSC7OrjGRlhbKXARLoFT1auSo4R4uA80ghVxCVQZWOhs4oVIukjIlMeVN+TUty
bJJ4K3npe9OcK5kyc2rxwXI1aXGw81G8bJf/vEyS9ukP224B3CMsARScy/J22MPG
M+Kst+ZNEs5TZU64VaW0rkOPBo+BhAuN4qXUst0rzrGTzK74Lwf1vRxH2wIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFI/CeFF4a43OiIsKE39hngDsJ+D2MB8GA1UdIwQY
MBaAFG6aVYrVRtzJq8C4oTEGevAuQHAHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnBwVml0VkczTW1yd0xpaE1RWjY4QzVBY0FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8xNTI5YzYtODA4Mi00ZjNhLWJjOTIt
NDIzZmNhMjI0MDQxLzEvajhKNFVYaHJqYzZJaXdvVGYyR2VBT3duNFBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8xNTI5YzYtODA4Mi00ZjNhLWJjOTItNDIzZmNhMjI0MDQx
LzEvYnBwVml0VkczTW1yd0xpaE1RWjY4QzVBY0FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAeBAIAATAYAwQDT6tgAwQC
uT48AwQCuUO0AwQCuYIMMBQEAgACMA4DBQAqAgPIAwUDKgbXADANBgkqhkiG9w0B
AQsFAAOCAQEAuViO0v49J8SN0svOMwgH7Z+zttlB70SBY9qvHUVGsznqU1eHmx98
INqABgyRMpHUngY4MfKHRUB1NkDTkpAMeAzRR7LX9EAa7c6wquk9U6G6b4J4hnzR
vueoiGbEIF28WtD5d2lI5WqzDfKzzvbaJFd57CTVWRjrAxkt0+C49MENToJbPywY
vOawH2IZ+Dr39ICUCVz9UZSn7egorOcSGaPQcrjJAueJFrFPnhf6RedPss6HsI7b
/4qIHLE0nTn+FgSoGF/i1DUILDOdAgYvfpTig9Dx3UKcTT0lLoDF5ZDqA1HhJIXh
/IuH/xRwjFhkwCrL2dp6PARuBnf9Z6AljQ==
-----END CERTIFICATE-----
Generated at Fri Feb 21 13:05:32 2025 by rpki-client