Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/jZJbW0BsVFzwOis1-qgAs4YgHTo.roa
File: jZJbW0BsVFzwOis1-qgAs4YgHTo.roa (raw, json)
Hash identifier: Sk/yWlF7AwtnMT+QuY5wwjFpUnvnxIEukFPcttfDcVM=
Subject key identifier: 8D:92:5B:5B:40:6C:54:5C:F0:3A:2B:35:FA:A8:00:B3:86:20:1D:3A
Certificate issuer: /CN=c987d09fd3fc2b704c66110bb0252ee0c6b1ba4a
Certificate serial: 0194258F100960BDEFE75DF1B7CB04D98EDD
Authority key identifier: C9:87:D0:9F:D3:FC:2B:70:4C:66:11:0B:B0:25:2E:E0:C6:B1:BA:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYfQn9P8K3BMZhELsCUu4Maxuko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/jZJbW0BsVFzwOis1-qgAs4YgHTo.roa
Signing time: Thu 02 Jan 2025 05:48:40 +0000
ROA not before: Thu 02 Jan 2025 05:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34915
IP address blocks: 194.5.208.0/23 maxlen: 23
194.5.210.0/23 maxlen: 23
2a0c:ca80::/32 maxlen: 32
2a0c:ca81::/32 maxlen: 32
2a0c:ca82::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:10:09:60:bd:ef:e7:5d:f1:b7:cb:04:d9:8e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c987d09fd3fc2b704c66110bb0252ee0c6b1ba4a
Validity
Not Before: Jan 2 05:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d925b5b406c545cf03a2b35faa800b386201d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0b:11:29:75:d8:69:6d:25:9e:ec:a5:f9:97:
53:44:bc:da:6b:3f:be:ac:0e:82:f2:9a:b2:a7:53:
b0:c0:7e:01:9f:c0:80:47:46:d1:36:b8:ef:63:de:
00:e6:95:32:16:78:27:8e:71:e1:d0:8f:b0:6b:a7:
6c:5c:1a:aa:8e:e6:f6:1a:f3:17:94:44:23:8e:1c:
04:7b:dc:40:b4:31:2b:16:c3:60:b3:2f:ce:e5:fb:
f6:b9:83:ce:2a:d4:cd:7d:b2:f1:f0:78:c9:bc:c2:
48:f2:0d:ca:6a:30:10:df:44:6b:21:ca:21:d2:7e:
42:c1:38:e4:dc:95:ed:0c:d9:ce:39:2a:ec:54:96:
da:ce:16:40:7d:c9:1b:66:7e:d7:8a:6d:58:4a:df:
b6:50:a3:09:62:b4:4d:c8:11:98:bb:80:06:b1:d9:
c7:d9:27:8e:f7:98:92:18:db:34:67:64:06:83:c8:
91:ea:c0:b3:c3:5f:bc:a1:59:75:1e:aa:da:7d:7a:
3a:a9:9c:e9:cd:c4:08:fa:fc:a6:b9:91:69:14:3b:
48:05:6a:fb:d0:f8:61:e8:f9:e6:fe:48:41:c2:95:
b5:ba:c9:c7:48:19:c1:f6:88:a5:6e:f8:59:68:99:
13:9f:df:40:44:a6:37:08:7c:80:1c:0f:d3:e5:eb:
42:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:92:5B:5B:40:6C:54:5C:F0:3A:2B:35:FA:A8:00:B3:86:20:1D:3A
X509v3 Authority Key Identifier:
keyid:C9:87:D0:9F:D3:FC:2B:70:4C:66:11:0B:B0:25:2E:E0:C6:B1:BA:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYfQn9P8K3BMZhELsCUu4Maxuko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/jZJbW0BsVFzwOis1-qgAs4YgHTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.208.0/22
IPv6:
2a0c:ca80::-2a0c:ca82:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4a:3f:2a:1f:64:0b:8f:79:34:71:2e:58:55:43:90:cd:8d:6e:
6a:08:f0:38:55:85:03:1c:77:0a:43:da:a2:f3:2b:31:92:81:
80:ae:f9:a9:f1:b5:7a:5b:f1:0b:df:a4:f7:a6:ae:f6:57:84:
39:09:dd:f6:fa:18:67:d9:8a:eb:78:72:7f:25:3f:f4:b0:92:
6e:ad:94:06:eb:0c:b7:f1:5a:6c:ae:15:1d:7e:a7:62:34:30:
09:57:c9:5f:c4:63:50:d9:dc:56:9f:92:9a:54:11:9a:75:4a:
e8:af:ee:11:78:ca:9c:79:f6:96:67:4b:ed:1e:7f:22:c7:e3:
73:96:e4:1c:73:a7:7f:94:26:13:13:bc:54:a5:1d:20:f3:7b:
6e:14:8a:7c:1a:50:f2:b7:85:d7:b1:12:f8:3f:c9:0e:3d:0b:
dc:fc:9f:74:82:7a:d5:9f:34:c8:1f:40:38:e7:ed:be:a6:e8:
6d:c5:aa:3e:2a:84:b9:1e:78:1c:6f:73:81:1a:6f:f8:23:4b:
bb:59:aa:b0:06:15:41:6b:21:6b:75:62:b8:10:55:2c:8e:dc:
e5:8c:da:28:f9:7d:11:7e:75:86:34:fd:e4:f2:bd:1f:37:35:
e2:86:7f:35:a7:6d:2c:d5:12:e0:0c:4c:3a:cb:0b:0a:86:56:
02:df:61:a3
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQljxAJYL3v513xt8sE2Y7dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ODdkMDlmZDNmYzJiNzA0YzY2MTEwYmIwMjUyZWUwYzZi
MWJhNGEwHhcNMjUwMTAyMDU0ODQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDkyNWI1YjQwNmM1NDVjZjAzYTJiMzVmYWE4MDBiMzg2MjAxZDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6wsRKXXYaW0lnuyl+ZdTRLzaaz++
rA6C8pqyp1OwwH4Bn8CAR0bRNrjvY94A5pUyFngnjnHh0I+wa6dsXBqqjub2GvMX
lEQjjhwEe9xAtDErFsNgsy/O5fv2uYPOKtTNfbLx8HjJvMJI8g3KajAQ30RrIcoh
0n5CwTjk3JXtDNnOOSrsVJbazhZAfckbZn7Xim1YSt+2UKMJYrRNyBGYu4AGsdnH
2SeO95iSGNs0Z2QGg8iR6sCzw1+8oVl1HqrafXo6qZzpzcQI+vymuZFpFDtIBWr7
0Phh6Pnm/khBwpW1usnHSBnB9oilbvhZaJkTn99ARKY3CHyAHA/T5etCvwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFI2SW1tAbFRc8DorNfqoALOGIB06MB8GA1UdIwQY
MBaAFMmH0J/T/CtwTGYRC7AlLuDGsbpKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVlmUW45UDhLM0JNWmhFTHNDVXU0TWF4dWtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8zZTRmNmItMjIzNS00MzJlLWE2OWEt
MDdkYWM3YjkyZDQ0LzEvalpKYlcwQnNWRnp3T2lzMS1xZ0FzNFlnSFRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8zZTRmNmItMjIzNS00MzJlLWE2OWEtMDdkYWM3YjkyZDQ0
LzEveVlmUW45UDhLM0JNWmhFTHNDVXU0TWF4dWtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQCwgXQMBYE
AgACMBAwDgMFByoMyoADBQAqDMqCMA0GCSqGSIb3DQEBCwUAA4IBAQBKPyofZAuP
eTRxLlhVQ5DNjW5qCPA4VYUDHHcKQ9qi8ysxkoGArvmp8bV6W/EL36T3pq72V4Q5
Cd32+hhn2YrreHJ/JT/0sJJurZQG6wy38VpsrhUdfqdiNDAJV8lfxGNQ2dxWn5Ka
VBGadUror+4ReMqcefaWZ0vtHn8ix+NzluQcc6d/lCYTE7xUpR0g83tuFIp8GlDy
t4XXsRL4P8kOPQvc/J90gnrVnzTIH0A45+2+puhtxao+KoS5Hngcb3OBGm/4I0u7
WaqwBhVBayFrdWK4EFUsjtzljNoo+X0RfnWGNP3k8r0fNzXihn81p20s1RLgDEw6
ywsKhlYC32Gj
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:38 2025 by rpki-client