Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/jKLif-TMdnx4gdmFScothAJ_J_U.roa
File: jKLif-TMdnx4gdmFScothAJ_J_U.roa (raw, json)
Hash identifier: z4kaspEVbDiBr+9rZCZXxVGjU31c7C+HRYCRX/q4eCY=
Subject key identifier: 8C:A2:E2:7F:E4:CC:76:7C:78:81:D9:85:49:CA:2D:84:02:7F:27:F5
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 019423D6D5AAF43E8B0C782A9B8742C48FEF
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/jKLif-TMdnx4gdmFScothAJ_J_U.roa
Signing time: Wed 01 Jan 2025 21:47:49 +0000
ROA not before: Wed 01 Jan 2025 21:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198037
IP address blocks: 80.71.227.0/24 maxlen: 24
80.71.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:d5:aa:f4:3e:8b:0c:78:2a:9b:87:42:c4:8f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jan 1 21:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ca2e27fe4cc767c7881d98549ca2d84027f27f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f8:b0:26:48:22:37:0f:19:7e:ad:ff:52:a6:
d1:9f:98:52:91:eb:d5:24:67:c1:f7:3c:bc:13:e7:
92:60:01:25:62:67:dd:46:7b:ea:23:bc:3b:22:b8:
6a:1b:18:38:e8:b7:92:16:ef:42:76:e3:9f:83:08:
1b:4c:2e:70:97:13:9f:f6:b8:47:12:f3:d8:89:01:
de:fa:8a:94:83:e0:d5:0d:42:1d:1d:1b:2f:ce:18:
fd:48:c1:a4:70:96:bc:2c:fb:e2:2a:50:38:e5:00:
e2:00:4b:1d:c4:ad:76:7f:da:32:13:8c:09:b6:75:
d3:50:98:cc:dc:92:75:f5:db:54:79:2c:20:89:d5:
e0:60:fc:20:3e:be:31:72:ec:0e:fe:f4:78:ba:ec:
09:ce:af:df:ca:fa:3d:2e:9e:0a:9f:32:78:04:43:
2c:08:65:75:11:87:69:f8:05:4c:4c:e3:96:d3:3a:
f4:49:6f:67:0e:4e:da:12:19:51:50:8a:5e:41:86:
82:fa:79:a7:14:3f:26:ec:82:d7:2c:bc:f4:1b:f9:
24:e0:b9:8b:91:ee:41:d2:86:bd:e7:c2:3b:15:fd:
f1:b4:ad:6c:09:43:bd:f9:f9:09:cf:e2:fe:d5:97:
e7:b2:e4:44:ef:80:1b:20:eb:4d:27:0b:5b:41:8e:
aa:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A2:E2:7F:E4:CC:76:7C:78:81:D9:85:49:CA:2D:84:02:7F:27:F5
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/jKLif-TMdnx4gdmFScothAJ_J_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.227.0/24
80.71.232.0/24
Signature Algorithm: sha256WithRSAEncryption
47:48:20:23:00:2b:09:b0:88:dc:88:e0:24:df:56:0f:12:47:
4a:bd:03:e2:c5:ba:9a:2f:3a:4e:bf:8e:28:17:4a:38:a1:36:
80:af:a4:b0:fa:f0:c8:36:f5:25:41:4f:e7:19:f0:a4:83:41:
28:bd:d3:2c:8a:7e:69:71:a6:fa:0f:db:5b:db:5f:9e:51:e0:
65:1e:57:32:da:93:d6:47:e6:30:f2:d1:ad:39:53:35:2c:59:
02:2a:33:ef:a9:ff:31:a9:1d:57:37:81:66:b2:52:9a:64:ee:
47:b0:7e:26:86:72:b1:cd:19:02:07:7d:ea:7f:16:a8:54:3f:
20:5e:e4:29:73:c9:7f:c2:f7:04:8a:fb:f7:ab:ee:5a:a5:f6:
7b:f0:81:b4:57:da:6f:8c:09:7f:11:ee:b9:43:5c:03:14:20:
14:21:f8:3e:d4:ec:d2:f3:ee:47:95:61:b7:8a:8b:a0:20:42:
da:fa:52:fa:59:3e:93:6f:7f:10:6f:76:de:cd:54:bf:7a:c5:
7f:25:ad:63:a9:c5:8c:a4:69:d6:3e:0f:b9:c4:48:20:42:37:
0f:5a:9a:7c:50:59:83:9f:ba:55:03:57:16:9f:0a:e5:f4:e6:
1f:3e:e6:6a:b9:02:e8:5d:f8:9c:e2:e1:9f:25:e0:3e:3f:96:
d3:d0:99:4e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQj1tWq9D6LDHgqm4dCxI/vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx
MDhlNDcwHhcNMjUwMTAxMjE0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2EyZTI3ZmU0Y2M3NjdjNzg4MWQ5ODU0OWNhMmQ4NDAyN2YyN2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6viwJkgiNw8Zfq3/UqbRn5hSkevV
JGfB9zy8E+eSYAElYmfdRnvqI7w7IrhqGxg46LeSFu9CduOfgwgbTC5wlxOf9rhH
EvPYiQHe+oqUg+DVDUIdHRsvzhj9SMGkcJa8LPviKlA45QDiAEsdxK12f9oyE4wJ
tnXTUJjM3JJ19dtUeSwgidXgYPwgPr4xcuwO/vR4uuwJzq/fyvo9Lp4KnzJ4BEMs
CGV1EYdp+AVMTOOW0zr0SW9nDk7aEhlRUIpeQYaC+nmnFD8m7ILXLLz0G/kk4LmL
ke5B0oa958I7Ff3xtK1sCUO9+fkJz+L+1ZfnsuRE74AbIOtNJwtbQY6qPQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIyi4n/kzHZ8eIHZhUnKLYQCfyf1MB8GA1UdIwQY
MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt
MTkxODliM2M5YzdkLzEvaktMaWYtVE1kbng0Z2RtRlNjb3RoQUpfSl9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk
LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUEfjAwQA
UEfoMA0GCSqGSIb3DQEBCwUAA4IBAQBHSCAjACsJsIjciOAk31YPEkdKvQPixbqa
LzpOv44oF0o4oTaAr6Sw+vDINvUlQU/nGfCkg0EovdMsin5pcab6D9tb21+eUeBl
Hlcy2pPWR+Yw8tGtOVM1LFkCKjPvqf8xqR1XN4FmslKaZO5HsH4mhnKxzRkCB33q
fxaoVD8gXuQpc8l/wvcEivv3q+5apfZ78IG0V9pvjAl/Ee65Q1wDFCAUIfg+1OzS
8+5HlWG3iougIELa+lL6WT6Tb38Qb3bezVS/esV/Ja1jqcWMpGnWPg+5xEggQjcP
Wpp8UFmDn7pVA1cWnwrl9OYfPuZquQLoXfic4uGfJeA+P5bT0JlO
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:31:51 2025 by rpki-client