Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/JFc-fPYxRwpWTL5aYEEZGZcBLZI.roa
File: JFc-fPYxRwpWTL5aYEEZGZcBLZI.roa (raw, json)
Hash identifier: QC2E/f+bgiIyYcCoCVg6tWDTa7s+wgp5cwum53PFTzc=
Subject key identifier: 24:57:3E:7C:F6:31:47:0A:56:4C:BE:5A:60:41:19:19:97:01:2D:92
Certificate issuer: /CN=0314514897a0aa3ffbf45b48606124627f15e506
Certificate serial: 019424B3FE06B388D2A732C4A5CC14F7C92B
Authority key identifier: 03:14:51:48:97:A0:AA:3F:FB:F4:5B:48:60:61:24:62:7F:15:E5:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/JFc-fPYxRwpWTL5aYEEZGZcBLZI.roa
Signing time: Thu 02 Jan 2025 01:49:23 +0000
ROA not before: Thu 02 Jan 2025 01:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207199
IP address blocks: 37.140.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:fe:06:b3:88:d2:a7:32:c4:a5:cc:14:f7:c9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0314514897a0aa3ffbf45b48606124627f15e506
Validity
Not Before: Jan 2 01:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24573e7cf631470a564cbe5a6041191997012d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:84:a2:d3:89:7f:1d:2a:bf:39:65:93:9b:6d:
c1:73:be:82:9e:0a:39:e5:d1:7f:3f:09:9e:89:8e:
d7:3a:23:62:a9:89:82:30:6f:da:d3:ac:18:10:f3:
5b:9a:b3:f7:75:df:f3:19:ff:fe:4c:26:67:38:2a:
78:69:be:f0:d4:71:af:19:48:50:fd:dc:e5:ea:0e:
e8:18:02:7b:23:2b:70:88:0f:dc:10:5a:19:a2:7c:
5f:cb:e5:2e:99:c8:10:18:91:88:d6:d1:79:ae:a9:
a8:85:9b:b3:38:38:4b:ff:ab:85:2c:b7:a7:70:b2:
f9:70:56:9a:40:16:15:9a:0d:70:5c:24:8c:13:2c:
b1:ab:85:5c:0b:36:bf:19:2b:71:13:c1:c1:b1:2e:
41:a2:f6:72:9c:2e:77:f0:c9:e5:4e:85:16:6b:24:
de:85:0f:de:9e:b3:bc:ed:c5:f1:90:ad:16:4a:00:
06:de:52:1f:db:01:17:14:eb:ce:a5:ec:e4:c3:6c:
a1:13:b2:79:71:12:38:11:78:39:11:69:c8:3a:17:
79:a2:4c:41:29:59:53:3a:99:02:0f:30:4e:3a:6e:
bc:bd:52:a2:9d:7d:3a:c8:32:8f:3b:91:09:2f:90:
d7:0c:ee:1b:82:34:93:f9:99:c9:e2:81:12:32:a9:
73:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:57:3E:7C:F6:31:47:0A:56:4C:BE:5A:60:41:19:19:97:01:2D:92
X509v3 Authority Key Identifier:
keyid:03:14:51:48:97:A0:AA:3F:FB:F4:5B:48:60:61:24:62:7F:15:E5:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/JFc-fPYxRwpWTL5aYEEZGZcBLZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.219.0/24
Signature Algorithm: sha256WithRSAEncryption
55:bc:fc:ef:c4:ff:dd:ba:20:aa:68:d0:c1:5d:2c:25:4b:e5:
33:3d:fb:a0:31:28:33:4d:2c:2c:a8:9f:d1:dd:dc:62:cf:53:
e9:90:0a:68:fc:54:6c:96:0d:dd:7d:4d:b6:7f:60:84:70:b4:
d0:40:19:6b:d2:98:49:5f:a7:0c:e2:41:85:57:3d:03:69:e3:
f1:51:17:d7:08:0f:c7:69:7d:43:e1:b5:f1:2b:14:c8:70:e5:
57:de:7f:de:a7:f8:a4:ee:f8:49:aa:94:fb:34:ee:66:d8:ea:
24:5e:1c:ce:5f:58:bc:fb:c0:0d:65:6e:c1:a4:f8:1f:3a:46:
bc:81:95:66:20:7b:d1:ac:5d:67:79:c8:33:e2:97:2f:a7:16:
8f:ff:31:5c:57:6d:a4:73:a2:07:f9:f1:6e:a9:f3:68:21:b7:
d6:fd:08:2c:f6:c0:de:6c:02:7b:17:55:11:4b:68:e3:e2:10:
92:1c:38:4a:f0:3c:74:1b:9e:f9:df:df:8e:de:85:72:e8:44:
81:12:27:2d:19:b8:b9:c8:d0:d7:21:90:2b:f9:c2:3b:01:11:
90:4a:30:35:3b:71:9e:92:da:87:7b:ab:3e:2d:f2:7f:3b:ac:
b9:f2:b2:4b:26:a4:70:bc:5a:cd:aa:4d:dd:05:8e:0b:f2:8d:
8b:9c:a7:1f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks/4Gs4jSpzLEpcwU98krMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMTQ1MTQ4OTdhMGFhM2ZmYmY0NWI0ODYwNjEyNDYyN2Yx
NWU1MDYwHhcNMjUwMTAyMDE0OTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDU3M2U3Y2Y2MzE0NzBhNTY0Y2JlNWE2MDQxMTkxOTk3MDEyZDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoSi04l/HSq/OWWTm23Bc76Cngo5
5dF/PwmeiY7XOiNiqYmCMG/a06wYEPNbmrP3dd/zGf/+TCZnOCp4ab7w1HGvGUhQ
/dzl6g7oGAJ7IytwiA/cEFoZonxfy+UumcgQGJGI1tF5rqmohZuzODhL/6uFLLen
cLL5cFaaQBYVmg1wXCSMEyyxq4VcCza/GStxE8HBsS5BovZynC538MnlToUWayTe
hQ/enrO87cXxkK0WSgAG3lIf2wEXFOvOpezkw2yhE7J5cRI4EXg5EWnIOhd5okxB
KVlTOpkCDzBOOm68vVKinX06yDKPO5EJL5DXDO4bgjST+ZnJ4oESMqlz9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCRXPnz2MUcKVky+WmBBGRmXAS2SMB8GA1UdIwQY
MBaAFAMUUUiXoKo/+/RbSGBhJGJ/FeUGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXhSUlNKZWdxal83OUZ0SVlHRWtZbjhWNVFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kZmYxODEtMmI3Ni00Y2EyLTk2ZTQt
NmIxNThiMjJiNDhmLzEvSkZjLWZQWXhSd3BXVEw1YVlFRVpHWmNCTFpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9kZmYxODEtMmI3Ni00Y2EyLTk2ZTQtNmIxNThiMjJiNDhm
LzEvQXhSUlNKZWdxal83OUZ0SVlHRWtZbjhWNVFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJYzbMA0G
CSqGSIb3DQEBCwUAA4IBAQBVvPzvxP/duiCqaNDBXSwlS+UzPfugMSgzTSwsqJ/R
3dxiz1PpkApo/FRslg3dfU22f2CEcLTQQBlr0phJX6cM4kGFVz0DaePxURfXCA/H
aX1D4bXxKxTIcOVX3n/ep/ik7vhJqpT7NO5m2OokXhzOX1i8+8ANZW7BpPgfOka8
gZVmIHvRrF1necgz4pcvpxaP/zFcV22kc6IH+fFuqfNoIbfW/Qgs9sDebAJ7F1UR
S2jj4hCSHDhK8Dx0G57539+O3oVy6ESBEictGbi5yNDXIZAr+cI7ARGQSjA1O3Ge
ktqHe6s+LfJ/O6y58rJLJqRwvFrNqk3dBY4L8o2LnKcf
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:57 2025 by rpki-client