Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/J-mZDParjvz3ljIfTzlhasavsBo.roa
File: J-mZDParjvz3ljIfTzlhasavsBo.roa (raw, json)
Hash identifier: X+bwHIE0wlCUwYusUU0uKi4Yc/Kz9/L2eOGJbsIOXJw=
Subject key identifier: 27:E9:99:0C:F6:AB:8E:FC:F7:96:32:1F:4F:39:61:6A:C6:AF:B0:1A
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 019428237D5FE2ED6C898196F3F04EFD1C51
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/J-mZDParjvz3ljIfTzlhasavsBo.roa
Signing time: Thu 02 Jan 2025 17:50:01 +0000
ROA not before: Thu 02 Jan 2025 17:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57391
IP address blocks: 94.139.176.0/20 maxlen: 20
94.139.191.0/24 maxlen: 24
109.162.254.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:7d:5f:e2:ed:6c:89:81:96:f3:f0:4e:fd:1c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: Jan 2 17:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27e9990cf6ab8efcf796321f4f39616ac6afb01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:84:24:cb:16:8e:d9:3d:e4:ad:fd:13:c1:2b:
3b:c3:68:aa:97:2e:fc:b3:70:55:33:c1:b4:ee:49:
59:6e:89:71:ca:99:1e:dd:20:4f:6d:1c:29:12:c9:
1e:c0:17:c1:c9:72:d2:0c:4a:02:64:14:35:f2:d5:
7d:fe:cf:aa:16:93:4a:c8:48:40:bf:40:18:81:a9:
68:f4:d4:a4:1a:fb:7e:13:8a:7a:ec:ae:f6:e2:dc:
7d:49:9a:65:aa:29:f0:75:4e:73:91:25:43:4d:bc:
70:fe:41:ae:79:c7:c0:fa:f6:3a:67:ae:17:d2:f9:
b1:7f:e5:02:e6:2a:7c:02:57:66:cb:87:fb:0e:e1:
0b:df:6a:9c:d2:a3:ae:de:48:58:a3:c3:71:2e:ea:
0a:6d:03:0d:a0:a2:51:93:86:d7:b7:c7:4b:3f:70:
32:2b:3c:1b:ad:6c:4d:83:85:82:0c:03:c7:66:6b:
4b:21:5e:28:12:4c:f4:ea:c6:b7:b4:4e:83:7d:c9:
58:5e:8a:ee:c5:ab:6b:8a:88:83:4a:d8:17:22:07:
17:c7:8b:41:e6:58:06:df:dc:f7:d6:60:9f:26:d2:
13:3a:66:e2:d5:c1:c0:03:9c:21:e9:cb:7e:88:2b:
f6:aa:74:ce:16:a6:af:b7:3b:e2:ec:18:ae:23:ad:
b3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E9:99:0C:F6:AB:8E:FC:F7:96:32:1F:4F:39:61:6A:C6:AF:B0:1A
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/J-mZDParjvz3ljIfTzlhasavsBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.139.176.0/20
109.162.254.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:31:6a:f1:33:32:69:86:ee:05:60:3f:0e:ea:0d:75:4c:a2:
c1:f2:bc:01:53:c1:82:23:1e:69:35:90:ca:ca:46:95:35:d8:
41:1b:0c:48:37:73:f9:fb:94:0b:cd:63:51:18:0a:ea:c0:38:
d9:1c:eb:63:f6:33:ee:2e:9b:b5:69:e8:94:35:f1:ed:31:8d:
63:66:a4:91:f6:4b:71:3a:97:e4:22:12:ff:16:22:5b:13:10:
31:fb:bd:f1:82:d4:45:c7:43:d0:d3:40:cc:4a:8f:ad:55:1b:
be:12:10:51:b8:7f:19:00:c3:eb:9f:cb:8e:66:21:f2:6c:ff:
49:9e:3e:28:ea:22:ff:03:2d:1d:10:e4:38:19:d9:f9:0c:01:
fb:3c:e1:1a:74:0d:cb:77:05:d9:60:99:ca:19:0e:f8:f3:b5:
05:a1:b0:1c:f0:dd:56:3f:09:96:ed:60:e4:5c:f9:fe:b8:81:
ac:98:f5:01:dc:cf:f5:54:7b:f3:a0:51:db:0a:54:2d:ba:bd:
b1:ba:6b:8a:16:b0:98:e1:0d:3f:d1:85:ae:de:51:61:67:f8:
c3:67:fb:ad:5b:eb:0c:31:a6:f9:57:36:7a:a0:f2:15:31:3b:
61:53:11:29:12:c1:98:7b:43:32:f1:76:d6:70:cd:ab:5f:1d:
cb:91:95:32
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQoI31f4u1siYGW8/BO/RxRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDc0ZmJiYmFlNThkZDA4NzZkOTllODBlYzgyYTExYTQ0
NzdmN2UwHhcNMjUwMTAyMTc1MDAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2U5OTkwY2Y2YWI4ZWZjZjc5NjMyMWY0ZjM5NjE2YWM2YWZiMDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4QkyxaO2T3krf0TwSs7w2iqly78
s3BVM8G07klZbolxypke3SBPbRwpEskewBfByXLSDEoCZBQ18tV9/s+qFpNKyEhA
v0AYgalo9NSkGvt+E4p67K724tx9SZplqinwdU5zkSVDTbxw/kGuecfA+vY6Z64X
0vmxf+UC5ip8Aldmy4f7DuEL32qc0qOu3khYo8NxLuoKbQMNoKJRk4bXt8dLP3Ay
KzwbrWxNg4WCDAPHZmtLIV4oEkz06sa3tE6DfclYXoruxatrioiDStgXIgcXx4tB
5lgG39z31mCfJtITOmbi1cHAA5wh6ct+iCv2qnTOFqavtzvi7BiuI62zhQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCfpmQz2q47895YyH085YWrGr7AaMB8GA1UdIwQY
MBaAFE3XT7u65Y3Qh22Z6A7IKhGkR39+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmIt
OGVhYjdmNGZlNzdlLzEvSi1tWkRQYXJqdnozbGpJZlR6bGhhc2F2c0JvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmItOGVhYjdmNGZlNzdl
LzEvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEXouwAwQB
baL+MA0GCSqGSIb3DQEBCwUAA4IBAQCyMWrxMzJphu4FYD8O6g11TKLB8rwBU8GC
Ix5pNZDKykaVNdhBGwxIN3P5+5QLzWNRGArqwDjZHOtj9jPuLpu1aeiUNfHtMY1j
ZqSR9ktxOpfkIhL/FiJbExAx+73xgtRFx0PQ00DMSo+tVRu+EhBRuH8ZAMPrn8uO
ZiHybP9Jnj4o6iL/Ay0dEOQ4Gdn5DAH7POEadA3LdwXZYJnKGQ7487UFobAc8N1W
PwmW7WDkXPn+uIGsmPUB3M/1VHvzoFHbClQtur2xumuKFrCY4Q0/0YWu3lFhZ/jD
Z/utW+sMMab5VzZ6oPIVMTthUxEpEsGYe0My8XbWcM2rXx3LkZUy
-----END CERTIFICATE-----
Generated at Thu Apr 10 01:27:14 2025 by rpki-client