Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/Jx2nTRr5pEsEFWo_5nDYJEdIJkI.roa
File: Jx2nTRr5pEsEFWo_5nDYJEdIJkI.roa (raw, json)
Hash identifier: 5SCIBFwRcqmCVA4jK7ObW5hmOVN8QwAIditbrQHD6YU=
Subject key identifier: 27:1D:A7:4D:1A:F9:A4:4B:04:15:6A:3F:E6:70:D8:24:47:48:26:42
Certificate issuer: /CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Certificate serial: 019420685B378FB016292C6EE8E55124FAF6
Authority key identifier: 70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/Jx2nTRr5pEsEFWo_5nDYJEdIJkI.roa
Signing time: Wed 01 Jan 2025 05:48:17 +0000
ROA not before: Wed 01 Jan 2025 05:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 185.46.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:5b:37:8f:b0:16:29:2c:6e:e8:e5:51:24:fa:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Validity
Not Before: Jan 1 05:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=271da74d1af9a44b04156a3fe670d82447482642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7f:b5:19:25:e0:7f:e3:02:46:a1:3d:28:d1:
bd:11:e5:f8:77:ed:30:7a:e3:3f:c9:7f:a0:9a:94:
b1:a3:72:38:db:1d:fd:db:b5:05:a5:a2:0c:00:30:
4f:21:02:a8:da:bb:18:04:3e:b6:4e:50:e4:fe:c6:
a7:3b:71:7f:51:61:c2:8a:26:40:48:d1:99:bd:5a:
f4:08:5f:26:c9:43:ae:eb:c7:09:cb:f7:24:ec:37:
ab:2d:62:a3:c8:ac:bd:2f:9d:fd:d6:e8:14:d6:d1:
67:86:6e:52:a7:32:30:e1:51:2c:bd:f9:d6:5f:03:
9e:91:39:d0:99:b4:de:73:fc:97:02:d2:29:a9:e4:
4f:59:11:b3:66:ed:e9:4f:ab:c1:0f:c8:20:b0:a9:
ff:3d:74:9d:af:6f:ae:7d:2b:69:52:1f:06:49:87:
6c:67:6a:ea:3f:a0:ea:bf:17:68:47:84:2e:ff:9d:
63:93:96:ff:7f:33:d1:87:ae:94:e4:b7:c7:73:be:
c8:33:f8:49:81:6b:46:45:ed:88:0d:5e:14:38:0e:
60:d6:ec:4a:71:b1:8e:d7:8a:9e:4a:90:91:5a:e4:
40:18:8d:11:22:08:a6:74:d9:79:6e:17:e5:7e:1a:
5e:fa:65:3b:33:28:fe:30:b4:30:9c:32:1e:43:2a:
90:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1D:A7:4D:1A:F9:A4:4B:04:15:6A:3F:E6:70:D8:24:47:48:26:42
X509v3 Authority Key Identifier:
keyid:70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/Jx2nTRr5pEsEFWo_5nDYJEdIJkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.20.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:b9:a7:86:af:ae:47:04:e1:a3:84:82:ec:c2:e5:cf:b7:ab:
59:8b:93:2e:f0:c2:b1:34:1e:26:d1:bc:ff:59:17:06:19:92:
f4:8b:cb:3f:c1:69:1f:44:4c:9e:de:18:f6:e4:80:88:fe:79:
42:35:7d:5e:97:e9:90:bf:98:87:36:66:8e:36:7c:2c:bc:51:
42:73:95:52:fa:79:a3:87:fb:9d:31:24:90:2c:82:78:89:15:
27:6c:be:50:e1:bd:34:79:98:3c:6b:48:e0:4f:33:7b:0f:b7:
b2:e0:52:02:58:22:64:96:b7:6b:8e:04:df:52:53:92:4d:30:
a3:2d:d6:37:b6:f5:29:95:ab:5b:46:8b:64:ad:53:20:59:4c:
de:96:f3:98:19:c8:64:02:58:bd:e5:a6:4c:4f:09:ea:87:1c:
53:45:bd:61:fe:c6:b2:95:1b:d6:28:86:95:66:6d:11:19:36:
45:1b:f9:29:39:74:90:77:9e:73:44:66:7d:73:e6:97:da:31:
5b:9e:9b:9c:4f:46:d9:43:8b:55:d4:4d:ef:a8:63:3e:08:c6:
41:4e:a5:6b:35:70:55:10:eb:0a:63:b0:99:2d:d2:54:9d:15:
06:37:a5:d1:0d:87:57:76:7f:58:32:bd:f2:f7:15:a1:7e:e5:
b0:ad:78:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaFs3j7AWKSxu6OVRJPr2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwY2JlYjM4OGY1OTAyYzE2MTYwYmJlZDA5NjJjYjYyMmIy
YmI4MzIwHhcNMjUwMTAxMDU0ODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzFkYTc0ZDFhZjlhNDRiMDQxNTZhM2ZlNjcwZDgyNDQ3NDgyNjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0n+1GSXgf+MCRqE9KNG9EeX4d+0w
euM/yX+gmpSxo3I42x3927UFpaIMADBPIQKo2rsYBD62TlDk/sanO3F/UWHCiiZA
SNGZvVr0CF8myUOu68cJy/ck7DerLWKjyKy9L5391ugU1tFnhm5SpzIw4VEsvfnW
XwOekTnQmbTec/yXAtIpqeRPWRGzZu3pT6vBD8ggsKn/PXSdr2+ufStpUh8GSYds
Z2rqP6DqvxdoR4Qu/51jk5b/fzPRh66U5LfHc77IM/hJgWtGRe2IDV4UOA5g1uxK
cbGO14qeSpCRWuRAGI0RIgimdNl5bhflfhpe+mU7Myj+MLQwnDIeQyqQDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCcdp00a+aRLBBVqP+Zw2CRHSCZCMB8GA1UdIwQY
MBaAFHDL6ziPWQLBYWC77Qliy2IrK7gyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY012ck9JOVpBc0ZoWUx2dENXTExZaXNydURJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8xNDljZjYtNjExZC00ZTAzLWE2NjAt
ZGNlMTEyN2FiMjIzLzEvSngyblRScjVwRXNFRldvXzVuRFlKRWRJSmtJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8xNDljZjYtNjExZC00ZTAzLWE2NjAtZGNlMTEyN2FiMjIz
LzEvY012ck9JOVpBc0ZoWUx2dENXTExZaXNydURJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuS4UMA0G
CSqGSIb3DQEBCwUAA4IBAQDKuaeGr65HBOGjhILswuXPt6tZi5Mu8MKxNB4m0bz/
WRcGGZL0i8s/wWkfREye3hj25ICI/nlCNX1el+mQv5iHNmaONnwsvFFCc5VS+nmj
h/udMSSQLIJ4iRUnbL5Q4b00eZg8a0jgTzN7D7ey4FICWCJklrdrjgTfUlOSTTCj
LdY3tvUplatbRotkrVMgWUzelvOYGchkAli95aZMTwnqhxxTRb1h/saylRvWKIaV
Zm0RGTZFG/kpOXSQd55zRGZ9c+aX2jFbnpucT0bZQ4tV1E3vqGM+CMZBTqVrNXBV
EOsKY7CZLdJUnRUGN6XRDYdXdn9YMr3y9xWhfuWwrXhF
-----END CERTIFICATE-----
Generated at Mon Apr 7 04:29:43 2025 by rpki-client