Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/JcqV5Zbt-7BBvR25dnt58sZOVRw.roa
File: JcqV5Zbt-7BBvR25dnt58sZOVRw.roa (raw, json)
Hash identifier: Jyex6OZ5W2eO7E9m8v2xcJSNJuYcw9eBRYzL8fzsuKg=
Subject key identifier: 25:CA:95:E5:96:ED:FB:B0:41:BD:1D:B9:76:7B:79:F2:C6:4E:55:1C
Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c
Certificate serial: 019422FC1A5A087905512162B15352DE56DF
Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/JcqV5Zbt-7BBvR25dnt58sZOVRw.roa
Signing time: Wed 01 Jan 2025 17:48:54 +0000
ROA not before: Wed 01 Jan 2025 17:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204723
IP address blocks: 213.83.5.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:1a:5a:08:79:05:51:21:62:b1:53:52:de:56:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c
Validity
Not Before: Jan 1 17:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25ca95e596edfbb041bd1db9767b79f2c64e551c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d8:b7:ef:ae:bf:ff:bc:04:e2:dc:92:ba:f2:
29:ef:9d:23:a7:5f:b1:66:3f:78:d8:cc:66:2f:7a:
ee:68:5b:d8:fd:28:1f:e7:6c:45:b7:1c:36:5d:e9:
bd:a8:c4:2b:b2:eb:b3:a3:8b:0c:88:b0:0c:2c:06:
ed:bd:99:7d:2e:02:ef:ce:18:b2:d0:9e:df:2f:dd:
f8:70:3f:36:d6:bc:58:62:50:37:49:f4:d0:c2:11:
8a:72:9f:0a:c3:99:5e:c0:c8:a4:53:e2:ae:bb:76:
dd:3a:0e:74:29:5c:46:9b:1e:b0:99:d8:88:bb:c3:
73:d3:85:a7:39:bf:f8:48:35:3a:6f:33:fb:4b:39:
80:6d:29:c0:d9:0e:19:60:86:8d:d0:e5:df:3f:91:
fd:30:6e:14:99:79:20:27:f7:19:a5:97:62:08:61:
c0:8f:4a:f6:57:ae:74:da:01:6f:27:ce:2f:47:22:
92:1c:35:b3:fb:0e:ee:ce:c2:43:48:3d:4d:dc:d1:
03:03:c0:7d:82:3b:3d:79:bb:4d:f5:1b:7a:0c:7d:
bf:33:0d:c9:64:c9:e9:f5:44:2b:ac:03:32:18:40:
a3:85:2d:5a:50:31:e9:fa:c0:67:51:19:45:7e:06:
68:21:59:e5:d1:0d:c3:3a:34:10:e3:fc:f4:3d:1a:
a4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CA:95:E5:96:ED:FB:B0:41:BD:1D:B9:76:7B:79:F2:C6:4E:55:1C
X509v3 Authority Key Identifier:
keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/JcqV5Zbt-7BBvR25dnt58sZOVRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.83.5.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:bb:26:cf:12:51:1e:7a:e3:ba:b6:4a:81:f6:cd:7f:00:57:
0a:0a:e4:f3:15:3f:a8:a6:d0:33:7c:71:26:a9:e4:f9:61:56:
e4:b5:c5:4b:07:6d:0e:bd:35:ef:63:50:d2:77:6e:15:30:52:
36:0c:60:06:8b:67:69:0b:e2:68:ef:76:e8:71:80:96:d0:d7:
b3:ed:c8:0a:30:fc:a9:55:47:93:e2:de:62:99:0d:14:08:de:
f2:e2:76:97:17:aa:98:68:0c:33:0f:ac:53:65:5c:c9:df:26:
97:fc:d3:a1:2e:a8:43:35:3b:be:16:3e:48:8f:c6:7e:9c:6d:
5b:41:86:7b:ad:f5:6c:71:44:e7:27:fd:20:db:1f:63:d2:17:
8d:91:49:ac:26:33:14:4c:ca:37:8f:dd:80:da:15:25:85:72:
b1:33:ed:fb:d1:0b:44:56:07:ee:0d:c1:c9:54:31:e9:99:9c:
19:0e:cd:dd:a2:e1:f6:3a:f4:53:fc:43:b1:17:41:a1:37:2f:
c2:6b:30:00:76:52:16:86:2b:5c:bd:37:46:dd:e5:db:9d:6d:
c6:7c:0e:fb:4e:05:71:09:ff:fa:0a:bb:1c:37:93:d5:05:80:
7b:e1:7a:a8:b2:89:cc:f0:b4:e6:f9:38:78:4c:19:ab:a5:f6:
69:ef:58:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi/BpaCHkFUSFisVNS3lbfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkOGJhMGE1MmM0MjEyOWFmMWQ0Zjc0M2ZlYjMzYmIxNDRk
NGJiNWMwHhcNMjUwMTAxMTc0ODU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWNhOTVlNTk2ZWRmYmIwNDFiZDFkYjk3NjdiNzlmMmM2NGU1NTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59i3766//7wE4tySuvIp750jp1+x
Zj942MxmL3ruaFvY/Sgf52xFtxw2Xem9qMQrsuuzo4sMiLAMLAbtvZl9LgLvzhiy
0J7fL934cD821rxYYlA3SfTQwhGKcp8Kw5lewMikU+Kuu3bdOg50KVxGmx6wmdiI
u8Nz04WnOb/4SDU6bzP7SzmAbSnA2Q4ZYIaN0OXfP5H9MG4UmXkgJ/cZpZdiCGHA
j0r2V6502gFvJ84vRyKSHDWz+w7uzsJDSD1N3NEDA8B9gjs9ebtN9Rt6DH2/Mw3J
ZMnp9UQrrAMyGECjhS1aUDHp+sBnURlFfgZoIVnl0Q3DOjQQ4/z0PRqkPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCXKleWW7fuwQb0duXZ7efLGTlUcMB8GA1UdIwQY
MBaAFD2LoKUsQhKa8dT3Q/6zO7FE1LtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMt
YTU2ODM4NDRlNzkyLzEvSmNxVjVaYnQtN0JCdlIyNWRudDU4c1pPVlJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMtYTU2ODM4NDRlNzky
LzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1VMFMA0G
CSqGSIb3DQEBCwUAA4IBAQCsuybPElEeeuO6tkqB9s1/AFcKCuTzFT+optAzfHEm
qeT5YVbktcVLB20OvTXvY1DSd24VMFI2DGAGi2dpC+Jo73bocYCW0Nez7cgKMPyp
VUeT4t5imQ0UCN7y4naXF6qYaAwzD6xTZVzJ3yaX/NOhLqhDNTu+Fj5Ij8Z+nG1b
QYZ7rfVscUTnJ/0g2x9j0heNkUmsJjMUTMo3j92A2hUlhXKxM+370QtEVgfuDcHJ
VDHpmZwZDs3douH2OvRT/EOxF0GhNy/CazAAdlIWhitcvTdG3eXbnW3GfA77TgVx
Cf/6CrscN5PVBYB74XqosonM8LTm+Th4TBmrpfZp71hG
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:33 2025 by rpki-client