Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/J0w5SdH9yfaXfZI27FnFWkxgcvQ.roa
File: J0w5SdH9yfaXfZI27FnFWkxgcvQ.roa (raw, json)
Hash identifier: 8pwS1Eqt/nPpkIuSrw8GLk2/EWvlTk77ReSYaV8Jvi0=
Subject key identifier: 27:4C:39:49:D1:FD:C9:F6:97:7D:92:36:EC:59:C5:5A:4C:60:72:F4
Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f
Certificate serial: 0194221F9BE2A9425300D0238AC19F6D219A
Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/J0w5SdH9yfaXfZI27FnFWkxgcvQ.roa
Signing time: Wed 01 Jan 2025 13:48:04 +0000
ROA not before: Wed 01 Jan 2025 13:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47692
IP address blocks: 91.151.16.0/22 maxlen: 22
185.51.8.0/22 maxlen: 24
185.211.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:9b:e2:a9:42:53:00:d0:23:8a:c1:9f:6d:21:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f
Validity
Not Before: Jan 1 13:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=274c3949d1fdc9f6977d9236ec59c55a4c6072f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:93:c3:02:c3:2f:ee:6a:d3:53:ca:91:0e:e4:
0a:44:74:08:ca:ba:82:21:7a:ac:3e:60:e3:f4:5a:
78:f5:2a:b8:3d:e9:6a:6b:b6:8e:99:bc:d3:31:00:
34:eb:39:0f:58:2a:11:83:82:fc:7e:9a:7d:65:8e:
3b:2b:c0:ca:5e:0d:35:2c:16:b0:af:99:26:fa:d0:
b4:a7:ac:bc:9d:c2:1b:fd:98:af:a8:3f:1c:dd:68:
9f:f4:83:b0:0e:b0:a0:76:ed:63:5a:cd:4e:ea:1c:
4c:2b:0e:03:7b:92:df:60:1b:30:d3:b4:3f:54:76:
57:cf:44:a0:8b:7f:5c:dc:08:22:10:9e:99:8d:8c:
41:77:2b:03:95:c4:f1:04:ad:25:95:d9:f9:bf:ae:
72:03:c5:a9:ef:92:a2:d4:c3:4e:fe:32:b7:ea:3a:
f2:3b:ac:70:47:9a:35:b3:fb:1b:98:77:e9:e8:34:
10:98:ef:e0:1e:7d:c7:8c:71:9e:68:5a:6d:b4:8f:
d8:6d:f7:23:f4:65:ca:a3:db:97:11:6c:07:29:e3:
e6:2f:24:a1:67:ba:06:b3:dd:cb:ba:ab:30:81:f7:
be:0a:17:d7:e2:28:b1:99:94:c0:fc:5a:63:3e:47:
64:39:bd:d6:43:ad:82:98:3a:5f:82:e6:49:91:9f:
3d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4C:39:49:D1:FD:C9:F6:97:7D:92:36:EC:59:C5:5A:4C:60:72:F4
X509v3 Authority Key Identifier:
keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/J0w5SdH9yfaXfZI27FnFWkxgcvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.151.16.0/22
185.51.8.0/22
185.211.60.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:d4:a5:f1:56:7d:26:85:8f:be:e7:31:3b:09:bd:8c:c6:64:
71:82:7c:5c:6a:42:b1:d0:de:fd:de:29:f0:b0:5b:d7:bd:0a:
11:4d:84:f8:32:ce:d2:b1:e9:36:56:87:e9:a0:5a:8d:fd:49:
0b:bb:ad:20:01:38:78:fe:99:b1:0a:1b:08:fa:b7:23:3b:5f:
3b:53:a9:af:68:92:a4:a7:2b:d3:52:08:c7:80:08:24:db:65:
3c:b2:5c:5c:95:34:fa:39:6c:f4:84:a6:59:8f:39:a4:21:45:
51:82:7c:fd:87:9c:2c:9a:92:7b:c9:87:5e:2c:55:a1:3a:61:
f2:45:26:09:db:22:ef:53:ac:4c:f1:6a:23:08:ae:72:df:75:
6a:6e:70:dc:2d:9d:f1:bc:b3:22:97:a6:37:a2:9c:42:2d:38:
bd:19:9e:16:ec:28:72:52:68:60:72:cf:d4:69:19:f8:3a:6c:
ed:81:f3:50:21:26:71:62:fb:68:c1:bc:e1:db:2f:df:84:15:
be:56:d7:24:72:5b:98:25:bd:89:71:94:da:d2:ce:5e:92:df:
7b:05:13:5b:54:ff:07:d4:94:18:2d:fa:da:a4:18:51:57:be:
ee:5a:03:a7:76:d6:b4:b6:e2:ca:1e:c0:f8:ec:d9:05:47:f3:
df:a0:9a:b5
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQiH5viqUJTANAjisGfbSGaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1
ZmIwMmYwHhcNMjUwMTAxMTM0ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzRjMzk0OWQxZmRjOWY2OTc3ZDkyMzZlYzU5YzU1YTRjNjA3MmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppPDAsMv7mrTU8qRDuQKRHQIyrqC
IXqsPmDj9Fp49Sq4Pelqa7aOmbzTMQA06zkPWCoRg4L8fpp9ZY47K8DKXg01LBaw
r5km+tC0p6y8ncIb/ZivqD8c3Wif9IOwDrCgdu1jWs1O6hxMKw4De5LfYBsw07Q/
VHZXz0Sgi39c3AgiEJ6ZjYxBdysDlcTxBK0lldn5v65yA8Wp75Ki1MNO/jK36jry
O6xwR5o1s/sbmHfp6DQQmO/gHn3HjHGeaFpttI/Ybfcj9GXKo9uXEWwHKePmLySh
Z7oGs93Luqswgfe+ChfX4iixmZTA/FpjPkdkOb3WQ62CmDpfguZJkZ89HwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCdMOUnR/cn2l32SNuxZxVpMYHL0MB8GA1UdIwQY
MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt
NzQxYzFkOGRlYTJiLzEvSjB3NVNkSDl5ZmFYZlpJMjdGbkZXa3hnY3ZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi
LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCW5cQAwQC
uTMIAwQCudM8MA0GCSqGSIb3DQEBCwUAA4IBAQBN1KXxVn0mhY++5zE7Cb2MxmRx
gnxcakKx0N793inwsFvXvQoRTYT4Ms7Ssek2VofpoFqN/UkLu60gATh4/pmxChsI
+rcjO187U6mvaJKkpyvTUgjHgAgk22U8slxclTT6OWz0hKZZjzmkIUVRgnz9h5ws
mpJ7yYdeLFWhOmHyRSYJ2yLvU6xM8WojCK5y33VqbnDcLZ3xvLMil6Y3opxCLTi9
GZ4W7ChyUmhgcs/UaRn4OmztgfNQISZxYvtowbzh2y/fhBW+VtckcluYJb2JcZTa
0s5ekt97BRNbVP8H1JQYLfrapBhRV77uWgOndta0tuLKHsD47NkFR/PfoJq1
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:38 2025 by rpki-client