Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/JkUk0RwhqW1iBr4hL3arEunrp2M.roa
File: JkUk0RwhqW1iBr4hL3arEunrp2M.roa (raw, json)
Hash identifier: /IEYmQsTDHtYubFLhftis+nToWQhtnU5kLG/4NerSmc=
Subject key identifier: 26:45:24:D1:1C:21:A9:6D:62:06:BE:21:2F:76:AB:12:E9:EB:A7:63
Certificate issuer: /CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Certificate serial: 019473D59E3C20CAC7C5F1FC7138646F101B
Authority key identifier: 19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/JkUk0RwhqW1iBr4hL3arEunrp2M.roa
Signing time: Fri 17 Jan 2025 10:36:07 +0000
ROA not before: Fri 17 Jan 2025 10:36:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20546
IP address blocks: 5.182.236.0/22 maxlen: 24
45.10.60.0/22 maxlen: 24
45.14.188.0/22 maxlen: 24
45.93.108.0/22 maxlen: 24
45.128.180.0/22 maxlen: 24
45.131.36.0/22 maxlen: 24
45.136.168.0/22 maxlen: 24
45.143.76.0/22 maxlen: 24
46.243.80.0/21 maxlen: 24
85.132.192.0/19 maxlen: 24
92.119.8.0/22 maxlen: 24
94.16.64.0/19 maxlen: 24
94.46.64.0/19 maxlen: 24
95.131.96.0/21 maxlen: 24
134.101.16.0/20 maxlen: 24
149.249.128.0/19 maxlen: 24
185.9.28.0/22 maxlen: 24
185.117.68.0/22 maxlen: 24
185.189.140.0/22 maxlen: 24
185.194.64.0/22 maxlen: 24
185.238.252.0/22 maxlen: 24
195.2.160.0/19 maxlen: 24
195.80.52.0/22 maxlen: 24
212.232.80.0/20 maxlen: 24
213.157.0.0/19 maxlen: 24
213.188.96.0/19 maxlen: 24
2a02:b98::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:d5:9e:3c:20:ca:c7:c5:f1:fc:71:38:64:6f:10:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Validity
Not Before: Jan 17 10:36:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=264524d11c21a96d6206be212f76ab12e9eba763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:86:41:2f:2e:48:1b:33:9e:50:59:2c:f9:26:
e3:82:60:2a:cf:cf:02:8b:ce:c9:f8:fb:bc:e4:e1:
2c:5b:01:b4:c3:95:fb:70:38:6b:b0:8b:1d:81:19:
ce:7d:93:66:d9:3b:17:6e:e0:de:6e:d1:9e:02:37:
5d:23:fc:fb:49:dc:2d:00:7c:25:a1:af:6d:c7:22:
80:50:95:53:d8:83:da:ff:a4:a4:25:be:0a:b6:15:
3d:64:32:05:a3:ee:b7:1c:5a:03:33:18:c4:dc:f8:
39:65:51:e1:39:86:6d:c3:da:87:9e:65:a2:ae:3a:
63:d4:83:5d:a5:19:9e:73:38:6b:b9:6c:4c:84:66:
a9:29:c5:36:3d:15:9e:2c:91:4e:4c:50:2a:44:e9:
56:19:dc:83:6c:4a:c7:38:7e:69:1b:5b:9c:48:f9:
81:76:60:f2:48:f0:60:d5:84:1a:6a:2d:9d:43:0e:
bb:31:c6:23:81:75:b4:c1:3b:ae:b4:a3:58:c6:f9:
3e:f7:6a:27:31:23:3a:49:aa:b9:a3:ca:bc:08:11:
27:b7:66:b8:a9:8e:a8:09:df:7c:4b:0c:db:e7:51:
f6:18:31:c0:2d:2a:98:d8:a2:c5:18:14:81:89:85:
06:da:dc:2f:aa:6c:69:3b:dd:ef:99:66:08:9b:6a:
b5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:45:24:D1:1C:21:A9:6D:62:06:BE:21:2F:76:AB:12:E9:EB:A7:63
X509v3 Authority Key Identifier:
keyid:19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/JkUk0RwhqW1iBr4hL3arEunrp2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.236.0/22
45.10.60.0/22
45.14.188.0/22
45.93.108.0/22
45.128.180.0/22
45.131.36.0/22
45.136.168.0/22
45.143.76.0/22
46.243.80.0/21
85.132.192.0/19
92.119.8.0/22
94.16.64.0/19
94.46.64.0/19
95.131.96.0/21
134.101.16.0/20
149.249.128.0/19
185.9.28.0/22
185.117.68.0/22
185.189.140.0/22
185.194.64.0/22
185.238.252.0/22
195.2.160.0/19
195.80.52.0/22
212.232.80.0/20
213.157.0.0/19
213.188.96.0/19
IPv6:
2a02:b98::/32
Signature Algorithm: sha256WithRSAEncryption
a3:bc:5c:10:e1:20:8e:74:64:f2:eb:67:33:36:97:61:a9:8f:
80:bf:fe:f6:de:a1:0e:75:ed:0b:91:fe:c6:14:b5:96:76:65:
4b:5f:41:bc:e4:75:89:3e:51:d3:95:50:bd:5e:fa:25:dd:5e:
06:f3:e3:39:1e:2b:70:88:f4:fd:43:72:33:fa:6c:be:9a:a7:
23:6e:47:19:75:50:0d:0f:48:6c:d1:9a:49:b9:26:7b:8d:66:
d2:70:51:f4:bc:42:ae:7f:26:56:01:90:1e:f1:5b:b2:36:4e:
ab:28:53:96:ef:5b:bc:0d:7f:ba:16:b7:c8:42:f2:4e:74:b2:
ac:8d:a1:30:a0:93:80:d1:fa:93:8b:f2:c6:6b:f6:1b:9f:58:
93:d5:eb:9f:79:1b:44:25:32:77:9f:82:9c:cd:93:e5:22:6a:
da:41:ea:c6:27:e6:82:9f:34:cb:12:a8:46:7f:b4:d6:96:6d:
c9:c0:87:17:7a:68:76:73:c9:85:6a:8f:9e:d9:d4:f4:e9:06:
04:34:bf:b5:7c:bd:0b:26:25:5d:0a:46:43:0e:04:b6:4c:ca:
5e:b3:4c:70:d9:e9:fe:4e:da:96:a0:0c:c0:d9:89:f0:85:33:
c2:be:ea:68:05:04:2d:06:35:fe:79:c4:d3:22:d2:eb:c0:d7:
57:42:72:d2
-----BEGIN CERTIFICATE-----
MIIFpzCCBI+gAwIBAgISAZRz1Z48IMrHxfH8cThkbxAbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YjgwMGMzOTEyNmRiM2NhNGUwZDU2OTEwZjBhZDM3OTI1
N2U0YTAwHhcNMjUwMTE3MTAzNjA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjQ1MjRkMTFjMjFhOTZkNjIwNmJlMjEyZjc2YWIxMmU5ZWJhNzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4ZBLy5IGzOeUFks+SbjgmAqz88C
i87J+Pu85OEsWwG0w5X7cDhrsIsdgRnOfZNm2TsXbuDebtGeAjddI/z7SdwtAHwl
oa9txyKAUJVT2IPa/6SkJb4KthU9ZDIFo+63HFoDMxjE3Pg5ZVHhOYZtw9qHnmWi
rjpj1INdpRmeczhruWxMhGapKcU2PRWeLJFOTFAqROlWGdyDbErHOH5pG1ucSPmB
dmDySPBg1YQaai2dQw67McYjgXW0wTuutKNYxvk+92onMSM6Saq5o8q8CBEnt2a4
qY6oCd98Swzb51H2GDHALSqY2KLFGBSBiYUG2twvqmxpO93vmWYIm2q1pQIDAQAB
o4ICszCCAq8wHQYDVR0OBBYEFCZFJNEcIaltYga+IS92qxLp66djMB8GA1UdIwQY
MBaAFBm4AMORJts8pODVaRDwrTeSV+SgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2JnQXc1RW0yenlrNE5WcEVQQ3RONUpYNUtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS84NGI0ODktOGI2Zi00NTlkLTlhMzEt
ZjE4YWQ5ZjRjYzM0LzEvSmtVazBSd2hxVzFpQnI0aEwzYXJFdW5ycDJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS84NGI0ODktOGI2Zi00NTlkLTlhMzEtZjE4YWQ5ZjRjYzM0
LzEvR2JnQXc1RW0yenlrNE5WcEVQQ3RONUpYNUtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHIBggrBgEFBQcBBwEB/wSBuDCBtTCBowQCAAEwgZwDBAIF
tuwDBAItCjwDBAItDrwDBAItXWwDBAItgLQDBAItgyQDBAItiKgDBAItj0wDBAMu
81ADBAVVhMADBAJcdwgDBAVeEEADBAVeLkADBANfg2ADBASGZRADBAWV+YADBAK5
CRwDBAK5dUQDBAK5vYwDBAK5wkADBAK57vwDBAXDAqADBALDUDQDBATU6FADBAXV
nQADBAXVvGAwDQQCAAIwBwMFACoCC5gwDQYJKoZIhvcNAQELBQADggEBAKO8XBDh
II50ZPLrZzM2l2Gpj4C//vbeoQ517QuR/sYUtZZ2ZUtfQbzkdYk+UdOVUL1e+iXd
Xgbz4zkeK3CI9P1DcjP6bL6apyNuRxl1UA0PSGzRmkm5JnuNZtJwUfS8Qq5/JlYB
kB7xW7I2TqsoU5bvW7wNf7oWt8hC8k50sqyNoTCgk4DR+pOL8sZr9hufWJPV6595
G0QlMnefgpzNk+UiatpB6sYn5oKfNMsSqEZ/tNaWbcnAhxd6aHZzyYVqj57Z1PTp
BgQ0v7V8vQsmJV0KRkMOBLZMyl6zTHDZ6f5O2pagDMDZifCFM8K+6mgFBC0GNf55
xNMi0uvA11dCctI=
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:33 2025 by rpki-client