Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/jP3KZDT3BHrGxL6SJVirQd_7e6A.roa
File: jP3KZDT3BHrGxL6SJVirQd_7e6A.roa (raw, json)
Hash identifier: MwLf0BKCHrVfqUJHWkk5bWzY5NV+tJ0F8dRkwnxwlmg=
Subject key identifier: 8C:FD:CA:64:34:F7:04:7A:C6:C4:BE:92:25:58:AB:41:DF:FB:7B:A0
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01941FFA2F30CF4A79F97183F06F50F04422
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/jP3KZDT3BHrGxL6SJVirQd_7e6A.roa
Signing time: Wed 01 Jan 2025 03:47:57 +0000
ROA not before: Wed 01 Jan 2025 03:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31102
IP address blocks: 86.107.20.0/24 maxlen: 24
86.107.52.0/24 maxlen: 24
89.42.9.0/24 maxlen: 24
89.47.255.0/24 maxlen: 24
92.114.39.0/24 maxlen: 24
92.114.52.0/24 maxlen: 24
188.215.70.0/23 maxlen: 23
188.240.202.0/23 maxlen: 23
188.241.134.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:2f:30:cf:4a:79:f9:71:83:f0:6f:50:f0:44:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 03:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8cfdca6434f7047ac6c4be922558ab41dffb7ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:61:44:92:62:a2:c3:c5:06:7f:dd:82:24:77:
57:91:6c:7c:8e:24:02:29:4a:e8:78:10:f7:e4:fd:
c4:d9:4a:c5:d8:7f:42:1f:43:3b:84:dc:35:ba:29:
4d:87:c6:72:00:88:31:88:c4:6f:4c:da:c3:ad:25:
04:7d:a1:88:bb:b1:5b:1e:3d:ef:8a:2e:9c:26:75:
19:02:a2:80:1c:93:b3:b9:d3:73:c0:00:56:f7:90:
a1:1d:73:78:fb:6b:02:76:e0:c5:50:78:1b:42:eb:
ab:91:ab:ce:94:38:c7:6c:f0:cc:5d:b3:cf:ea:b5:
96:77:6f:fd:81:92:67:1e:3d:f8:cf:b6:e5:75:6c:
52:f5:c5:a2:bd:05:e3:3f:d3:18:56:ba:e7:82:3b:
a5:fd:89:34:98:64:ab:6b:24:56:2c:a7:17:de:80:
3e:51:52:83:f2:af:c3:99:9a:19:37:f7:c0:6f:68:
55:62:d6:00:22:16:0a:cc:63:77:e9:a8:c3:0a:04:
9d:36:44:2b:bc:1a:9c:17:36:67:dc:93:34:3e:d0:
00:ae:d7:07:40:f2:83:da:19:a4:0c:5c:ad:73:5e:
84:73:7b:9c:b4:4e:cc:fa:30:ce:e9:6e:9d:17:8a:
a4:ec:ae:2d:37:b1:e0:f6:7c:bf:51:ea:58:b8:ed:
a0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FD:CA:64:34:F7:04:7A:C6:C4:BE:92:25:58:AB:41:DF:FB:7B:A0
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/jP3KZDT3BHrGxL6SJVirQd_7e6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.20.0/24
86.107.52.0/24
89.42.9.0/24
89.47.255.0/24
92.114.39.0/24
92.114.52.0/24
188.215.70.0/23
188.240.202.0/23
188.241.134.0/23
Signature Algorithm: sha256WithRSAEncryption
07:93:23:4f:cd:05:79:64:d3:3e:af:f1:47:2e:4d:17:24:90:
ac:6d:09:bd:09:08:99:14:50:4c:77:47:18:15:ec:4c:32:ed:
c2:97:e0:ef:4c:19:b1:3f:11:67:f6:4a:f8:42:38:dd:ae:a6:
7c:d4:52:9d:ba:ea:21:aa:f8:90:d9:1b:5c:6c:14:06:76:a4:
e9:2f:c8:fa:15:62:e1:42:ab:72:1e:0f:ee:c0:29:ef:fd:b0:
72:f8:2a:2a:d3:cc:05:e9:6d:f8:bb:c9:c3:95:eb:c0:99:07:
a3:9d:ec:d7:05:55:25:a3:5a:da:43:73:79:0f:0c:94:74:1e:
cc:90:90:b5:fb:b1:97:18:e4:fa:3a:ca:2e:bb:6f:3e:a7:c0:
13:a6:c8:ad:d1:43:cb:12:41:43:ea:bc:ef:01:f5:47:c3:62:
71:8a:35:11:7f:d7:2b:70:71:73:05:36:90:82:de:6c:09:94:
66:4a:ab:fd:a9:84:67:f2:81:56:bc:79:9a:34:1c:b6:db:67:
f1:10:c4:4b:4b:ca:3a:b1:c7:b9:df:19:16:6a:b1:9a:50:ec:
91:2b:29:5c:d3:f4:1a:ac:16:07:7c:95:e8:9f:9a:38:a4:f7:
39:b7:f0:9d:71:93:08:46:44:93:6e:14:04:ca:cd:0f:3e:a5:
9a:86:27:50
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZQf+i8wz0p5+XGD8G9Q8EQiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZjEzMmRmMTNlNGJlNTNkODI1MGM4YzQ4NDIwMjY0ZWVm
NmMxNGMwHhcNMjUwMTAxMDM0NzU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2ZkY2E2NDM0ZjcwNDdhYzZjNGJlOTIyNTU4YWI0MWRmZmI3YmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2FEkmKiw8UGf92CJHdXkWx8jiQC
KUroeBD35P3E2UrF2H9CH0M7hNw1uilNh8ZyAIgxiMRvTNrDrSUEfaGIu7FbHj3v
ii6cJnUZAqKAHJOzudNzwABW95ChHXN4+2sCduDFUHgbQuurkavOlDjHbPDMXbPP
6rWWd2/9gZJnHj34z7bldWxS9cWivQXjP9MYVrrngjul/Yk0mGSrayRWLKcX3oA+
UVKD8q/DmZoZN/fAb2hVYtYAIhYKzGN36ajDCgSdNkQrvBqcFzZn3JM0PtAArtcH
QPKD2hmkDFytc16Ec3uctE7M+jDO6W6dF4qk7K4tN7Hg9ny/UepYuO2gzwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFIz9ymQ09wR6xsS+kiVYq0Hf+3ugMB8GA1UdIwQY
MBaAFH3xMt8T5L5T2CUMjEhCAmTu9sFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYt
OTc3ODY3NGVkYzk3LzEvalAzS1pEVDNCSHJHeEw2U0pWaXJRZF83ZTZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYtOTc3ODY3NGVkYzk3
LzEvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAVmsUAwQA
Vms0AwQAWSoJAwQAWS//AwQAXHInAwQAXHI0AwQBvNdGAwQBvPDKAwQBvPGGMA0G
CSqGSIb3DQEBCwUAA4IBAQAHkyNPzQV5ZNM+r/FHLk0XJJCsbQm9CQiZFFBMd0cY
FexMMu3Cl+DvTBmxPxFn9kr4QjjdrqZ81FKduuohqviQ2RtcbBQGdqTpL8j6FWLh
QqtyHg/uwCnv/bBy+Coq08wF6W34u8nDlevAmQejnezXBVUlo1raQ3N5DwyUdB7M
kJC1+7GXGOT6Osouu28+p8ATpsit0UPLEkFD6rzvAfVHw2JxijURf9crcHFzBTaQ
gt5sCZRmSqv9qYRn8oFWvHmaNBy222fxEMRLS8o6sce53xkWarGaUOyRKylc0/Qa
rBYHfJXon5o4pPc5t/CdcZMIRkSTbhQEys0PPqWahidQ
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:12:25 2025 by rpki-client