Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/jNEKKYb59gnnTh52kJIydwyMpPM.roa
File: jNEKKYb59gnnTh52kJIydwyMpPM.roa (raw, json)
Hash identifier: TBTjwTIHpF7pP4v3s+Iv01Y69AmB2rHvrAT3GvZEpeo=
Subject key identifier: 8C:D1:0A:29:86:F9:F6:09:E7:4E:1E:76:90:92:32:77:0C:8C:A4:F3
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D72871DBF73481DBE986852113C282
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/jNEKKYb59gnnTh52kJIydwyMpPM.roa
Signing time: Wed 01 Jan 2025 21:48:10 +0000
ROA not before: Wed 01 Jan 2025 21:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209728
IP address blocks: 193.34.235.0/24 maxlen: 24
193.168.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:28:71:db:f7:34:81:db:e9:86:85:21:13:c2:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8cd10a2986f9f609e74e1e76909232770c8ca4f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:61:8d:18:96:93:5b:f0:e5:0c:dc:b4:5f:dd:
f4:1b:ad:b5:75:65:33:14:62:27:9b:70:2d:d2:46:
20:07:db:d1:7a:d3:b2:53:e5:c7:50:9c:71:c7:6f:
be:5a:35:28:3a:06:69:48:54:e0:92:02:ea:62:79:
d8:b2:9f:c6:be:5d:08:61:d7:94:48:d4:30:6c:ef:
df:e6:56:56:b4:2c:94:3f:ce:01:b4:cb:0f:e7:43:
c4:51:94:b1:94:81:c6:9f:9b:f8:08:a5:5b:26:c2:
f6:3c:68:18:ae:6c:8d:a4:9f:96:e5:54:c7:9c:7b:
2e:74:44:9f:ca:cd:61:34:67:92:2d:fe:9d:66:8a:
c9:0b:f8:cc:4b:72:d0:cd:f9:4f:33:34:1e:31:8b:
70:1c:a3:97:dd:c0:a6:19:03:a9:0f:7e:82:14:b6:
ba:f4:1c:1d:a4:f0:f9:79:b1:a0:20:95:bd:7c:d1:
e8:85:31:2a:ce:b6:45:cf:8c:58:74:b1:9b:87:01:
df:65:ca:45:39:ac:62:14:81:4f:11:64:61:85:30:
cd:8e:d4:aa:36:47:52:d1:5f:3e:52:1a:26:44:10:
ec:36:06:b9:33:7f:99:70:f9:4c:28:6f:7d:00:f2:
3d:87:1c:3b:aa:8c:48:25:0d:7e:36:b1:5e:44:b4:
39:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D1:0A:29:86:F9:F6:09:E7:4E:1E:76:90:92:32:77:0C:8C:A4:F3
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/jNEKKYb59gnnTh52kJIydwyMpPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.235.0/24
193.168.225.0/24
Signature Algorithm: sha256WithRSAEncryption
95:60:03:67:68:ca:ec:65:ca:da:b2:df:57:c9:69:96:90:61:
1c:e1:83:4b:fa:91:5a:d7:62:12:23:c9:f3:74:92:b7:0a:4a:
47:df:ec:0a:9a:52:2d:5c:7f:ca:b3:a3:7a:04:de:90:1b:10:
32:c6:e1:2e:5e:8c:c0:e2:f9:df:e5:8a:0d:43:18:14:ac:90:
0b:27:52:07:a3:db:2e:30:65:f1:57:d9:51:98:4d:ab:e8:ae:
d6:5d:c1:e5:7f:d4:35:a9:e9:2c:5b:ce:42:84:77:8f:1a:8e:
95:5a:e1:ac:c6:93:a7:1f:6c:28:ed:4e:bc:49:19:5d:ad:2b:
a5:72:ef:eb:31:05:08:77:33:b6:4a:7b:c2:9d:24:e9:bf:18:
ff:4f:24:ae:be:0b:da:54:09:95:b7:d4:27:3b:66:87:87:e5:
4a:32:5d:21:6f:db:07:d7:c3:ad:8e:b8:b6:6d:e0:53:71:7c:
01:e2:ca:3c:a9:f6:16:da:0e:c0:d4:18:88:39:76:90:ea:8b:
64:2c:5e:bb:67:42:8f:35:6d:6f:8e:37:08:6b:86:cf:d8:4c:
4a:ec:a8:ee:fd:c3:03:1a:b7:63:80:e8:12:ff:c9:d3:3e:6e:
97:32:f8:f9:d7:5c:6a:4c:12:27:fa:b3:3d:2b:12:ce:b8:50:
5c:67:a3:4b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQj1yhx2/c0gdvphoUhE8KCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjUwMTAxMjE0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2QxMGEyOTg2ZjlmNjA5ZTc0ZTFlNzY5MDkyMzI3NzBjOGNhNGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmGNGJaTW/DlDNy0X930G621dWUz
FGInm3At0kYgB9vRetOyU+XHUJxxx2++WjUoOgZpSFTgkgLqYnnYsp/Gvl0IYdeU
SNQwbO/f5lZWtCyUP84BtMsP50PEUZSxlIHGn5v4CKVbJsL2PGgYrmyNpJ+W5VTH
nHsudESfys1hNGeSLf6dZorJC/jMS3LQzflPMzQeMYtwHKOX3cCmGQOpD36CFLa6
9BwdpPD5ebGgIJW9fNHohTEqzrZFz4xYdLGbhwHfZcpFOaxiFIFPEWRhhTDNjtSq
NkdS0V8+UhomRBDsNga5M3+ZcPlMKG99API9hxw7qoxIJQ1+NrFeRLQ5owIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIzRCimG+fYJ504edpCSMncMjKTzMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvak5FS0tZYjU5Z25uVGg1MmtKSXlkd3lNcFBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwSLrAwQA
wajhMA0GCSqGSIb3DQEBCwUAA4IBAQCVYANnaMrsZcrast9XyWmWkGEc4YNL+pFa
12ISI8nzdJK3CkpH3+wKmlItXH/Ks6N6BN6QGxAyxuEuXozA4vnf5YoNQxgUrJAL
J1IHo9suMGXxV9lRmE2r6K7WXcHlf9Q1qeksW85ChHePGo6VWuGsxpOnH2wo7U68
SRldrSulcu/rMQUIdzO2SnvCnSTpvxj/TySuvgvaVAmVt9QnO2aHh+VKMl0hb9sH
18Otjri2beBTcXwB4so8qfYW2g7A1BiIOXaQ6otkLF67Z0KPNW1vjjcIa4bP2ExK
7Kju/cMDGrdjgOgS/8nTPm6XMvj511xqTBIn+rM9KxLOuFBcZ6NL
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:55:22 2025 by rpki-client