Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/JILzl612YbahGyGIhRmTzqH6qN0.roa
File: JILzl612YbahGyGIhRmTzqH6qN0.roa (raw, json)
Hash identifier: KYoAnBG9y6ABJD4N2SyEiYvwxlPEdpp7VacwTGrZd0M=
Subject key identifier: 24:82:F3:97:AD:76:61:B6:A1:1B:21:88:85:19:93:CE:A1:FA:A8:DD
Certificate issuer: /CN=0f554afe672744742b4e35027b402e8613c20377
Certificate serial: 019425FC66CF06AF87BC1D912CAEFFF9E70A
Authority key identifier: 0F:55:4A:FE:67:27:44:74:2B:4E:35:02:7B:40:2E:86:13:C2:03:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/JILzl612YbahGyGIhRmTzqH6qN0.roa
Signing time: Thu 02 Jan 2025 07:48:05 +0000
ROA not before: Thu 02 Jan 2025 07:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60686
IP address blocks: 185.19.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:66:cf:06:af:87:bc:1d:91:2c:ae:ff:f9:e7:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f554afe672744742b4e35027b402e8613c20377
Validity
Not Before: Jan 2 07:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2482f397ad7661b6a11b2188851993cea1faa8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:7c:cc:50:24:4b:0f:c0:bd:63:c6:b9:ff:ac:
18:91:a6:6d:2b:4c:77:db:4c:7c:4b:2c:3f:b0:27:
26:32:fb:3a:47:19:91:3b:b9:1b:3b:9a:69:1c:5b:
41:30:b0:7c:99:54:af:96:7d:0a:84:36:81:cd:fe:
34:1a:70:d5:11:cf:53:eb:b5:b1:15:60:b1:4c:bd:
5c:78:b6:5e:12:c6:4c:c7:ad:4c:00:1e:c9:4d:1b:
61:38:9d:c8:20:d8:e8:4e:76:63:e6:b9:ea:8c:0d:
7b:82:71:7d:a0:97:c1:0a:a5:84:b3:2e:be:81:8b:
91:d1:dd:98:3a:a5:c3:b2:4e:cd:de:f1:a6:e3:4a:
ad:9b:9c:b8:95:a0:ce:d8:72:3b:e6:63:3d:fe:55:
1c:16:44:c9:c9:92:fa:fc:db:fc:31:f5:bc:00:07:
79:49:44:af:79:9d:19:f7:96:a9:e0:02:2f:dc:0c:
1e:62:7f:54:ac:e4:d8:8f:10:aa:a5:55:eb:e6:47:
e7:41:46:20:50:c3:de:19:3b:79:a6:ca:86:e2:b2:
61:06:c4:ef:82:cb:6e:1d:af:a5:38:33:ca:36:0f:
a7:35:9a:dd:58:c4:71:8d:8b:6a:22:95:b7:21:da:
f9:b1:e2:b1:e4:95:77:0f:d7:6b:b2:db:c0:9b:61:
f6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:82:F3:97:AD:76:61:B6:A1:1B:21:88:85:19:93:CE:A1:FA:A8:DD
X509v3 Authority Key Identifier:
keyid:0F:55:4A:FE:67:27:44:74:2B:4E:35:02:7B:40:2E:86:13:C2:03:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/JILzl612YbahGyGIhRmTzqH6qN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.160.0/22
Signature Algorithm: sha256WithRSAEncryption
06:62:fd:39:0a:44:16:41:12:e3:5e:12:53:14:6a:30:f1:96:
64:51:4f:94:41:96:69:5c:1a:44:4e:0f:41:ef:be:df:bc:f5:
5f:10:47:8a:ba:82:b9:55:bd:c8:30:be:f2:3e:d4:fa:9f:6a:
d5:21:f6:f9:0b:46:df:60:09:30:55:9a:fa:d5:e7:d1:93:2a:
c4:d7:c7:81:06:e8:e0:49:26:2f:35:6c:c6:9e:23:e7:ac:76:
15:07:b6:c1:e7:70:e4:32:83:7b:38:fc:8f:64:65:26:04:ad:
54:6b:15:28:73:e6:5a:7c:af:12:ee:23:37:5c:73:a3:70:6c:
0d:4d:8b:9f:0c:86:20:72:16:52:89:2d:d9:f6:42:09:52:43:
28:3d:fb:ab:f7:00:63:d0:d8:67:31:b9:ec:fc:c3:ab:38:9a:
a4:30:14:67:99:1e:2d:24:4e:e7:a1:91:0e:0f:64:e8:b8:4e:
b3:05:4e:47:4f:4b:98:dd:ee:1b:e3:ba:d1:e0:58:65:67:f9:
8a:2b:c7:f7:bc:45:92:2f:33:b6:ed:b5:b2:bd:4f:b4:17:41:
9b:32:3b:a0:0d:96:89:a6:1a:19:da:de:b5:6e:5e:df:4e:e7:
20:11:a6:c2:77:3d:8e:77:6a:6a:2c:51:e4:e7:d6:d0:33:bb:
be:a5:53:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/GbPBq+HvB2RLK7/+ecKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNTU0YWZlNjcyNzQ0NzQyYjRlMzUwMjdiNDAyZTg2MTNj
MjAzNzcwHhcNMjUwMTAyMDc0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDgyZjM5N2FkNzY2MWI2YTExYjIxODg4NTE5OTNjZWExZmFhOGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9HzMUCRLD8C9Y8a5/6wYkaZtK0x3
20x8Syw/sCcmMvs6RxmRO7kbO5ppHFtBMLB8mVSvln0KhDaBzf40GnDVEc9T67Wx
FWCxTL1ceLZeEsZMx61MAB7JTRthOJ3IINjoTnZj5rnqjA17gnF9oJfBCqWEsy6+
gYuR0d2YOqXDsk7N3vGm40qtm5y4laDO2HI75mM9/lUcFkTJyZL6/Nv8MfW8AAd5
SUSveZ0Z95ap4AIv3AweYn9UrOTYjxCqpVXr5kfnQUYgUMPeGTt5psqG4rJhBsTv
gstuHa+lODPKNg+nNZrdWMRxjYtqIpW3Idr5seKx5JV3D9drstvAm2H2+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCSC85etdmG2oRshiIUZk86h+qjdMB8GA1UdIwQY
MBaAFA9VSv5nJ0R0K041AntALoYTwgN3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDFWS19tY25SSFFyVGpVQ2UwQXVoaFBDQTNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yYzE5MzctOWQ5Yi00MzE1LWEzYzUt
YzBhZTgwYjc0MmIwLzEvSklMemw2MTJZYmFoR3lHSWhSbVR6cUg2cU4wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yYzE5MzctOWQ5Yi00MzE1LWEzYzUtYzBhZTgwYjc0MmIw
LzEvRDFWS19tY25SSFFyVGpVQ2UwQXVoaFBDQTNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuROgMA0G
CSqGSIb3DQEBCwUAA4IBAQAGYv05CkQWQRLjXhJTFGow8ZZkUU+UQZZpXBpETg9B
777fvPVfEEeKuoK5Vb3IML7yPtT6n2rVIfb5C0bfYAkwVZr61efRkyrE18eBBujg
SSYvNWzGniPnrHYVB7bB53DkMoN7OPyPZGUmBK1UaxUoc+ZafK8S7iM3XHOjcGwN
TYufDIYgchZSiS3Z9kIJUkMoPfur9wBj0NhnMbns/MOrOJqkMBRnmR4tJE7noZEO
D2TouE6zBU5HT0uY3e4b47rR4FhlZ/mKK8f3vEWSLzO27bWyvU+0F0GbMjugDZaJ
phoZ2t61bl7fTucgEabCdz2Od2pqLFHk59bQM7u+pVM8
-----END CERTIFICATE-----
Generated at Tue Apr 8 05:03:55 2025 by rpki-client