Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/JpAui5634AEUJhh37Wh_vZRvbVI.roa
File: JpAui5634AEUJhh37Wh_vZRvbVI.roa (raw, json)
Hash identifier: kYgmciBc6zEHfesfWH2bJDQb7SHUX9fP72N5IHTx3+Y=
Subject key identifier: 26:90:2E:8B:9E:B7:E0:01:14:26:18:77:ED:68:7F:BD:94:6F:6D:52
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01942827EFF9055F9CD75D09C075225C831E
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/JpAui5634AEUJhh37Wh_vZRvbVI.roa
Signing time: Thu 02 Jan 2025 17:54:53 +0000
ROA not before: Thu 02 Jan 2025 17:54:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64267
IP address blocks: 5.1.40.0/24 maxlen: 24
185.182.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:ef:f9:05:5f:9c:d7:5d:09:c0:75:22:5c:83:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jan 2 17:54:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26902e8b9eb7e00114261877ed687fbd946f6d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d7:80:89:cb:44:c0:e4:0e:3a:70:33:f9:9d:
16:ea:56:68:a2:f5:92:d6:b0:92:38:b2:52:54:8d:
1a:ee:4e:a6:e5:fd:e6:ad:c7:58:85:62:92:df:f9:
f6:f1:dc:f4:34:fa:53:6f:af:01:64:04:f9:5e:59:
1d:4c:5e:c9:38:78:b8:92:47:90:a0:99:b0:f4:0f:
91:cd:4c:85:26:0a:84:c2:ed:5e:9c:6a:3f:a5:14:
2d:d2:55:4a:4e:3c:38:59:ae:93:5b:b6:f2:02:a5:
80:10:32:d1:ed:49:b6:24:22:5e:ba:6b:82:66:64:
58:f3:74:58:13:be:e8:19:41:29:ed:83:f0:f1:34:
2e:5a:f6:8f:34:ae:69:75:b3:5d:ee:1a:4f:e0:f1:
d7:80:ef:77:3a:a3:9b:d7:b1:c0:0d:99:0d:79:fb:
c9:a8:7d:d7:68:5d:4b:75:d7:bb:99:28:b2:a3:d3:
68:73:2e:5f:0b:47:b5:4d:64:15:af:13:65:36:4c:
df:d4:6a:a7:f9:4d:6c:6a:ff:14:73:dc:37:93:3d:
25:7b:c9:bd:f8:d8:2a:e7:22:01:49:41:e8:86:48:
d3:87:e5:57:0e:61:87:c2:c4:58:1b:53:eb:88:22:
cd:ce:de:75:8f:cb:18:59:b8:1b:19:ae:1f:8e:08:
60:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:90:2E:8B:9E:B7:E0:01:14:26:18:77:ED:68:7F:BD:94:6F:6D:52
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/JpAui5634AEUJhh37Wh_vZRvbVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.40.0/24
185.182.65.0/24
Signature Algorithm: sha256WithRSAEncryption
58:2f:49:70:94:34:ad:a1:5a:fa:20:e3:cf:2d:5c:93:a5:a3:
04:b2:46:8f:5c:1c:9b:e4:cd:b6:81:8d:0f:83:44:cb:49:1e:
d0:ed:f9:5e:94:99:fb:dd:b3:d9:a8:38:51:b2:8d:69:92:f2:
c3:f2:23:4e:a8:e1:6e:47:77:f3:39:cf:c4:92:e0:70:d9:82:
56:bc:d7:72:62:80:de:d8:1e:dd:b1:10:5f:63:99:9e:74:5c:
6a:a2:05:95:30:87:20:37:8e:c7:fe:9b:8b:43:bd:ce:76:59:
dd:4f:34:43:27:d8:95:9a:d6:75:8f:81:4a:62:78:fa:88:5a:
66:bb:ed:82:95:01:d6:3a:ae:08:a3:34:3d:49:b9:15:5d:f1:
4c:e8:c8:85:34:1a:5f:11:23:96:75:21:d2:25:e3:05:80:99:
6d:68:ee:83:06:f7:21:2c:6c:ec:13:58:3c:93:31:90:ca:f6:
e4:ba:e8:96:de:e4:c3:14:c1:90:39:a1:d2:99:59:24:53:04:
37:30:c5:b3:03:66:99:5f:d9:4a:e1:6d:c7:66:bb:98:50:a3:
15:f6:cd:94:37:31:8e:b3:b3:fd:d8:b1:7f:df:03:13:f0:d2:
fb:aa:62:83:e5:cc:36:ce:ff:aa:5d:e3:a8:f1:7b:5b:10:3c:
0c:94:6e:d0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQoJ+/5BV+c110JwHUiXIMeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw
MjNlYmUwHhcNMjUwMTAyMTc1NDUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjkwMmU4YjllYjdlMDAxMTQyNjE4NzdlZDY4N2ZiZDk0NmY2ZDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6NeAictEwOQOOnAz+Z0W6lZoovWS
1rCSOLJSVI0a7k6m5f3mrcdYhWKS3/n28dz0NPpTb68BZAT5XlkdTF7JOHi4kkeQ
oJmw9A+RzUyFJgqEwu1enGo/pRQt0lVKTjw4Wa6TW7byAqWAEDLR7Um2JCJeumuC
ZmRY83RYE77oGUEp7YPw8TQuWvaPNK5pdbNd7hpP4PHXgO93OqOb17HADZkNefvJ
qH3XaF1Ldde7mSiyo9Nocy5fC0e1TWQVrxNlNkzf1Gqn+U1sav8Uc9w3kz0le8m9
+Ngq5yIBSUHohkjTh+VXDmGHwsRYG1PriCLNzt51j8sYWbgbGa4fjghgMwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCaQLouet+ABFCYYd+1of72Ub21SMB8GA1UdIwQY
MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt
OTlhY2I5OWNlNzU0LzEvSnBBdWk1NjM0QUVVSmhoMzdXaF92WlJ2YlZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0
LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABQEoAwQA
ubZBMA0GCSqGSIb3DQEBCwUAA4IBAQBYL0lwlDStoVr6IOPPLVyTpaMEskaPXByb
5M22gY0Pg0TLSR7Q7flelJn73bPZqDhRso1pkvLD8iNOqOFuR3fzOc/EkuBw2YJW
vNdyYoDe2B7dsRBfY5medFxqogWVMIcgN47H/puLQ73OdlndTzRDJ9iVmtZ1j4FK
Ynj6iFpmu+2ClQHWOq4IozQ9SbkVXfFM6MiFNBpfESOWdSHSJeMFgJltaO6DBvch
LGzsE1g8kzGQyvbkuuiW3uTDFMGQOaHSmVkkUwQ3MMWzA2aZX9lK4W3HZruYUKMV
9s2UNzGOs7P92LF/3wMT8NL7qmKD5cw2zv+qXeOo8XtbEDwMlG7Q
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:01:55 2025 by rpki-client