Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/00e-JENKJtNxBi-As1sYUq5EX18.roa
File: 00e-JENKJtNxBi-As1sYUq5EX18.roa (raw, json)
Hash identifier: YsSrS2JJTX4eWuRZQoJnhVIIQfCJDpSvv/nCINRxU3I=
Subject key identifier: D3:47:BE:24:43:4A:26:D3:71:06:2F:80:B3:5B:18:52:AE:44:5F:5F
Certificate issuer: /CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
Certificate serial: 019427B545652626013F3299309B572E0A76
Authority key identifier: 9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/00e-JENKJtNxBi-As1sYUq5EX18.roa
Signing time: Thu 02 Jan 2025 15:49:38 +0000
ROA not before: Thu 02 Jan 2025 15:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1267
IP address blocks: 185.54.32.0/24 maxlen: 24
185.54.33.0/24 maxlen: 24
185.54.34.0/24 maxlen: 24
185.54.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:45:65:26:26:01:3f:32:99:30:9b:57:2e:0a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
Validity
Not Before: Jan 2 15:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d347be24434a26d371062f80b35b1852ae445f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:be:21:52:ed:48:b4:4f:71:98:fa:65:ba:49:
be:cc:ab:88:ba:bd:85:e4:a2:7a:4a:df:53:d1:e2:
1d:ee:ba:ae:d9:49:87:10:b6:52:56:27:0b:a4:9f:
25:ea:18:2c:55:57:c3:44:c7:06:07:ed:c1:4f:da:
db:d5:95:e9:4d:56:8b:b0:ab:e3:3d:b0:f9:e1:50:
ef:17:c8:f2:92:68:19:fa:2e:49:8c:d8:e2:1a:dd:
3b:d0:b2:5f:77:28:64:8c:13:9a:9c:f6:eb:f5:b7:
10:fd:d0:56:ab:f7:7c:d5:be:34:8d:c5:ae:21:74:
e4:ad:e7:ba:9b:c3:8c:3d:9b:0d:e1:8c:38:4d:f2:
b1:73:f3:c2:58:44:42:1a:f7:5d:3f:66:ce:aa:5f:
82:a0:04:47:90:36:df:62:81:07:d1:c0:dc:63:18:
fb:99:56:27:ad:63:07:0b:2b:95:98:db:7b:2e:54:
ba:e7:3e:9a:0a:7c:1f:17:6d:41:34:8e:42:e0:53:
7b:6d:88:27:4e:02:b8:19:7f:0f:c2:3a:5d:70:13:
59:2a:20:7a:6a:fb:8f:4f:e2:ff:e6:94:48:14:59:
3c:8f:fb:23:4f:18:3a:22:ae:9b:a2:45:9e:5f:df:
92:9b:f0:fe:68:39:bf:ae:87:d3:15:d8:26:fa:5f:
10:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:47:BE:24:43:4A:26:D3:71:06:2F:80:B3:5B:18:52:AE:44:5F:5F
X509v3 Authority Key Identifier:
keyid:9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/00e-JENKJtNxBi-As1sYUq5EX18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.32.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:02:43:dc:2a:61:e9:fc:e0:f5:30:e1:e6:b4:dd:02:02:c8:
71:34:c9:ec:3b:9d:50:87:69:bb:56:a6:01:06:16:7e:d3:d3:
98:45:98:2e:a4:c7:64:15:ae:c0:29:45:63:44:e8:db:a5:ba:
b5:a0:3c:7d:26:a2:35:62:fe:42:4a:62:b5:d4:ae:c2:8c:9d:
9d:7d:62:71:63:f3:1c:41:9b:ac:71:4f:3a:9d:6f:16:fb:23:
b7:45:76:b4:61:5e:66:ba:93:e3:0d:1c:f0:bd:16:a9:d6:db:
21:75:d0:f6:55:0d:f7:95:bf:4e:51:94:fd:01:32:d4:e0:3f:
26:8f:76:ce:54:40:08:56:70:f3:18:74:5a:7e:68:24:9c:49:
78:54:18:72:4f:db:8b:f0:27:c6:24:b1:66:dd:41:8f:ca:a5:
86:73:29:52:2e:5b:70:97:bd:cf:81:e3:ab:8d:1a:9c:fe:68:
e9:a3:c9:b4:74:42:b3:39:66:f1:69:c6:64:c6:c0:ba:10:99:
0d:e8:a0:a6:1c:03:79:38:52:18:d3:61:fe:04:8e:f8:c9:7a:
13:6f:76:bd:b3:ed:2b:33:93:f8:12:32:26:56:7e:fe:2a:04:
5f:68:b9:3f:f2:a8:e1:23:fd:b1:fb:bf:28:ba:2f:93:85:f0:
50:9d:22:34
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntUVlJiYBPzKZMJtXLgp2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNDE1YTAzMDU5ZmIyOTVhNGI5NmM5Y2U1ZWFkYjU4ZmU5
OGZhODYwHhcNMjUwMTAyMTU0OTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzQ3YmUyNDQzNGEyNmQzNzEwNjJmODBiMzViMTg1MmFlNDQ1ZjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhL4hUu1ItE9xmPplukm+zKuIur2F
5KJ6St9T0eId7rqu2UmHELZSVicLpJ8l6hgsVVfDRMcGB+3BT9rb1ZXpTVaLsKvj
PbD54VDvF8jykmgZ+i5JjNjiGt070LJfdyhkjBOanPbr9bcQ/dBWq/d81b40jcWu
IXTkree6m8OMPZsN4Yw4TfKxc/PCWERCGvddP2bOql+CoARHkDbfYoEH0cDcYxj7
mVYnrWMHCyuVmNt7LlS65z6aCnwfF21BNI5C4FN7bYgnTgK4GX8PwjpdcBNZKiB6
avuPT+L/5pRIFFk8j/sjTxg6Iq6bokWeX9+Sm/D+aDm/rofTFdgm+l8QjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNNHviRDSibTcQYvgLNbGFKuRF9fMB8GA1UdIwQY
MBaAFJtBWgMFn7KVpLlsnOXq21j+mPqGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTBGYUF3V2ZzcFdrdVd5YzVlcmJXUDZZLW9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84NTYxMmEtZGUzMy00MzRiLTg0NzEt
MTgwMWI1NDRiOWZlLzEvMDBlLUpFTktKdE54QmktQXMxc1lVcTVFWDE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy84NTYxMmEtZGUzMy00MzRiLTg0NzEtMTgwMWI1NDRiOWZl
LzEvbTBGYUF3V2ZzcFdrdVd5YzVlcmJXUDZZLW9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTYgMA0G
CSqGSIb3DQEBCwUAA4IBAQCfAkPcKmHp/OD1MOHmtN0CAshxNMnsO51Qh2m7VqYB
BhZ+09OYRZgupMdkFa7AKUVjROjbpbq1oDx9JqI1Yv5CSmK11K7CjJ2dfWJxY/Mc
QZuscU86nW8W+yO3RXa0YV5mupPjDRzwvRap1tshddD2VQ33lb9OUZT9ATLU4D8m
j3bOVEAIVnDzGHRafmgknEl4VBhyT9uL8CfGJLFm3UGPyqWGcylSLltwl73PgeOr
jRqc/mjpo8m0dEKzOWbxacZkxsC6EJkN6KCmHAN5OFIY02H+BI74yXoTb3a9s+0r
M5P4EjImVn7+KgRfaLk/8qjhI/2x+78oui+ThfBQnSI0
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:50:04 2025 by rpki-client