Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/JK16zlndMRahp44_6C1fvYPtDRA.roa
File: JK16zlndMRahp44_6C1fvYPtDRA.roa (raw, json)
Hash identifier: yb5fCu5AfBtMUYx0UHEG/dUqoDIYetCtVcYzIBVJBkA=
Subject key identifier: 24:AD:7A:CE:59:DD:31:16:A1:A7:8E:3F:E8:2D:5F:BD:83:ED:0D:10
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427483645B3E3E6F0071C86DB89F66C67
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/JK16zlndMRahp44_6C1fvYPtDRA.roa
Signing time: Thu 02 Jan 2025 13:50:31 +0000
ROA not before: Thu 02 Jan 2025 13:50:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 192.71.161.0/24 maxlen: 24
193.180.119.0/24 maxlen: 24
193.182.245.0/24 maxlen: 24
193.234.18.0/24 maxlen: 24
193.234.82.0/24 maxlen: 24
193.235.104.0/24 maxlen: 24
193.235.106.0/24 maxlen: 24
194.71.221.0/24 maxlen: 24
194.132.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:36:45:b3:e3:e6:f0:07:1c:86:db:89:f6:6c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24ad7ace59dd3116a1a78e3fe82d5fbd83ed0d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:03:ec:ca:e7:b1:0a:ed:e6:48:d8:20:04:8a:
20:06:e4:93:4e:ce:c2:77:38:81:89:f5:cf:01:3f:
3b:ec:09:9c:d2:9d:52:4f:60:14:45:58:5d:45:f1:
50:3a:dc:c7:35:1a:16:96:e1:fa:f9:6c:a1:5f:61:
84:66:92:78:d6:2f:5b:80:9d:9d:31:f5:a9:f4:3e:
91:a2:49:3a:73:22:25:88:3e:61:7f:bb:0b:69:17:
98:cf:9d:6c:95:de:08:17:51:98:f8:d0:a9:db:1d:
c1:ff:59:3a:b4:e7:5a:12:35:5d:e5:2a:44:53:9a:
ea:1f:cc:71:48:19:49:66:dd:0b:45:29:11:ca:75:
c3:a9:6f:25:54:98:c9:f5:08:93:b5:94:18:e3:26:
6a:cf:66:be:18:15:a4:e3:0a:16:b9:d3:7b:7d:10:
e6:8b:e7:92:cc:e9:84:be:cb:66:b1:d6:ab:38:fb:
ee:dc:04:c7:c5:c1:e0:34:af:bf:e6:d9:f3:46:4a:
f6:d7:b7:3c:3d:de:40:51:fc:0b:16:49:ed:77:6b:
da:c1:57:62:fe:d2:b6:11:67:d0:3c:e4:b1:59:b1:
39:af:a0:b5:95:08:e2:2c:bc:59:26:15:50:d8:21:
01:45:21:6e:a9:cd:a3:45:99:2f:e8:b6:31:4f:fb:
29:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AD:7A:CE:59:DD:31:16:A1:A7:8E:3F:E8:2D:5F:BD:83:ED:0D:10
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/JK16zlndMRahp44_6C1fvYPtDRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.161.0/24
193.180.119.0/24
193.182.245.0/24
193.234.18.0/24
193.234.82.0/24
193.235.104.0/24
193.235.106.0/24
194.71.221.0/24
194.132.122.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:37:02:36:38:39:b4:c3:99:f8:28:2e:6e:5d:cd:fc:ed:08:
98:2e:99:90:60:53:90:b8:58:da:d8:c0:89:d1:ce:34:e5:eb:
3d:31:dc:49:c2:13:73:17:f1:ed:80:ae:e0:70:8f:37:61:9d:
61:87:a6:26:ab:fa:3e:7d:9f:b2:db:f2:9b:1c:ee:49:01:98:
9a:b0:6d:de:3d:aa:79:01:76:00:bc:f4:f1:99:6b:75:7e:df:
1e:c8:6a:d5:e1:cd:11:e5:22:80:95:05:d3:5a:55:3b:36:82:
85:2b:bc:e3:03:19:3f:43:15:a4:48:aa:47:eb:ee:14:9e:42:
7f:3a:66:7a:22:54:a0:f0:38:27:28:16:b2:fa:22:79:0a:5f:
09:9f:cb:bf:c3:b0:74:91:ec:27:56:4b:99:cf:b1:5d:9c:a5:
c8:9c:34:04:30:a8:34:49:03:a7:a8:9d:ec:28:88:3b:03:2e:
55:ce:a9:69:af:d8:80:8f:43:09:6a:0b:e7:06:33:98:75:3d:
e3:94:d0:7d:0a:73:ce:0d:50:a4:24:59:2c:6b:69:65:43:23:
97:38:77:11:64:22:05:51:aa:e5:29:c8:11:08:74:47:78:20:
7a:e9:fd:b7:80:bc:4c:de:15:07:54:0d:d8:4c:e8:a9:fe:25:
72:4c:02:99
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZQnSDZFs+Pm8AcchtuJ9mxnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjUwMTAyMTM1MDMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGFkN2FjZTU5ZGQzMTE2YTFhNzhlM2ZlODJkNWZiZDgzZWQwZDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowPsyuexCu3mSNggBIogBuSTTs7C
dziBifXPAT877Amc0p1ST2AURVhdRfFQOtzHNRoWluH6+WyhX2GEZpJ41i9bgJ2d
MfWp9D6Rokk6cyIliD5hf7sLaReYz51sld4IF1GY+NCp2x3B/1k6tOdaEjVd5SpE
U5rqH8xxSBlJZt0LRSkRynXDqW8lVJjJ9QiTtZQY4yZqz2a+GBWk4woWudN7fRDm
i+eSzOmEvstmsdarOPvu3ATHxcHgNK+/5tnzRkr217c8Pd5AUfwLFkntd2vawVdi
/tK2EWfQPOSxWbE5r6C1lQjiLLxZJhVQ2CEBRSFuqc2jRZkv6LYxT/spKwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFCStes5Z3TEWoaeOP+gtX72D7Q0QMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvSksxNnpsbmRNUmFocDQ0XzZDMWZ2WVB0RFJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAwEehAwQA
wbR3AwQAwbb1AwQAweoSAwQAwepSAwQAwetoAwQAwetqAwQAwkfdAwQAwoR6MA0G
CSqGSIb3DQEBCwUAA4IBAQDDNwI2ODm0w5n4KC5uXc387QiYLpmQYFOQuFja2MCJ
0c405es9MdxJwhNzF/HtgK7gcI83YZ1hh6Ymq/o+fZ+y2/KbHO5JAZiasG3ePap5
AXYAvPTxmWt1ft8eyGrV4c0R5SKAlQXTWlU7NoKFK7zjAxk/QxWkSKpH6+4UnkJ/
OmZ6IlSg8DgnKBay+iJ5Cl8Jn8u/w7B0kewnVkuZz7FdnKXInDQEMKg0SQOnqJ3s
KIg7Ay5Vzqlpr9iAj0MJagvnBjOYdT3jlNB9CnPODVCkJFksa2llQyOXOHcRZCIF
UarlKcgRCHRHeCB66f23gLxM3hUHVA3YTOip/iVyTAKZ
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:58 2025 by rpki-client