Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Jf2STL8xKC19fyLI3taTj9VQsnk.roa
File: Jf2STL8xKC19fyLI3taTj9VQsnk.roa (raw, json)
Hash identifier: 6HkkpVTUyOooixz8Drfc3RBM+0DnQA5+HSqx49y/8aU=
Subject key identifier: 25:FD:92:4C:BF:31:28:2D:7D:7F:22:C8:DE:D6:93:8F:D5:50:B2:79
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427486ADE6CF66B427FECCCDBA0530A30
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Jf2STL8xKC19fyLI3taTj9VQsnk.roa
Signing time: Thu 02 Jan 2025 13:50:44 +0000
ROA not before: Thu 02 Jan 2025 13:50:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199545
IP address blocks: 192.121.118.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:6a:de:6c:f6:6b:42:7f:ec:cc:db:a0:53:0a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25fd924cbf31282d7d7f22c8ded6938fd550b279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:26:57:b3:8a:19:58:8c:59:93:30:81:11:fe:
be:79:22:96:3d:70:a6:2e:83:bd:31:80:3c:c6:a1:
43:96:b9:83:b2:36:bc:33:2c:86:61:82:73:2f:2d:
e6:8a:27:14:6f:39:77:a0:66:18:d4:29:36:f4:ec:
24:4b:ea:58:5a:11:cb:34:0a:f0:6e:93:94:b6:38:
27:11:2e:4e:84:e8:98:d1:8e:f6:d3:85:51:4c:78:
44:42:1c:ef:95:af:72:a1:ee:36:d9:5d:33:3f:fd:
9f:5e:11:29:95:6c:35:45:ae:36:3f:82:78:ec:df:
ec:68:8d:c1:f8:7c:94:1c:6f:a4:05:ad:fc:6a:25:
dd:c7:07:9a:65:3e:ae:d8:3d:71:70:3c:b5:5e:98:
0e:c9:2b:be:49:5a:71:a8:f7:5c:16:92:8c:21:18:
3e:64:fa:c4:cd:b0:06:45:12:70:62:68:31:60:cc:
b3:b4:d3:8a:15:bf:bf:7d:eb:47:0f:c3:d6:ba:51:
66:45:0d:99:6e:36:aa:63:e0:24:6a:ec:a3:2f:a7:
f4:79:4b:94:e4:b8:10:47:96:f5:bd:2c:93:49:58:
ea:23:fb:fe:e0:c4:ba:c0:73:33:e4:47:3a:2b:e7:
d8:8e:b4:5d:f4:36:74:55:ee:7c:31:c6:d6:7d:21:
22:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FD:92:4C:BF:31:28:2D:7D:7F:22:C8:DE:D6:93:8F:D5:50:B2:79
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Jf2STL8xKC19fyLI3taTj9VQsnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.118.0/23
Signature Algorithm: sha256WithRSAEncryption
98:7b:ae:ad:a6:3b:a7:e5:64:c1:3d:59:cd:40:ae:e9:05:0d:
93:de:1c:26:12:8e:4f:aa:fc:12:f1:1d:77:bf:c4:ea:ef:3d:
94:be:11:1a:27:17:a4:79:e6:b7:01:4a:66:c1:29:72:ae:eb:
c7:74:1a:c6:88:83:f7:2d:38:bd:5b:64:0d:85:be:f0:22:78:
95:60:01:1a:4e:f3:dd:ff:90:57:55:ab:dd:6e:69:94:71:9d:
aa:79:d0:78:0e:e8:c5:51:a9:f9:c4:bd:a3:e6:cc:44:07:bd:
d6:fb:53:4c:d1:61:d6:98:c0:aa:8a:fd:ec:18:3d:97:4c:d8:
41:d9:84:c8:25:15:11:af:aa:da:1e:2c:02:76:38:1f:1a:c6:
6f:09:f0:7a:a6:cf:11:45:7d:ea:17:3c:3d:6a:39:75:60:4c:
c0:99:2c:ef:45:ff:21:00:1c:96:76:86:0c:5f:9e:22:a8:dd:
bb:70:69:5e:a1:e8:35:11:d6:1f:de:bd:8f:72:3a:8c:06:fa:
33:e2:d3:a5:22:88:e7:d4:df:2f:92:92:99:8d:38:57:ec:8a:
47:a1:8c:3c:84:d7:42:c8:f9:a3:85:92:c0:66:71:12:e6:9c:
62:08:ff:86:7d:cc:78:e9:45:fd:f5:5a:e7:01:92:cd:b4:96:
e6:5c:c0:12
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSGrebPZrQn/szNugUwowMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjUwMTAyMTM1MDQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWZkOTI0Y2JmMzEyODJkN2Q3ZjIyYzhkZWQ2OTM4ZmQ1NTBiMjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCZXs4oZWIxZkzCBEf6+eSKWPXCm
LoO9MYA8xqFDlrmDsja8MyyGYYJzLy3miicUbzl3oGYY1Ck29OwkS+pYWhHLNArw
bpOUtjgnES5OhOiY0Y7204VRTHhEQhzvla9yoe422V0zP/2fXhEplWw1Ra42P4J4
7N/saI3B+HyUHG+kBa38aiXdxweaZT6u2D1xcDy1XpgOySu+SVpxqPdcFpKMIRg+
ZPrEzbAGRRJwYmgxYMyztNOKFb+/fetHD8PWulFmRQ2ZbjaqY+AkauyjL6f0eUuU
5LgQR5b1vSyTSVjqI/v+4MS6wHMz5Ec6K+fYjrRd9DZ0Ve58McbWfSEivwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCX9kky/MSgtfX8iyN7Wk4/VULJ5MB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvSmYyU1RMOHhLQzE5ZnlMSTN0YVRqOVZRc25rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwHl2MA0G
CSqGSIb3DQEBCwUAA4IBAQCYe66tpjun5WTBPVnNQK7pBQ2T3hwmEo5PqvwS8R13
v8Tq7z2UvhEaJxekeea3AUpmwSlyruvHdBrGiIP3LTi9W2QNhb7wIniVYAEaTvPd
/5BXVavdbmmUcZ2qedB4DujFUan5xL2j5sxEB73W+1NM0WHWmMCqiv3sGD2XTNhB
2YTIJRURr6raHiwCdjgfGsZvCfB6ps8RRX3qFzw9ajl1YEzAmSzvRf8hAByWdoYM
X54iqN27cGleoeg1EdYf3r2PcjqMBvoz4tOlIojn1N8vkpKZjThX7IpHoYw8hNdC
yPmjhZLAZnES5pxiCP+Gfcx46UX99VrnAZLNtJbmXMAS
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:31 2025 by rpki-client