Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/jM-hm4qZkvx5qiMDmvoKwJSaOA4.roa
File: jM-hm4qZkvx5qiMDmvoKwJSaOA4.roa (raw, json)
Hash identifier: 5paKccuJdbNJ5FICCXxkc8/UEt4BvWJ/KUIFxozTrCY=
Subject key identifier: 8C:CF:A1:9B:8A:99:92:FC:79:AA:23:03:9A:FA:0A:C0:94:9A:38:0E
Certificate issuer: /CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Certificate serial: 0194274660C2E86CFF3C2F9B76BDF2BBF5EC
Authority key identifier: 6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/jM-hm4qZkvx5qiMDmvoKwJSaOA4.roa
Signing time: Thu 02 Jan 2025 13:48:31 +0000
ROA not before: Thu 02 Jan 2025 13:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 185.246.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:60:c2:e8:6c:ff:3c:2f:9b:76:bd:f2:bb:f5:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Validity
Not Before: Jan 2 13:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ccfa19b8a9992fc79aa23039afa0ac0949a380e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1b:6f:67:08:ec:ad:be:08:5c:83:8a:73:79:
0a:9d:2f:ea:cc:a3:9b:4e:2e:5b:85:27:d2:f1:76:
9c:9f:d8:e4:0d:5e:8e:e5:bb:6c:7b:db:13:ca:35:
e6:62:8a:a6:db:1f:f9:e0:af:62:70:53:6d:a2:6b:
2d:32:31:bd:62:07:08:25:1f:f2:5c:62:22:b2:30:
d0:31:35:cc:c5:df:94:03:e5:91:2d:85:a1:d1:ba:
96:ca:00:4b:b2:a6:4b:3e:d6:58:6e:69:53:89:b8:
cb:54:70:6f:8a:2a:67:a6:96:36:1b:ca:c6:bf:f0:
8d:f4:16:78:c1:ff:1a:7f:40:78:7b:9f:17:66:cf:
7a:87:0d:d2:86:8e:4f:65:ba:26:4a:97:22:79:77:
94:dd:cd:a5:82:fa:a2:b9:d1:cf:0e:18:70:0f:d0:
b2:44:dd:af:23:d7:eb:0e:b1:33:df:2a:40:4f:31:
e3:25:3d:da:8c:50:df:96:d8:57:bb:40:08:a5:93:
fe:9a:5e:4e:11:5f:7b:86:29:f1:39:61:b5:4d:3c:
ba:30:7f:ff:f1:30:4b:41:8c:a8:cd:c8:62:0f:0d:
42:61:f3:f7:6d:e4:7d:53:6c:42:14:99:94:c4:43:
d6:53:a3:14:1d:a9:52:3f:37:40:63:87:e5:93:b6:
74:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CF:A1:9B:8A:99:92:FC:79:AA:23:03:9A:FA:0A:C0:94:9A:38:0E
X509v3 Authority Key Identifier:
keyid:6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/jM-hm4qZkvx5qiMDmvoKwJSaOA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.131.0/24
Signature Algorithm: sha256WithRSAEncryption
38:cd:78:fc:67:04:94:d5:af:3e:a7:13:fe:19:2f:65:b7:7a:
e1:45:05:1f:1a:13:6e:9a:83:30:2a:5a:95:33:c4:4f:39:4e:
b8:ff:d0:96:9b:dc:c2:f4:10:43:3c:db:68:44:66:08:73:02:
c2:4e:89:ae:04:f1:08:c5:c8:f4:89:7f:86:60:9f:0f:0d:fd:
6c:82:0c:8e:56:a9:04:f4:13:d4:53:21:93:29:ae:13:fa:da:
d4:a5:7a:bd:53:b5:d3:ff:41:44:a8:0f:1e:73:aa:72:11:f1:
35:84:8b:16:2a:53:38:94:5e:9d:4c:9c:df:34:27:50:7d:a9:
45:0a:10:fa:5c:3c:d8:88:2d:90:00:0e:63:42:24:2e:e4:02:
87:6a:37:06:ca:c5:c6:07:7b:31:64:24:ca:32:2d:f6:3d:f8:
d4:45:ef:0f:f5:94:c9:02:00:9c:cc:a8:8e:43:a3:b0:21:80:
7b:48:47:28:5d:d7:0b:78:7b:e4:e5:0a:2e:58:a8:4b:d1:14:
4f:95:91:71:60:a3:15:bd:c1:bf:b3:27:ad:39:9c:0a:e4:98:
51:2c:f2:b0:c6:d9:03:3b:3d:3c:d5:23:8f:b6:41:f3:a5:4a:
78:4f:6d:c1:a7:ad:d4:8c:2e:51:6e:00:1d:37:0b:e6:32:04:
66:f2:7e:4c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnRmDC6Gz/PC+bdr3yu/XsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNzk4ZjBmZTRmNGRmZmRmZWQyYzhlNjJkMjM1NDMwZjQ5
Mzc3Y2QwHhcNMjUwMTAyMTM0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2NmYTE5YjhhOTk5MmZjNzlhYTIzMDM5YWZhMGFjMDk0OWEzODBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhtvZwjsrb4IXIOKc3kKnS/qzKOb
Ti5bhSfS8Xacn9jkDV6O5btse9sTyjXmYoqm2x/54K9icFNtomstMjG9YgcIJR/y
XGIisjDQMTXMxd+UA+WRLYWh0bqWygBLsqZLPtZYbmlTibjLVHBviipnppY2G8rG
v/CN9BZ4wf8af0B4e58XZs96hw3Sho5PZbomSpcieXeU3c2lgvqiudHPDhhwD9Cy
RN2vI9frDrEz3ypATzHjJT3ajFDflthXu0AIpZP+ml5OEV97hinxOWG1TTy6MH//
8TBLQYyozchiDw1CYfP3beR9U2xCFJmUxEPWU6MUHalSPzdAY4flk7Z0wQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIzPoZuKmZL8eaojA5r6CsCUmjgOMB8GA1UdIwQY
MBaAFGp5jw/k9N/9/tLI5i0jVDD0k3fNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYW5tUEQtVDAzXzMtMHNqbUxTTlVNUFNUZDgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83Yjc4MjUtYTBmNy00ZjViLTljMjMt
NzdjZjgxMDQxMDgzLzEvak0taG00cVprdng1cWlNRG12b0t3SlNhT0E0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83Yjc4MjUtYTBmNy00ZjViLTljMjMtNzdjZjgxMDQxMDgz
LzEvYW5tUEQtVDAzXzMtMHNqbUxTTlVNUFNUZDgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufaDMA0G
CSqGSIb3DQEBCwUAA4IBAQA4zXj8ZwSU1a8+pxP+GS9lt3rhRQUfGhNumoMwKlqV
M8RPOU64/9CWm9zC9BBDPNtoRGYIcwLCTomuBPEIxcj0iX+GYJ8PDf1sggyOVqkE
9BPUUyGTKa4T+trUpXq9U7XT/0FEqA8ec6pyEfE1hIsWKlM4lF6dTJzfNCdQfalF
ChD6XDzYiC2QAA5jQiQu5AKHajcGysXGB3sxZCTKMi32PfjURe8P9ZTJAgCczKiO
Q6OwIYB7SEcoXdcLeHvk5QouWKhL0RRPlZFxYKMVvcG/syetOZwK5JhRLPKwxtkD
Oz081SOPtkHzpUp4T23Bp63UjC5RbgAdNwvmMgRm8n5M
-----END CERTIFICATE-----
Generated at Tue Apr 8 13:26:08 2025 by rpki-client