Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/JoxmLN3rVb0orFwC4m3JMhLjTCQ.roa
File: JoxmLN3rVb0orFwC4m3JMhLjTCQ.roa (raw, json)
Hash identifier: PzCXitZFdSdIv2MGzL6nDSn7PkwlOAE3nyB9vmo6lwY=
Subject key identifier: 26:8C:66:2C:DD:EB:55:BD:28:AC:5C:02:E2:6D:C9:32:12:E3:4C:24
Certificate issuer: /CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a
Certificate serial: 019421B1BC3273ECCDD6CDE200C3493AF58C
Authority key identifier: 1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/JoxmLN3rVb0orFwC4m3JMhLjTCQ.roa
Signing time: Wed 01 Jan 2025 11:48:03 +0000
ROA not before: Wed 01 Jan 2025 11:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199139
IP address blocks: 91.236.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:bc:32:73:ec:cd:d6:cd:e2:00:c3:49:3a:f5:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a
Validity
Not Before: Jan 1 11:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=268c662cddeb55bd28ac5c02e26dc93212e34c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:33:6a:f4:d6:1d:ef:cb:4a:83:ca:99:f4:c9:
d1:23:9b:97:28:ef:ee:0f:33:d5:6f:28:b1:05:2e:
33:2d:04:02:20:61:5f:50:1f:4f:61:38:d7:d7:7b:
fa:6a:cc:71:38:11:d5:8e:4e:cf:d0:55:12:06:9c:
1f:44:c7:67:f7:1a:e6:73:97:00:63:f1:6b:5b:2c:
fe:07:3e:3d:46:09:82:7c:28:f5:a7:e2:2e:27:17:
57:97:28:68:8c:0e:46:e2:59:db:41:e0:56:c3:b4:
78:ff:6f:62:63:93:32:1f:ec:1e:8a:24:70:5a:d4:
ae:aa:97:81:30:2a:5a:46:52:79:72:5f:b3:34:85:
f3:d8:4f:25:36:71:d0:05:06:b7:b0:61:35:e4:16:
de:17:ca:e7:65:23:f1:a6:52:ce:c4:b9:33:7f:60:
4f:34:6a:22:0d:8b:97:ea:27:92:fa:e6:d2:e5:3b:
fd:da:b6:aa:2d:af:0a:65:5f:0b:8c:5c:06:67:05:
fc:40:8a:a1:52:c9:8c:81:5c:d9:95:42:b8:b5:4d:
26:6d:aa:18:43:ea:a4:87:83:41:bb:dd:4b:6c:61:
ff:6c:79:50:ee:f6:78:6e:bd:15:28:de:82:eb:fe:
61:49:82:2f:11:e8:09:59:53:d8:3c:27:e9:af:a0:
68:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8C:66:2C:DD:EB:55:BD:28:AC:5C:02:E2:6D:C9:32:12:E3:4C:24
X509v3 Authority Key Identifier:
keyid:1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/JoxmLN3rVb0orFwC4m3JMhLjTCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.19.0/24
Signature Algorithm: sha256WithRSAEncryption
81:1e:da:ee:c9:b7:f3:01:a8:53:c7:de:19:eb:1d:f1:10:b7:
95:81:39:63:ed:83:44:e7:48:85:30:49:ff:88:3a:fd:80:46:
fb:18:3f:6c:7e:80:e4:0b:b2:99:b2:7a:8f:7b:b1:f0:d2:72:
fe:c3:61:80:f2:ef:a7:b2:60:77:47:e2:e9:92:0c:07:93:7b:
85:cd:aa:b1:67:ee:57:94:08:2a:9d:65:4c:cf:90:d8:9a:85:
72:09:ca:ad:f1:4c:56:af:0e:e6:3d:6c:e8:7f:b4:f3:a1:9f:
2d:31:9a:27:81:67:37:c1:13:7b:de:4a:9f:89:2d:04:4a:73:
6e:1c:14:aa:05:6f:6c:a6:c9:b6:18:bc:63:d3:23:d0:bc:d5:
19:14:d0:08:3d:25:4a:90:78:0f:37:b5:d2:96:86:76:e4:11:
81:88:82:63:19:4c:d3:80:29:d0:ae:bc:97:4f:59:6d:c8:85:
72:59:61:b2:fa:a8:4f:bb:8a:31:69:0f:b3:3f:8d:9a:72:06:
f8:a3:6c:30:0a:2f:c0:45:61:21:b2:47:82:2f:8d:b8:65:fd:
24:02:1c:a8:8c:04:6e:39:00:30:6e:8c:39:3f:bf:d2:dd:c8:
4c:78:10:66:26:3c:aa:48:68:52:3e:cf:39:c5:f9:ae:17:87:
e3:8f:04:c8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsbwyc+zN1s3iAMNJOvWMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhZDZkMmQ0MGZiMWQ1YjJjZjk1NDI5YmZiOTMxOWZjMmIx
Y2MyNGEwHhcNMjUwMTAxMTE0ODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjhjNjYyY2RkZWI1NWJkMjhhYzVjMDJlMjZkYzkzMjEyZTM0YzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDNq9NYd78tKg8qZ9MnRI5uXKO/u
DzPVbyixBS4zLQQCIGFfUB9PYTjX13v6asxxOBHVjk7P0FUSBpwfRMdn9xrmc5cA
Y/FrWyz+Bz49RgmCfCj1p+IuJxdXlyhojA5G4lnbQeBWw7R4/29iY5MyH+weiiRw
WtSuqpeBMCpaRlJ5cl+zNIXz2E8lNnHQBQa3sGE15BbeF8rnZSPxplLOxLkzf2BP
NGoiDYuX6ieS+ubS5Tv92raqLa8KZV8LjFwGZwX8QIqhUsmMgVzZlUK4tU0mbaoY
Q+qkh4NBu91LbGH/bHlQ7vZ4br0VKN6C6/5hSYIvEegJWVPYPCfpr6BocQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCaMZizd61W9KKxcAuJtyTIS40wkMB8GA1UdIwQY
MBaAFBrW0tQPsdWyz5VCm/uTGfwrHMJKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3RiUzFBLXgxYkxQbFVLYi01TVpfQ3Njd2tvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS82MWZhM2ItNDcyNC00MDE0LTg4MTct
YmQ3MWVmZmI5YjM5LzEvSm94bUxOM3JWYjBvckZ3QzRtM0pNaExqVENRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS82MWZhM2ItNDcyNC00MDE0LTg4MTctYmQ3MWVmZmI5YjM5
LzEvR3RiUzFBLXgxYkxQbFVLYi01TVpfQ3Njd2tvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+wTMA0G
CSqGSIb3DQEBCwUAA4IBAQCBHtruybfzAahTx94Z6x3xELeVgTlj7YNE50iFMEn/
iDr9gEb7GD9sfoDkC7KZsnqPe7Hw0nL+w2GA8u+nsmB3R+LpkgwHk3uFzaqxZ+5X
lAgqnWVMz5DYmoVyCcqt8UxWrw7mPWzof7TzoZ8tMZongWc3wRN73kqfiS0ESnNu
HBSqBW9spsm2GLxj0yPQvNUZFNAIPSVKkHgPN7XSloZ25BGBiIJjGUzTgCnQrryX
T1ltyIVyWWGy+qhPu4oxaQ+zP42acgb4o2wwCi/ARWEhskeCL424Zf0kAhyojARu
OQAwbow5P7/S3chMeBBmJjyqSGhSPs85xfmuF4fjjwTI
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:31:14 2025 by rpki-client