Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/JDPCHXAUbfBXZ-JAE6cFE-tGXMI.roa
File: JDPCHXAUbfBXZ-JAE6cFE-tGXMI.roa (raw, json)
Hash identifier: bOxTgT+7J9XF4HocPumdm4M3ak6meIWnJq5cg5Hpmfs=
Subject key identifier: 24:33:C2:1D:70:14:6D:F0:57:67:E2:40:13:A7:05:13:EB:46:5C:C2
Certificate issuer: /CN=aa70fbb3db228437d605799ac4f4598d22e13e1b
Certificate serial: 01941F8C589A83960D4A7C20B6E08F9519B4
Authority key identifier: AA:70:FB:B3:DB:22:84:37:D6:05:79:9A:C4:F4:59:8D:22:E1:3E:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnD7s9sihDfWBXmaxPRZjSLhPhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/JDPCHXAUbfBXZ-JAE6cFE-tGXMI.roa
Signing time: Wed 01 Jan 2025 01:47:58 +0000
ROA not before: Wed 01 Jan 2025 01:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35223
IP address blocks: 82.117.0.0/19 maxlen: 19
193.168.168.0/22 maxlen: 22
2a03:5480::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:58:9a:83:96:0d:4a:7c:20:b6:e0:8f:95:19:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa70fbb3db228437d605799ac4f4598d22e13e1b
Validity
Not Before: Jan 1 01:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2433c21d70146df05767e24013a70513eb465cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:74:bd:cb:e5:ab:4c:23:4f:03:b8:40:a8:5f:
49:f8:88:ab:76:42:29:18:44:fb:65:77:4e:d1:9c:
50:7a:fb:99:1d:53:b0:72:0c:13:d6:12:9f:2e:ec:
73:b6:c3:74:54:17:32:c2:37:84:e8:ce:c1:12:28:
f5:23:34:a3:27:36:f4:30:92:1b:fb:60:ea:bb:36:
2c:78:da:4d:59:b5:e0:d7:e0:38:b6:d5:64:7b:eb:
61:98:9f:69:eb:b7:81:b0:90:fa:80:95:7a:89:2f:
8f:b2:21:1a:e8:40:85:70:45:4e:58:b5:7a:ef:a6:
19:77:90:ff:17:50:1f:73:a5:70:5f:97:31:8b:4c:
d0:f2:88:ad:60:5a:99:39:3f:55:3b:ad:07:70:06:
31:5a:58:78:16:b0:05:3a:2d:87:6f:17:f2:cc:62:
de:f0:de:45:d6:81:20:a3:c3:cd:00:cb:3f:42:b3:
1c:f4:ec:8b:4f:08:6f:49:e5:dd:4a:12:c4:c5:a4:
fb:74:ff:a5:79:ad:0b:82:5c:0b:a2:db:7a:92:28:
e9:28:f8:ba:50:b9:20:d0:39:50:02:87:a7:f8:5e:
0f:5e:58:97:79:74:a1:2d:cf:1b:dd:89:bb:cf:83:
5d:a8:a4:f7:4e:44:76:c0:12:97:6f:b0:50:d4:5d:
e9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:33:C2:1D:70:14:6D:F0:57:67:E2:40:13:A7:05:13:EB:46:5C:C2
X509v3 Authority Key Identifier:
keyid:AA:70:FB:B3:DB:22:84:37:D6:05:79:9A:C4:F4:59:8D:22:E1:3E:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnD7s9sihDfWBXmaxPRZjSLhPhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/JDPCHXAUbfBXZ-JAE6cFE-tGXMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.117.0.0/19
193.168.168.0/22
IPv6:
2a03:5480::/29
Signature Algorithm: sha256WithRSAEncryption
b4:62:e6:e5:4c:69:f7:ab:5b:2d:9c:65:6e:59:e5:90:fb:3d:
e0:b2:a7:83:62:4f:7c:c4:2f:0e:0e:ae:c7:68:f0:c9:88:e2:
d1:0a:97:74:f8:ce:56:4e:ad:ce:4f:19:50:c2:cd:a0:da:ff:
eb:b3:48:26:79:b3:49:ad:3d:06:d9:8c:90:17:94:6d:03:d3:
d7:38:01:7d:a2:d8:3f:37:f0:87:50:9c:cd:53:dd:a6:d1:f1:
be:72:65:3d:70:7d:a2:d1:ef:93:85:10:38:45:61:ce:93:3d:
57:37:0c:b3:8a:b1:c7:38:7e:43:52:3f:97:2c:64:1f:cc:e7:
65:e2:80:f1:40:97:b9:11:31:00:d1:25:ed:9b:b1:a4:61:71:
f2:58:de:88:b1:50:a0:b9:3f:95:6c:51:1b:b2:2f:ff:6e:7e:
35:fd:71:a3:83:79:e3:7b:ab:5c:a9:3d:00:23:c7:12:b9:12:
99:86:84:44:ad:93:12:5e:60:7b:bd:66:ff:a6:ac:f4:c6:c9:
75:54:a9:8e:90:45:9c:ac:2f:2b:1a:ed:79:5f:59:8d:58:94:
49:9a:8e:50:2f:1e:bb:cd:7b:7a:09:97:87:d0:f5:83:f8:00:
1d:db:8e:cc:8c:ce:55:43:f4:5f:2b:77:5e:3e:ae:a3:04:24:
54:06:d8:31
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQfjFiag5YNSnwgtuCPlRm0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNzBmYmIzZGIyMjg0MzdkNjA1Nzk5YWM0ZjQ1OThkMjJl
MTNlMWIwHhcNMjUwMTAxMDE0NzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDMzYzIxZDcwMTQ2ZGYwNTc2N2UyNDAxM2E3MDUxM2ViNDY1Y2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXS9y+WrTCNPA7hAqF9J+IirdkIp
GET7ZXdO0ZxQevuZHVOwcgwT1hKfLuxztsN0VBcywjeE6M7BEij1IzSjJzb0MJIb
+2DquzYseNpNWbXg1+A4ttVke+thmJ9p67eBsJD6gJV6iS+PsiEa6ECFcEVOWLV6
76YZd5D/F1Afc6VwX5cxi0zQ8oitYFqZOT9VO60HcAYxWlh4FrAFOi2HbxfyzGLe
8N5F1oEgo8PNAMs/QrMc9OyLTwhvSeXdShLExaT7dP+lea0LglwLott6kijpKPi6
ULkg0DlQAoen+F4PXliXeXShLc8b3Ym7z4NdqKT3TkR2wBKXb7BQ1F3pfwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFCQzwh1wFG3wV2fiQBOnBRPrRlzCMB8GA1UdIwQY
MBaAFKpw+7PbIoQ31gV5msT0WY0i4T4bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW5EN3M5c2loRGZXQlhtYXhQUlpqU0xoUGhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kOGUxODQtZTc5Yi00N2ZlLTk2ZGMt
NWJhNDIzNWNlNjE5LzEvSkRQQ0hYQVViZkJYWi1KQUU2Y0ZFLXRHWE1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9kOGUxODQtZTc5Yi00N2ZlLTk2ZGMtNWJhNDIzNWNlNjE5
LzEvcW5EN3M5c2loRGZXQlhtYXhQUlpqU0xoUGhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFUnUAAwQC
waioMA0EAgACMAcDBQMqA1SAMA0GCSqGSIb3DQEBCwUAA4IBAQC0YublTGn3q1st
nGVuWeWQ+z3gsqeDYk98xC8ODq7HaPDJiOLRCpd0+M5WTq3OTxlQws2g2v/rs0gm
ebNJrT0G2YyQF5RtA9PXOAF9otg/N/CHUJzNU92m0fG+cmU9cH2i0e+ThRA4RWHO
kz1XNwyzirHHOH5DUj+XLGQfzOdl4oDxQJe5ETEA0SXtm7GkYXHyWN6IsVCguT+V
bFEbsi//bn41/XGjg3nje6tcqT0AI8cSuRKZhoRErZMSXmB7vWb/pqz0xsl1VKmO
kEWcrC8rGu15X1mNWJRJmo5QLx67zXt6CZeH0PWD+AAd247MjM5VQ/RfK3dePq6j
BCRUBtgx
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:28:54 2025 by rpki-client