Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/JX1vR9UIFfPnGT01wHmnta7-S3I.roa
File: JX1vR9UIFfPnGT01wHmnta7-S3I.roa (raw, json)
Hash identifier: Gr3IJzWD2DjjEr3M6VN0J2xIN8TnyLzVYpQd29OcT6I=
Subject key identifier: 25:7D:6F:47:D5:08:15:F3:E7:19:3D:35:C0:79:A7:B5:AE:FE:4B:72
Certificate issuer: /CN=5d39d15bd2fcc84771ba6aa29aa54428b21cef60
Certificate serial: 0194266B66471FC7D83BB618D618C0F4A55D
Authority key identifier: 5D:39:D1:5B:D2:FC:C8:47:71:BA:6A:A2:9A:A5:44:28:B2:1C:EF:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/JX1vR9UIFfPnGT01wHmnta7-S3I.roa
Signing time: Thu 02 Jan 2025 09:49:20 +0000
ROA not before: Thu 02 Jan 2025 09:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28851
IP address blocks: 213.19.0.0/17 maxlen: 17
213.250.192.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:66:47:1f:c7:d8:3b:b6:18:d6:18:c0:f4:a5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d39d15bd2fcc84771ba6aa29aa54428b21cef60
Validity
Not Before: Jan 2 09:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=257d6f47d50815f3e7193d35c079a7b5aefe4b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:11:c0:f3:6d:bd:20:a7:95:e9:c5:ed:c9:65:
98:fb:3e:95:46:ca:3d:6e:3f:e2:f5:16:6c:92:63:
3d:88:a1:6c:a7:a0:5a:56:3d:34:47:04:f7:71:d7:
14:fd:c3:0b:04:91:5f:e8:81:7f:28:41:72:aa:03:
21:e8:75:97:0c:cd:0e:33:16:eb:cc:06:bf:33:87:
3f:af:0b:81:52:55:2a:0f:00:e4:9a:60:fa:91:30:
6d:08:e4:75:25:df:9c:d3:77:a4:fd:89:27:73:3b:
95:b8:e6:db:77:31:2d:17:f2:91:7d:eb:b1:c0:ec:
e5:1b:6c:2d:83:7d:51:b7:83:df:38:1d:08:74:b5:
a4:8d:a0:28:92:33:5e:67:f8:d2:d4:e1:b4:46:ee:
f7:a1:63:42:b0:7d:14:2f:0f:97:fb:fd:fd:5d:9c:
e4:fc:fb:64:56:7f:2f:f4:65:5d:0d:fd:82:a0:c8:
f5:e8:d7:5a:4d:a3:56:c4:64:78:ef:80:89:32:dc:
61:f9:b7:49:c1:5d:de:92:68:a1:16:f9:7e:e7:16:
c8:e8:99:2c:da:00:00:41:c4:1e:4b:c6:3a:31:2f:
de:ed:1d:da:0a:96:0d:f6:7c:de:b8:8f:4e:d0:2c:
fe:8e:0f:99:71:d3:c1:a9:61:d2:3b:ff:79:6d:ac:
23:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7D:6F:47:D5:08:15:F3:E7:19:3D:35:C0:79:A7:B5:AE:FE:4B:72
X509v3 Authority Key Identifier:
keyid:5D:39:D1:5B:D2:FC:C8:47:71:BA:6A:A2:9A:A5:44:28:B2:1C:EF:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/JX1vR9UIFfPnGT01wHmnta7-S3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/XTnRW9L8yEdxumqimqVEKLIc72A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.19.0.0/17
213.250.192.0/18
Signature Algorithm: sha256WithRSAEncryption
87:6f:56:b3:58:ce:2e:69:9e:d4:d8:3b:bc:68:14:f7:03:dc:
72:18:45:ca:74:ed:53:c4:c3:b9:13:a3:b0:a4:22:8e:41:49:
62:86:06:42:78:24:2c:3b:d3:f2:65:1c:6e:54:cc:41:16:56:
fe:72:a6:8f:04:e9:99:03:c6:a8:c3:b0:4d:b3:0a:f4:94:6e:
ce:67:82:2c:54:06:c6:51:f7:b0:1f:3a:c9:1c:e2:54:db:f3:
b7:46:2e:92:94:d1:ea:c1:63:7d:cf:43:75:a7:03:5c:9f:fb:
d1:fa:ea:f5:33:93:c6:c9:c8:da:6c:a7:43:20:2c:ac:fa:b9:
77:9f:66:ad:3f:06:a9:7b:58:79:86:8d:04:0e:5e:3f:85:4c:
6e:a4:f6:cc:cd:6d:53:12:68:7b:1f:38:78:d9:52:21:31:9a:
00:b9:79:93:f2:d7:13:62:2b:84:ce:96:1d:3f:5e:32:ed:05:
4d:b7:63:a9:cd:ec:77:17:df:c7:3c:ef:6a:64:13:a4:e7:fb:
bc:5c:b5:bf:7a:77:a0:e3:5b:8c:84:65:00:5c:e1:8e:d8:0b:
30:93:c9:68:39:33:a0:19:17:5e:2e:75:df:27:3f:15:7f:ad:
93:f1:29:2d:c6:2c:35:34:2d:d8:20:d5:26:a1:4c:70:34:0a:
66:b9:54:b0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQma2ZHH8fYO7YY1hjA9KVdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMzlkMTViZDJmY2M4NDc3MWJhNmFhMjlhYTU0NDI4YjIx
Y2VmNjAwHhcNMjUwMTAyMDk0OTIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTdkNmY0N2Q1MDgxNWYzZTcxOTNkMzVjMDc5YTdiNWFlZmU0YjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxHA8229IKeV6cXtyWWY+z6VRso9
bj/i9RZskmM9iKFsp6BaVj00RwT3cdcU/cMLBJFf6IF/KEFyqgMh6HWXDM0OMxbr
zAa/M4c/rwuBUlUqDwDkmmD6kTBtCOR1Jd+c03ek/YknczuVuObbdzEtF/KRfeux
wOzlG2wtg31Rt4PfOB0IdLWkjaAokjNeZ/jS1OG0Ru73oWNCsH0ULw+X+/39XZzk
/PtkVn8v9GVdDf2CoMj16NdaTaNWxGR474CJMtxh+bdJwV3ekmihFvl+5xbI6Jks
2gAAQcQeS8Y6MS/e7R3aCpYN9nzeuI9O0Cz+jg+ZcdPBqWHSO/95bawjDwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCV9b0fVCBXz5xk9NcB5p7Wu/ktyMB8GA1UdIwQY
MBaAFF050VvS/MhHcbpqopqlRCiyHO9gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFRuUlc5TDh5RWR4dW1xaW1xVkVLTEljNzJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jODA5MmUtOWY4Yy00NzE4LWI3NzAt
YzI5YjQ0ZGU1M2E4LzEvSlgxdlI5VUlGZlBuR1QwMXdIbW50YTctUzNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9jODA5MmUtOWY4Yy00NzE4LWI3NzAtYzI5YjQ0ZGU1M2E4
LzEvWFRuUlc5TDh5RWR4dW1xaW1xVkVLTEljNzJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQH1RMAAwQG
1frAMA0GCSqGSIb3DQEBCwUAA4IBAQCHb1azWM4uaZ7U2Du8aBT3A9xyGEXKdO1T
xMO5E6OwpCKOQUlihgZCeCQsO9PyZRxuVMxBFlb+cqaPBOmZA8aow7BNswr0lG7O
Z4IsVAbGUfewHzrJHOJU2/O3Ri6SlNHqwWN9z0N1pwNcn/vR+ur1M5PGycjabKdD
ICys+rl3n2atPwape1h5ho0EDl4/hUxupPbMzW1TEmh7Hzh42VIhMZoAuXmT8tcT
YiuEzpYdP14y7QVNt2Opzex3F9/HPO9qZBOk5/u8XLW/eneg41uMhGUAXOGO2Asw
k8loOTOgGRdeLnXfJz8Vf62T8Sktxiw1NC3YINUmoUxwNApmuVSw
-----END CERTIFICATE-----
Generated at Fri Apr 25 17:05:30 2025 by rpki-client