Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/jjPkPnEOvwVnAAg20Sm72ha1828.roa
File: jjPkPnEOvwVnAAg20Sm72ha1828.roa (raw, json)
Hash identifier: qBKDLKoYMFIUxr740I0l1MbmN1H/LYeCtP9acHybLHY=
Subject key identifier: 8E:33:E4:3E:71:0E:BF:05:67:00:08:36:D1:29:BB:DA:16:B5:F3:6F
Certificate issuer: /CN=9c93eb8a7d19ffd7804765acfdcf2260c6c0d659
Certificate serial: 019421441836A986BEED54C3C940D4EFDE3C
Authority key identifier: 9C:93:EB:8A:7D:19:FF:D7:80:47:65:AC:FD:CF:22:60:C6:C0:D6:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/jjPkPnEOvwVnAAg20Sm72ha1828.roa
Signing time: Wed 01 Jan 2025 09:48:18 +0000
ROA not before: Wed 01 Jan 2025 09:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199811
IP address blocks: 109.237.60.0/22 maxlen: 22
185.43.244.0/22 maxlen: 22
185.74.32.0/22 maxlen: 22
185.74.32.0/24 maxlen: 24
185.74.35.0/24 maxlen: 24
185.214.152.0/22 maxlen: 22
2a01:71e0::/32 maxlen: 32
2a05:4880::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:18:36:a9:86:be:ed:54:c3:c9:40:d4:ef:de:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c93eb8a7d19ffd7804765acfdcf2260c6c0d659
Validity
Not Before: Jan 1 09:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e33e43e710ebf0567000836d129bbda16b5f36f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:15:be:57:44:46:c6:7e:cc:cc:9d:7d:39:f7:
01:ee:fc:b1:c3:8f:e9:c5:53:70:69:eb:1a:a9:1b:
c7:a4:1d:b9:bb:ec:99:19:58:30:e3:05:79:09:a2:
e9:97:50:fd:87:4a:19:15:99:07:a7:5c:7d:4b:a6:
68:cd:bc:ee:97:50:08:9e:b7:d4:73:a5:01:d3:d0:
99:b4:04:97:56:9a:20:63:14:bf:33:84:01:31:bc:
fd:19:e1:75:36:71:ca:6a:ae:92:72:24:37:02:7b:
ef:63:e8:8b:7e:eb:40:2b:01:e2:17:5c:4c:c8:95:
f2:ec:43:ea:94:aa:90:f8:9d:9b:62:a8:33:ba:d5:
7b:b0:9a:a4:95:d9:9a:32:56:10:a0:93:8c:44:fe:
a3:57:97:1c:71:02:10:98:84:86:05:cb:fe:85:47:
0c:82:6a:b4:5b:41:18:91:09:a1:cc:ce:4b:49:ee:
ea:96:35:06:69:d4:7b:2b:1f:77:f3:c5:bd:22:a5:
52:e7:ff:f1:85:30:15:0f:80:8e:cf:e4:07:59:04:
4a:9a:74:a9:a7:87:0b:cf:6d:37:ee:30:86:10:85:
a0:ac:69:eb:0e:e3:f3:b5:50:02:e7:35:06:f3:1b:
8a:c7:82:91:8d:a2:27:ea:ce:26:55:39:40:a6:d6:
eb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:33:E4:3E:71:0E:BF:05:67:00:08:36:D1:29:BB:DA:16:B5:F3:6F
X509v3 Authority Key Identifier:
keyid:9C:93:EB:8A:7D:19:FF:D7:80:47:65:AC:FD:CF:22:60:C6:C0:D6:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/jjPkPnEOvwVnAAg20Sm72ha1828.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.237.60.0/22
185.43.244.0/22
185.74.32.0/22
185.214.152.0/22
IPv6:
2a01:71e0::/32
2a05:4880::/29
Signature Algorithm: sha256WithRSAEncryption
9e:8c:6f:5a:21:17:f4:85:ba:99:27:63:5f:2d:47:20:1c:18:
44:99:92:9e:cd:cd:8c:78:62:e9:13:40:96:97:6d:63:36:c7:
7f:79:61:6d:47:26:35:40:6d:6a:7b:5b:28:78:f0:59:28:2b:
cc:fe:dc:1c:3c:b9:22:c9:4c:6a:28:e6:8d:88:26:77:05:8e:
07:1d:a8:d1:0d:bd:4a:77:c1:ab:5f:12:0a:5f:7c:3c:6f:03:
ad:b9:70:7a:a7:86:82:16:9a:5f:c7:59:9c:29:7b:fe:18:e5:
dd:f0:72:cc:8d:c9:3d:44:86:03:56:ba:51:ee:97:54:80:26:
14:03:b0:9f:1e:ef:ca:36:b5:42:fa:39:47:d8:ad:35:22:c6:
e5:42:45:57:19:09:13:bb:7f:1e:93:8c:3b:aa:8a:4f:4d:05:
11:40:9b:80:60:36:82:f2:83:01:e9:6a:f6:65:88:eb:13:81:
86:2e:25:4a:cc:f1:ad:c2:85:37:57:95:3d:e7:36:f3:3e:c7:
dd:aa:0f:6c:e2:83:d1:32:a1:02:4d:89:72:45:fc:6a:30:df:
69:a8:c7:e8:79:55:00:40:b7:89:a4:31:d2:58:1b:26:d3:b8:
a6:47:60:a7:56:63:28:b2:9d:f3:8a:8a:76:57:fb:5d:07:aa:
a7:15:e0:72
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAZQhRBg2qYa+7VTDyUDU7948MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljOTNlYjhhN2QxOWZmZDc4MDQ3NjVhY2ZkY2YyMjYwYzZj
MGQ2NTkwHhcNMjUwMTAxMDk0ODE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTMzZTQzZTcxMGViZjA1NjcwMDA4MzZkMTI5YmJkYTE2YjVmMzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBW+V0RGxn7MzJ19OfcB7vyxw4/p
xVNwaesaqRvHpB25u+yZGVgw4wV5CaLpl1D9h0oZFZkHp1x9S6Zozbzul1AInrfU
c6UB09CZtASXVpogYxS/M4QBMbz9GeF1NnHKaq6SciQ3AnvvY+iLfutAKwHiF1xM
yJXy7EPqlKqQ+J2bYqgzutV7sJqkldmaMlYQoJOMRP6jV5cccQIQmISGBcv+hUcM
gmq0W0EYkQmhzM5LSe7qljUGadR7Kx9388W9IqVS5//xhTAVD4COz+QHWQRKmnSp
p4cLz2037jCGEIWgrGnrDuPztVAC5zUG8xuKx4KRjaIn6s4mVTlAptbroQIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFI4z5D5xDr8FZwAINtEpu9oWtfNvMB8GA1UdIwQY
MBaAFJyT64p9Gf/XgEdlrP3PImDGwNZZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkpQcmluMFpfOWVBUjJXc19jOGlZTWJBMWxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9jM2M0NWYtNWYxYy00N2YyLTkxMGQt
Mzk2YWQ3MDEyMzBlLzEvampQa1BuRU92d1ZuQUFnMjBTbTcyaGExODI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9jM2M0NWYtNWYxYy00N2YyLTkxMGQtMzk2YWQ3MDEyMzBl
LzEvbkpQcmluMFpfOWVBUjJXc19jOGlZTWJBMWxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAeBAIAATAYAwQCbe08AwQC
uSv0AwQCuUogAwQCudaYMBQEAgACMA4DBQAqAXHgAwUDKgVIgDANBgkqhkiG9w0B
AQsFAAOCAQEAnoxvWiEX9IW6mSdjXy1HIBwYRJmSns3NjHhi6RNAlpdtYzbHf3lh
bUcmNUBtantbKHjwWSgrzP7cHDy5IslMaijmjYgmdwWOBx2o0Q29SnfBq18SCl98
PG8DrblweqeGghaaX8dZnCl7/hjl3fByzI3JPUSGA1a6Ue6XVIAmFAOwnx7vyja1
Qvo5R9itNSLG5UJFVxkJE7t/HpOMO6qKT00FEUCbgGA2gvKDAelq9mWI6xOBhi4l
SszxrcKFN1eVPec28z7H3aoPbOKD0TKhAk2JckX8ajDfaajH6HlVAEC3iaQx0lgb
JtO4pkdgp1ZjKLKd84qKdlf7XQeqpxXgcg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:52:51 2025 by rpki-client