Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/jcQt-MOzJfjybIamiUioFB-oBn4.roa
File: jcQt-MOzJfjybIamiUioFB-oBn4.roa (raw, json)
Hash identifier: vxzopxc1UXJfcspNz3GsRCac77+K0gwBOQSeqjgarpw=
Subject key identifier: 8D:C4:2D:F8:C3:B3:25:F8:F2:6C:86:A6:89:48:A8:14:1F:A8:06:7E
Certificate issuer: /CN=5dc87309876cec404f007bf6da0434c0bdc62d8b
Certificate serial: 019421439EB7C8A70447F8E3E6313639D3A8
Authority key identifier: 5D:C8:73:09:87:6C:EC:40:4F:00:7B:F6:DA:04:34:C0:BD:C6:2D:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XchzCYds7EBPAHv22gQ0wL3GLYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/jcQt-MOzJfjybIamiUioFB-oBn4.roa
Signing time: Wed 01 Jan 2025 09:47:47 +0000
ROA not before: Wed 01 Jan 2025 09:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41821
IP address blocks: 185.210.80.0/22 maxlen: 24
2a0b:6040::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:9e:b7:c8:a7:04:47:f8:e3:e6:31:36:39:d3:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc87309876cec404f007bf6da0434c0bdc62d8b
Validity
Not Before: Jan 1 09:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8dc42df8c3b325f8f26c86a68948a8141fa8067e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fb:49:d8:28:8a:60:81:88:b4:93:6a:96:78:
99:31:eb:a9:0d:7e:53:97:48:16:bc:a3:4e:a5:a5:
94:d8:69:6b:8d:8d:bb:b7:cc:23:1c:26:0b:26:fa:
b1:67:3b:0b:24:96:73:56:75:fd:5c:ba:b6:bd:81:
63:96:34:b9:5f:98:50:f7:3b:81:b5:d7:ae:12:63:
63:ab:0c:e4:34:55:03:82:4e:3a:17:f3:56:4d:07:
e1:f2:42:99:30:89:3f:79:67:e1:2e:4e:fc:65:db:
79:e4:ce:86:74:ec:4f:30:9e:ac:33:99:81:d5:43:
2f:3d:bc:c4:e0:9e:62:32:0b:c1:80:61:c5:85:81:
bb:df:e9:b4:e9:b6:01:93:34:fc:d6:d1:7a:c4:5e:
53:8f:6a:94:07:f1:fa:45:bb:1b:6e:e7:40:82:10:
ee:c2:af:f7:2b:7c:cd:8e:78:c7:95:cd:27:73:66:
15:a8:1b:83:e3:72:87:e9:a3:bb:59:b1:97:6f:70:
87:b4:65:f7:37:a1:e3:3d:63:8a:4e:f6:3a:83:4f:
2c:96:90:2f:de:cc:a2:41:1a:2e:ff:84:70:74:fe:
08:b6:d1:53:ce:fa:4f:42:3f:f1:a7:7d:d1:c7:16:
58:55:cd:62:28:ef:e1:b1:a3:da:1e:63:af:cc:a2:
11:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C4:2D:F8:C3:B3:25:F8:F2:6C:86:A6:89:48:A8:14:1F:A8:06:7E
X509v3 Authority Key Identifier:
keyid:5D:C8:73:09:87:6C:EC:40:4F:00:7B:F6:DA:04:34:C0:BD:C6:2D:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XchzCYds7EBPAHv22gQ0wL3GLYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/jcQt-MOzJfjybIamiUioFB-oBn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/XchzCYds7EBPAHv22gQ0wL3GLYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.80.0/22
IPv6:
2a0b:6040::/32
Signature Algorithm: sha256WithRSAEncryption
32:37:b4:e0:ce:ee:fe:23:ba:b1:77:fc:f8:2c:67:00:6d:ea:
66:6c:b8:6c:4d:88:17:9e:92:bd:bf:80:43:67:74:f4:96:40:
9c:45:9b:35:06:c4:1a:a1:cc:4c:65:6d:db:0a:72:2e:eb:91:
00:fe:fe:65:8f:a4:a2:6e:f5:fa:02:2f:ce:36:06:6b:92:ee:
18:c5:71:5f:d1:c4:9d:3e:98:ae:37:3f:23:0f:b1:8a:56:83:
d0:9a:76:37:0f:6c:5a:02:9b:b4:20:c5:7d:ab:9e:f3:94:66:
52:3a:d5:53:72:58:46:bd:15:33:79:fa:b6:c3:ee:87:85:8d:
a7:09:9f:a9:8e:29:16:64:15:59:7a:50:a8:a3:44:37:78:60:
46:76:7a:3d:58:e5:ea:73:d1:b6:0a:df:8b:f4:8c:db:6b:87:
54:e4:8e:18:8a:fc:88:30:db:b1:c0:7b:c2:39:20:2a:aa:0d:
8c:13:3f:59:d9:52:b5:8e:1b:f0:2f:ca:38:b7:34:74:a5:ef:
fb:5d:b1:f2:17:1e:ed:74:13:01:c1:dd:4c:ec:72:51:00:2e:
1f:ce:0f:b3:75:b3:6b:56:ce:99:d9:d2:93:c0:25:a6:64:de:
a6:1e:75:aa:e3:aa:5d:12:b9:0d:6b:b0:af:d0:4b:09:a7:4d:
a1:88:fe:4a
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQhQ563yKcER/jj5jE2OdOoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYzg3MzA5ODc2Y2VjNDA0ZjAwN2JmNmRhMDQzNGMwYmRj
NjJkOGIwHhcNMjUwMTAxMDk0NzQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGM0MmRmOGMzYjMyNWY4ZjI2Yzg2YTY4OTQ4YTgxNDFmYTgwNjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPtJ2CiKYIGItJNqlniZMeupDX5T
l0gWvKNOpaWU2GlrjY27t8wjHCYLJvqxZzsLJJZzVnX9XLq2vYFjljS5X5hQ9zuB
tdeuEmNjqwzkNFUDgk46F/NWTQfh8kKZMIk/eWfhLk78Zdt55M6GdOxPMJ6sM5mB
1UMvPbzE4J5iMgvBgGHFhYG73+m06bYBkzT81tF6xF5Tj2qUB/H6RbsbbudAghDu
wq/3K3zNjnjHlc0nc2YVqBuD43KH6aO7WbGXb3CHtGX3N6HjPWOKTvY6g08slpAv
3syiQRou/4RwdP4IttFTzvpPQj/xp33RxxZYVc1iKO/hsaPaHmOvzKIRfQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFI3ELfjDsyX48myGpolIqBQfqAZ+MB8GA1UdIwQY
MBaAFF3IcwmHbOxATwB79toENMC9xi2LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGNoekNZZHM3RUJQQUh2MjJnUTB3TDNHTFlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi80NGRkOWYtNDg5MS00NWFlLTkwMzAt
OGRhODMxN2RlM2Y2LzEvamNRdC1NT3pKZmp5YklhbWlVaW9GQi1vQm40LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi80NGRkOWYtNDg5MS00NWFlLTkwMzAtOGRhODMxN2RlM2Y2
LzEvWGNoekNZZHM3RUJQQUh2MjJnUTB3TDNHTFlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCudJQMA0E
AgACMAcDBQAqC2BAMA0GCSqGSIb3DQEBCwUAA4IBAQAyN7Tgzu7+I7qxd/z4LGcA
bepmbLhsTYgXnpK9v4BDZ3T0lkCcRZs1BsQaocxMZW3bCnIu65EA/v5lj6SibvX6
Ai/ONgZrku4YxXFf0cSdPpiuNz8jD7GKVoPQmnY3D2xaApu0IMV9q57zlGZSOtVT
clhGvRUzefq2w+6HhY2nCZ+pjikWZBVZelCoo0Q3eGBGdno9WOXqc9G2Ct+L9Izb
a4dU5I4YivyIMNuxwHvCOSAqqg2MEz9Z2VK1jhvwL8o4tzR0pe/7XbHyFx7tdBMB
wd1M7HJRAC4fzg+zdbNrVs6Z2dKTwCWmZN6mHnWq46pdErkNa7Cv0EsJp02hiP5K
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:48:31 2025 by rpki-client