Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/Jlwx3OkqteG7TytH__A5IIms7uY.roa
File: Jlwx3OkqteG7TytH__A5IIms7uY.roa (raw, json)
Hash identifier: LvVJ+IGo9WZz2zY5/7uD9m+7ATZ7Bpz+TyIJBHLFfQ8=
Subject key identifier: 26:5C:31:DC:E9:2A:B5:E1:BB:4F:2B:47:FF:F0:39:20:89:AC:EE:E6
Certificate issuer: /CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Certificate serial: 019427B5B6CFBCC4037D6B09EBBF824D66C4
Authority key identifier: 2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/Jlwx3OkqteG7TytH__A5IIms7uY.roa
Signing time: Thu 02 Jan 2025 15:50:07 +0000
ROA not before: Thu 02 Jan 2025 15:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198735
IP address blocks: 5.1.104.0/21 maxlen: 21
5.1.104.0/24 maxlen: 24
5.1.105.0/24 maxlen: 24
5.1.106.0/24 maxlen: 24
5.1.107.0/24 maxlen: 24
5.1.108.0/24 maxlen: 24
5.1.109.0/24 maxlen: 24
5.1.110.0/24 maxlen: 24
5.1.111.0/24 maxlen: 24
217.145.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:b6:cf:bc:c4:03:7d:6b:09:eb:bf:82:4d:66:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Validity
Not Before: Jan 2 15:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=265c31dce92ab5e1bb4f2b47fff0392089aceee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1d:2f:a9:f8:14:1d:78:b8:b5:ff:1a:93:59:
6c:3a:32:9a:f0:06:0e:5e:33:49:2e:9b:81:b6:31:
a1:ef:10:a3:74:6d:26:5b:07:99:cd:f4:41:fe:16:
0e:09:c3:b4:b8:ab:7b:0a:85:88:55:2b:9c:49:9b:
f7:04:ec:29:c3:a2:9b:71:54:60:73:d6:15:c0:43:
c8:65:b3:9b:fa:2b:3b:91:55:0c:6b:97:5f:83:ef:
ec:fc:06:55:9e:de:9c:41:0d:02:c8:5d:a0:99:7a:
fd:a3:c0:79:c6:08:5d:08:b1:88:76:ea:87:6d:7d:
ce:57:b9:78:12:88:83:56:4f:7c:b1:73:7a:7a:69:
a8:52:95:7f:9d:22:f0:a5:28:ca:88:4f:cd:48:9c:
a4:0f:83:ae:88:d9:df:0e:6a:c7:76:23:94:6e:68:
d1:83:4b:9b:0b:e7:db:b1:1a:ab:a3:24:20:07:aa:
65:80:81:c7:95:9f:c5:9f:f9:75:81:bf:b5:cb:31:
0d:7e:48:7e:44:d1:93:b6:86:3b:a9:de:a6:5d:50:
2d:f3:ff:bf:ab:d1:31:58:b3:68:e7:e7:55:8b:d8:
62:e3:f3:97:d6:67:cf:50:5b:3a:e0:ae:16:05:17:
45:a8:d5:fc:82:56:8f:ed:1f:13:a9:b1:bb:2d:e8:
9a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:5C:31:DC:E9:2A:B5:E1:BB:4F:2B:47:FF:F0:39:20:89:AC:EE:E6
X509v3 Authority Key Identifier:
keyid:2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/Jlwx3OkqteG7TytH__A5IIms7uY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.104.0/21
217.145.231.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:eb:b3:3e:5e:77:a2:0c:8a:cf:9b:d2:34:a0:ad:3b:59:73:
36:02:a5:fc:6d:67:e3:af:09:48:72:aa:53:a7:6e:97:55:9e:
28:e7:d4:8c:82:68:a1:6b:41:c0:c3:f3:66:9a:c3:c5:3d:74:
7d:dc:dc:f2:b9:a2:f7:48:c0:9d:89:2b:84:15:f3:81:ba:ca:
a3:1e:7d:69:bf:67:58:5e:c8:25:5c:01:b0:30:75:c7:ba:ac:
9a:40:30:62:4f:a6:1c:d6:ff:d0:f4:42:09:b2:bc:10:e7:dc:
fb:bc:8e:f3:5c:e5:50:e0:5d:17:d2:b9:ff:5b:3a:21:3d:37:
74:42:87:8d:98:46:fa:a6:e8:0a:f1:d5:0a:aa:f2:fa:d9:d2:
ad:65:48:70:72:6a:c6:b0:19:a2:c0:3b:d0:ca:fb:02:58:81:
c5:a1:4f:12:d1:5e:1a:bc:1a:b4:b1:a8:5e:57:1b:4b:32:1c:
77:e0:9a:7e:11:2b:b8:66:d5:25:f4:d2:e8:92:da:fb:c5:8a:
3a:b6:2b:ed:b8:b8:29:40:6d:ad:c7:62:53:8f:3b:ad:a5:27:
81:b1:66:c0:33:fd:21:f2:0e:af:10:08:be:cd:2b:1c:1c:c0:
7e:31:76:73:9c:ef:dd:a0:f2:73:de:47:15:40:43:0e:35:37:
ad:9a:fe:68
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQntbbPvMQDfWsJ67+CTWbEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMjhjZmEzZmQyZGE5Y2FhYTY1OTI4NDc1OGRlZTY3MDk5
OTM0ZjgwHhcNMjUwMTAyMTU1MDA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjVjMzFkY2U5MmFiNWUxYmI0ZjJiNDdmZmYwMzkyMDg5YWNlZWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwR0vqfgUHXi4tf8ak1lsOjKa8AYO
XjNJLpuBtjGh7xCjdG0mWweZzfRB/hYOCcO0uKt7CoWIVSucSZv3BOwpw6KbcVRg
c9YVwEPIZbOb+is7kVUMa5dfg+/s/AZVnt6cQQ0CyF2gmXr9o8B5xghdCLGIduqH
bX3OV7l4EoiDVk98sXN6emmoUpV/nSLwpSjKiE/NSJykD4OuiNnfDmrHdiOUbmjR
g0ubC+fbsRqroyQgB6plgIHHlZ/Fn/l1gb+1yzENfkh+RNGTtoY7qd6mXVAt8/+/
q9ExWLNo5+dVi9hi4/OX1mfPUFs64K4WBRdFqNX8glaP7R8TqbG7LeiaVQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCZcMdzpKrXhu08rR//wOSCJrO7mMB8GA1UdIwQY
MBaAFC0oz6P9LanKqmWShHWN7mcJmTT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFNqUG9fMHRxY3FxWlpLRWRZM3Vad21aTlBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mZWJhYjAtZDkzYS00NzA0LTlhNzEt
M2FkNTJlOGI5NjI4LzEvSmx3eDNPa3F0ZUc3VHl0SF9fQTVJSW1zN3VZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9mZWJhYjAtZDkzYS00NzA0LTlhNzEtM2FkNTJlOGI5NjI4
LzEvTFNqUG9fMHRxY3FxWlpLRWRZM3Vad21aTlBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDBQFoAwQA
2ZHnMA0GCSqGSIb3DQEBCwUAA4IBAQDP67M+XneiDIrPm9I0oK07WXM2AqX8bWfj
rwlIcqpTp26XVZ4o59SMgmiha0HAw/NmmsPFPXR93NzyuaL3SMCdiSuEFfOBusqj
Hn1pv2dYXsglXAGwMHXHuqyaQDBiT6Yc1v/Q9EIJsrwQ59z7vI7zXOVQ4F0X0rn/
WzohPTd0QoeNmEb6pugK8dUKqvL62dKtZUhwcmrGsBmiwDvQyvsCWIHFoU8S0V4a
vBq0saheVxtLMhx34Jp+ESu4ZtUl9NLoktr7xYo6tivtuLgpQG2tx2JTjzutpSeB
sWbAM/0h8g6vEAi+zSscHMB+MXZznO/doPJz3kcVQEMONTetmv5o
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:22:41 2025 by rpki-client