Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/rJdrJhQQmpxY59M8JPVpH2s71pI.roa
File: rJdrJhQQmpxY59M8JPVpH2s71pI.roa (raw, json)
Hash identifier: xxb6VYq/XoyduiRjX57bX/HD20WZN47aVhzULOuwKsc=
Subject key identifier: AC:97:6B:26:14:10:9A:9C:58:E7:D3:3C:24:F5:69:1F:6B:3B:D6:92
Certificate issuer: /CN=facf153f24fa8d3214cd7c6e250d4b19f506722b
Certificate serial: 019420D5A569A983CC4BD3AC9B7FA019ADDD
Authority key identifier: FA:CF:15:3F:24:FA:8D:32:14:CD:7C:6E:25:0D:4B:19:F5:06:72:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/rJdrJhQQmpxY59M8JPVpH2s71pI.roa
Signing time: Wed 01 Jan 2025 07:47:39 +0000
ROA not before: Wed 01 Jan 2025 07:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198970
IP address blocks: 185.159.116.0/24 maxlen: 24
185.159.117.0/24 maxlen: 24
185.159.118.0/24 maxlen: 24
185.159.119.0/24 maxlen: 24
194.49.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:a5:69:a9:83:cc:4b:d3:ac:9b:7f:a0:19:ad:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facf153f24fa8d3214cd7c6e250d4b19f506722b
Validity
Not Before: Jan 1 07:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac976b2614109a9c58e7d33c24f5691f6b3bd692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:b9:bc:75:48:07:f5:a2:45:ed:c1:ed:90:64:
db:d6:e5:8d:66:57:ab:ac:bb:fb:11:3f:0e:67:3c:
cc:11:bc:0c:d1:33:9b:fc:89:f9:e5:cf:c7:2d:24:
ba:68:0a:1c:d0:bc:69:7f:1f:63:bb:d6:76:fe:3b:
91:d3:d8:52:45:09:3c:6d:73:75:99:b6:1a:63:c7:
fb:85:6a:66:39:fb:0a:02:d8:6c:fc:42:21:8c:ac:
4b:9d:97:c8:b8:69:51:e1:f4:b8:54:e6:98:23:cc:
65:44:26:4c:c2:d8:f3:0b:26:5e:f7:16:f5:8a:e7:
9a:1e:81:06:e3:ef:61:26:18:7f:53:e4:d8:28:f0:
13:32:a8:51:0d:0a:23:ee:61:75:74:6a:70:b4:6a:
02:40:82:84:41:02:53:6c:08:38:3d:56:b1:bf:93:
ac:b6:8d:ca:3e:d5:6a:f0:45:78:99:83:28:1b:79:
16:e0:42:52:f3:c3:ce:22:01:ab:16:31:bc:a2:6b:
2b:10:10:e2:24:a0:cb:aa:c5:9d:5d:ca:8f:4b:2d:
d3:49:6c:5a:9f:88:53:49:42:8f:3f:30:92:c9:e4:
05:df:9b:2f:db:88:48:88:f7:21:61:2f:35:27:b7:
dd:13:a0:3c:72:7b:13:6b:c1:cf:20:48:a3:fd:44:
19:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:97:6B:26:14:10:9A:9C:58:E7:D3:3C:24:F5:69:1F:6B:3B:D6:92
X509v3 Authority Key Identifier:
keyid:FA:CF:15:3F:24:FA:8D:32:14:CD:7C:6E:25:0D:4B:19:F5:06:72:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/rJdrJhQQmpxY59M8JPVpH2s71pI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.116.0/22
194.49.126.0/24
Signature Algorithm: sha256WithRSAEncryption
42:89:d3:57:89:19:98:01:4b:39:c7:1e:b8:0f:27:e4:d4:38:
68:d5:ae:c2:7a:7b:f3:22:ab:b3:5a:dc:35:1b:83:06:f1:f0:
b0:ed:39:53:39:ca:df:72:56:11:20:2c:26:47:04:be:b9:4f:
ec:4e:82:86:38:e1:7d:d3:b1:ef:b2:eb:57:17:ef:60:79:68:
e7:61:e6:23:e1:d8:5f:60:25:18:dc:d4:dd:6c:6d:f0:e1:92:
c0:a4:3e:61:f1:7b:9f:c1:77:bb:32:c9:fb:c5:5c:c2:49:d5:
98:4c:e8:f1:fd:7d:1e:a2:b4:cd:ef:0b:1a:61:42:46:99:ed:
65:f2:de:a5:47:a3:70:de:ff:b0:de:2c:63:b9:4a:92:84:7d:
bc:40:10:48:b6:d5:42:ac:38:83:e7:01:6d:8d:07:02:06:0b:
8d:76:d0:02:9a:af:c7:1d:51:4d:e6:c8:64:12:3c:dc:56:3a:
6a:a7:28:62:fe:35:a2:fa:16:50:fa:08:a0:87:63:d1:7d:77:
da:74:15:4d:a0:ea:4a:96:b6:d7:7f:b9:2b:22:da:18:a2:e9:
9b:28:f9:c4:23:8b:34:44:ca:7e:bc:ca:2e:3f:e2:6f:d2:cb:
75:1b:14:27:f5:a1:fe:5d:d5:48:95:ea:32:ba:56:3e:02:47:
2d:c3:f6:0b
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQg1aVpqYPMS9Osm3+gGa3dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhY2YxNTNmMjRmYThkMzIxNGNkN2M2ZTI1MGQ0YjE5ZjUw
NjcyMmIwHhcNMjUwMTAxMDc0NzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzk3NmIyNjE0MTA5YTljNThlN2QzM2MyNGY1NjkxZjZiM2JkNjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+bm8dUgH9aJF7cHtkGTb1uWNZler
rLv7ET8OZzzMEbwM0TOb/In55c/HLSS6aAoc0Lxpfx9ju9Z2/juR09hSRQk8bXN1
mbYaY8f7hWpmOfsKAths/EIhjKxLnZfIuGlR4fS4VOaYI8xlRCZMwtjzCyZe9xb1
iueaHoEG4+9hJhh/U+TYKPATMqhRDQoj7mF1dGpwtGoCQIKEQQJTbAg4PVaxv5Os
to3KPtVq8EV4mYMoG3kW4EJS88POIgGrFjG8omsrEBDiJKDLqsWdXcqPSy3TSWxa
n4hTSUKPPzCSyeQF35sv24hIiPchYS81J7fdE6A8cnsTa8HPIEij/UQZhQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFKyXayYUEJqcWOfTPCT1aR9rO9aSMB8GA1UdIwQY
MBaAFPrPFT8k+o0yFM18biUNSxn1BnIrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1zOFZQeVQ2alRJVXpYeHVKUTFMR2ZVR2Npcy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEvODYyMWU0LWU5YTktNGI2NC05NjQ4
LTlhYTczNzJiNjE2ZC8xL3JKZHJKaFFRbXB4WTU5TThKUFZwSDJzNzFwSS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvODEvODYyMWU0LWU5YTktNGI2NC05NjQ4LTlhYTczNzJiNjE2
ZC8xLzEtczhWUHlUNmpUSVV6WHh1SlExTEdmVUdjaXMuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAK5n3QD
BADCMX4wDQYJKoZIhvcNAQELBQADggEBAEKJ01eJGZgBSznHHrgPJ+TUOGjVrsJ6
e/Miq7Na3DUbgwbx8LDtOVM5yt9yVhEgLCZHBL65T+xOgoY44X3Tse+y61cX72B5
aOdh5iPh2F9gJRjc1N1sbfDhksCkPmHxe5/Bd7syyfvFXMJJ1ZhM6PH9fR6itM3v
CxphQkaZ7WXy3qVHo3De/7DeLGO5SpKEfbxAEEi21UKsOIPnAW2NBwIGC4120AKa
r8cdUU3myGQSPNxWOmqnKGL+NaL6FlD6CKCHY9F9d9p0FU2g6kqWttd/uSsi2hii
6Zso+cQjizREyn68yi4/4m/Sy3UbFCf1of5d1UiV6jK6Vj4CRy3D9gs=
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:48:27 2025 by rpki-client