Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/j_n9Kg39TCshbmu8W1dk2NVjcFI.roa
File: j_n9Kg39TCshbmu8W1dk2NVjcFI.roa (raw, json)
Hash identifier: 56S9svTLKP+1FymtE0skXNThCYHX7pM3o2tRL4nBuW8=
Subject key identifier: 8F:F9:FD:2A:0D:FD:4C:2B:21:6E:6B:BC:5B:57:64:D8:D5:63:70:52
Certificate issuer: /CN=1bb29b3f158fa80710c12a58b69fb926098d5129
Certificate serial: 019420687274647931A24ECBD3A9EFBB6BBC
Authority key identifier: 1B:B2:9B:3F:15:8F:A8:07:10:C1:2A:58:B6:9F:B9:26:09:8D:51:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7KbPxWPqAcQwSpYtp-5JgmNUSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/j_n9Kg39TCshbmu8W1dk2NVjcFI.roa
Signing time: Wed 01 Jan 2025 05:48:23 +0000
ROA not before: Wed 01 Jan 2025 05:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47782
IP address blocks: 91.205.48.0/22 maxlen: 22
91.205.48.0/24 maxlen: 24
91.205.49.0/24 maxlen: 24
91.205.50.0/24 maxlen: 24
91.205.51.0/24 maxlen: 24
95.215.244.0/22 maxlen: 22
95.215.244.0/24 maxlen: 24
95.215.245.0/24 maxlen: 24
95.215.246.0/24 maxlen: 24
95.215.247.0/24 maxlen: 24
178.216.208.0/21 maxlen: 21
178.216.208.0/24 maxlen: 24
178.216.209.0/24 maxlen: 24
178.216.210.0/24 maxlen: 24
178.216.211.0/24 maxlen: 24
178.216.212.0/24 maxlen: 24
178.216.213.0/24 maxlen: 24
178.216.214.0/24 maxlen: 24
178.216.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:72:74:64:79:31:a2:4e:cb:d3:a9:ef:bb:6b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb29b3f158fa80710c12a58b69fb926098d5129
Validity
Not Before: Jan 1 05:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ff9fd2a0dfd4c2b216e6bbc5b5764d8d5637052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f1:20:b2:02:db:02:c6:69:30:18:ed:48:10:
46:11:e8:c1:66:ff:39:7a:2a:e5:4c:6d:c1:58:73:
9e:f7:b8:56:c1:79:f1:6a:24:d3:d1:85:87:a1:97:
17:ef:43:85:c8:f0:48:cf:7c:0e:50:3d:95:77:c0:
d1:3f:42:a6:08:67:ec:d8:37:67:8d:a2:9b:e7:23:
8a:49:94:89:85:74:9f:3e:67:83:e2:ad:44:ba:e5:
05:e5:75:95:fb:29:76:da:8e:cd:b9:05:a9:6a:13:
06:24:2c:b1:b5:d6:ec:1a:84:ca:30:e4:4d:67:d4:
8d:74:d0:c3:28:63:43:99:da:55:79:24:7a:cb:a9:
bb:73:7e:21:4b:1d:21:04:06:4f:67:a8:19:e7:d7:
66:ec:88:e4:ed:4f:aa:b7:e5:2d:e8:5b:52:f3:8e:
69:c1:ab:58:04:98:37:00:78:f0:d2:46:16:65:17:
7f:f5:c1:c5:bf:50:5d:09:98:28:e5:22:59:47:52:
54:3e:dc:1b:e3:ae:0a:8b:c3:c2:8c:e7:f0:7f:c5:
f9:a1:37:18:eb:ac:52:aa:ba:eb:e9:41:da:37:45:
a3:89:24:ae:60:f7:15:d0:dc:4a:89:f6:6e:60:ac:
2e:54:0c:94:fd:8a:11:6b:7e:79:b7:70:c3:3d:7e:
2e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F9:FD:2A:0D:FD:4C:2B:21:6E:6B:BC:5B:57:64:D8:D5:63:70:52
X509v3 Authority Key Identifier:
keyid:1B:B2:9B:3F:15:8F:A8:07:10:C1:2A:58:B6:9F:B9:26:09:8D:51:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7KbPxWPqAcQwSpYtp-5JgmNUSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/j_n9Kg39TCshbmu8W1dk2NVjcFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.48.0/22
95.215.244.0/22
178.216.208.0/21
Signature Algorithm: sha256WithRSAEncryption
80:ad:92:f5:62:35:b8:df:95:d1:53:a2:2b:68:02:9e:c0:87:
6e:fd:ab:6c:57:9c:f8:54:01:b8:7d:51:9a:99:56:7a:a4:b7:
f5:10:91:ea:77:1f:8d:87:96:4f:fe:fd:ff:d0:94:00:e2:96:
e3:1d:96:9b:cc:cd:2a:64:76:f0:1e:53:8c:85:bc:21:ae:69:
5b:5c:de:49:d6:0d:cc:b6:31:9a:3d:11:0a:41:23:d4:d6:79:
62:16:85:74:3e:90:47:c5:77:37:8f:8f:83:b2:13:2a:1e:39:
5f:72:c8:1c:67:78:a8:9a:f9:56:0e:c8:74:ea:38:60:59:f9:
28:c3:ec:25:37:da:76:81:c4:dd:68:ba:45:69:cc:55:a6:ac:
b8:ba:27:e1:89:dd:5f:38:59:c1:85:58:90:8c:11:c9:80:7d:
68:1e:cd:93:b5:90:cc:ac:08:ce:bc:42:fe:48:1b:a6:12:96:
a5:29:66:ca:e4:94:3d:ba:87:8e:78:46:8c:2f:4d:76:5f:6d:
be:7a:a6:ed:df:e2:ad:10:19:47:b6:0c:33:fd:d1:4e:a1:58:
0a:a4:bc:2e:5a:8a:52:c3:9f:3e:b2:e5:6c:e4:0d:07:e9:6e:
fc:1f:dc:f4:ef:05:ab:5f:a2:6f:20:cc:17:86:5a:db:f7:39:
af:56:34:86
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQgaHJ0ZHkxok7L06nvu2u8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYjI5YjNmMTU4ZmE4MDcxMGMxMmE1OGI2OWZiOTI2MDk4
ZDUxMjkwHhcNMjUwMTAxMDU0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmY5ZmQyYTBkZmQ0YzJiMjE2ZTZiYmM1YjU3NjRkOGQ1NjM3MDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovEgsgLbAsZpMBjtSBBGEejBZv85
eirlTG3BWHOe97hWwXnxaiTT0YWHoZcX70OFyPBIz3wOUD2Vd8DRP0KmCGfs2Ddn
jaKb5yOKSZSJhXSfPmeD4q1EuuUF5XWV+yl22o7NuQWpahMGJCyxtdbsGoTKMORN
Z9SNdNDDKGNDmdpVeSR6y6m7c34hSx0hBAZPZ6gZ59dm7Ijk7U+qt+Ut6FtS845p
watYBJg3AHjw0kYWZRd/9cHFv1BdCZgo5SJZR1JUPtwb464Ki8PCjOfwf8X5oTcY
66xSqrrr6UHaN0WjiSSuYPcV0NxKifZuYKwuVAyU/YoRa355t3DDPX4uMwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFI/5/SoN/UwrIW5rvFtXZNjVY3BSMB8GA1UdIwQY
MBaAFBuymz8Vj6gHEMEqWLafuSYJjVEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzdLYlB4V1BxQWNRd1NwWXRwLTVKZ21OVVNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi81NzNmMGItNTMyNS00MWQzLWI5ZmYt
OGY3ZDU2YjdiNDE3LzEval9uOUtnMzlUQ3NoYm11OFcxZGsyTlZqY0ZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi81NzNmMGItNTMyNS00MWQzLWI5ZmYtOGY3ZDU2YjdiNDE3
LzEvRzdLYlB4V1BxQWNRd1NwWXRwLTVKZ21OVVNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCW80wAwQC
X9f0AwQDstjQMA0GCSqGSIb3DQEBCwUAA4IBAQCArZL1YjW435XRU6IraAKewIdu
/atsV5z4VAG4fVGamVZ6pLf1EJHqdx+Nh5ZP/v3/0JQA4pbjHZabzM0qZHbwHlOM
hbwhrmlbXN5J1g3MtjGaPREKQSPU1nliFoV0PpBHxXc3j4+DshMqHjlfcsgcZ3io
mvlWDsh06jhgWfkow+wlN9p2gcTdaLpFacxVpqy4uifhid1fOFnBhViQjBHJgH1o
Hs2TtZDMrAjOvEL+SBumEpalKWbK5JQ9uoeOeEaML012X22+eqbt3+KtEBlHtgwz
/dFOoVgKpLwuWopSw58+suVs5A0H6W78H9z07wWrX6JvIMwXhlrb9zmvVjSG
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:24:47 2025 by rpki-client