Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/9JKRkQ6tixRwrA_H5DjUUwh-ctU.roa
File: 9JKRkQ6tixRwrA_H5DjUUwh-ctU.roa (raw, json)
Hash identifier: 1YzNRCBg6x+18WuRd9cXRg3/XpSac8PJp6N6ff66a+c=
Subject key identifier: F4:92:91:91:0E:AD:8B:14:70:AC:0F:C7:E4:38:D4:53:08:7E:72:D5
Certificate issuer: /CN=5f08dc10218ac6db79430ae7c44515590417d605
Certificate serial: 019427486A9629E81BF29D215131D16910FF
Authority key identifier: 5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/9JKRkQ6tixRwrA_H5DjUUwh-ctU.roa
Signing time: Thu 02 Jan 2025 13:50:44 +0000
ROA not before: Thu 02 Jan 2025 13:50:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200554
IP address blocks: 176.101.32.0/20 maxlen: 20
176.101.32.0/24 maxlen: 24
176.101.33.0/24 maxlen: 24
176.101.34.0/24 maxlen: 24
176.101.35.0/24 maxlen: 24
176.101.36.0/24 maxlen: 24
176.101.37.0/24 maxlen: 24
176.101.38.0/24 maxlen: 24
176.101.39.0/24 maxlen: 24
176.101.40.0/24 maxlen: 24
176.101.41.0/24 maxlen: 24
176.101.42.0/24 maxlen: 24
176.101.43.0/24 maxlen: 24
176.101.44.0/24 maxlen: 24
176.101.45.0/24 maxlen: 24
176.101.46.0/24 maxlen: 24
176.101.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:6a:96:29:e8:1b:f2:9d:21:51:31:d1:69:10:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f08dc10218ac6db79430ae7c44515590417d605
Validity
Not Before: Jan 2 13:50:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f49291910ead8b1470ac0fc7e438d453087e72d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:25:15:9c:85:65:89:c9:ae:19:9c:df:ef:05:
8a:15:e1:a5:65:ef:85:de:16:64:a1:ab:28:51:cd:
9f:2a:9a:0b:7c:86:f5:ac:0e:e2:95:71:cc:88:c9:
23:d2:26:50:36:9d:3a:7a:23:90:93:1b:6a:84:a8:
64:3f:b3:fc:b2:0e:70:08:9a:c0:38:3f:b8:0b:47:
0a:e8:19:0f:0a:e5:4b:21:c3:bd:0e:4c:9b:46:2f:
6e:f5:6c:ae:50:df:bd:66:f8:8b:4e:6d:22:88:aa:
82:9e:b4:3e:25:d5:28:78:17:66:1b:65:38:ae:7c:
0f:46:44:fb:bd:a9:db:b4:d8:42:f4:94:4c:62:0b:
e2:ea:b7:ef:cf:fe:95:19:08:b0:36:ac:02:38:d2:
a8:88:18:da:88:09:db:fd:75:9e:1d:46:a7:b3:33:
5f:87:4b:16:8a:84:2c:17:35:12:74:cc:4d:54:d5:
18:24:9b:20:5d:58:51:5d:a0:44:38:f2:76:b5:a6:
db:8b:e1:7e:47:26:32:df:3d:30:fa:e3:f7:be:cd:
4a:3d:85:ff:ae:d8:83:98:95:bb:35:30:ad:24:32:
27:76:04:5e:31:d9:86:5f:69:55:80:cf:d1:78:98:
30:4c:66:1a:ac:7f:c9:05:a4:15:b5:34:60:4a:76:
d5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:92:91:91:0E:AD:8B:14:70:AC:0F:C7:E4:38:D4:53:08:7E:72:D5
X509v3 Authority Key Identifier:
keyid:5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/9JKRkQ6tixRwrA_H5DjUUwh-ctU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.101.32.0/20
Signature Algorithm: sha256WithRSAEncryption
94:57:7c:3b:92:c2:06:1e:90:d7:49:fc:9b:52:b0:75:3b:69:
d0:e5:69:37:cc:eb:8a:32:fa:43:91:6f:5a:fa:55:1f:95:fa:
29:c0:3e:d0:ac:a0:b6:f4:21:f5:14:e6:e9:9a:18:33:b4:09:
e8:de:01:44:c2:28:6c:e5:b5:0c:af:b8:ac:05:ed:46:b6:23:
37:1d:82:76:68:66:ef:96:5d:eb:00:47:27:6d:be:ad:11:78:
cc:13:d2:10:34:1a:c9:02:06:93:7c:7f:19:2d:e4:2f:30:20:
8b:46:fb:da:15:48:83:5e:1e:0f:66:c0:89:3b:64:3e:4c:dc:
15:50:46:6c:ec:8b:e6:f9:00:b1:ae:e0:44:9c:e7:8d:96:1c:
37:3f:a2:76:29:d7:44:31:0c:2c:4c:de:22:3b:fe:ac:5e:58:
d9:3e:b3:62:ec:e3:e3:9c:5c:3d:c9:78:46:1d:9c:90:39:5d:
04:d1:f4:64:e3:d9:ce:cf:24:67:3e:d8:34:69:86:84:cc:22:
da:9a:e1:42:f7:d5:7c:c2:fa:99:1a:de:0e:97:e3:51:ef:9a:
d0:96:fa:29:8b:a1:d5:32:66:83:e4:38:40:30:6a:c6:6d:b9:
dd:09:9f:8d:d9:95:ad:92:be:02:12:11:54:69:1d:ec:4c:00:
d7:e2:64:b1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSGqWKegb8p0hUTHRaRD/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMDhkYzEwMjE4YWM2ZGI3OTQzMGFlN2M0NDUxNTU5MDQx
N2Q2MDUwHhcNMjUwMTAyMTM1MDQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDkyOTE5MTBlYWQ4YjE0NzBhYzBmYzdlNDM4ZDQ1MzA4N2U3MmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryUVnIVlicmuGZzf7wWKFeGlZe+F
3hZkoasoUc2fKpoLfIb1rA7ilXHMiMkj0iZQNp06eiOQkxtqhKhkP7P8sg5wCJrA
OD+4C0cK6BkPCuVLIcO9DkybRi9u9WyuUN+9ZviLTm0iiKqCnrQ+JdUoeBdmG2U4
rnwPRkT7vanbtNhC9JRMYgvi6rfvz/6VGQiwNqwCONKoiBjaiAnb/XWeHUanszNf
h0sWioQsFzUSdMxNVNUYJJsgXVhRXaBEOPJ2tabbi+F+RyYy3z0w+uP3vs1KPYX/
rtiDmJW7NTCtJDIndgReMdmGX2lVgM/ReJgwTGYarH/JBaQVtTRgSnbVxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPSSkZEOrYsUcKwPx+Q41FMIfnLVMB8GA1UdIwQY
MBaAFF8I3BAhisbbeUMK58RFFVkEF9YFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHdqY0VDR0t4dHQ1UXdybnhFVVZXUVFYMWdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9kODE3NDUtNjU4ZC00YTc0LTkyZjct
NWQzYTQyMWEwZjEwLzEvOUpLUmtRNnRpeFJ3ckFfSDVEalVVd2gtY3RVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9kODE3NDUtNjU4ZC00YTc0LTkyZjctNWQzYTQyMWEwZjEw
LzEvWHdqY0VDR0t4dHQ1UXdybnhFVVZXUVFYMWdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEsGUgMA0G
CSqGSIb3DQEBCwUAA4IBAQCUV3w7ksIGHpDXSfybUrB1O2nQ5Wk3zOuKMvpDkW9a
+lUflfopwD7QrKC29CH1FObpmhgztAno3gFEwihs5bUMr7isBe1GtiM3HYJ2aGbv
ll3rAEcnbb6tEXjME9IQNBrJAgaTfH8ZLeQvMCCLRvvaFUiDXh4PZsCJO2Q+TNwV
UEZs7Ivm+QCxruBEnOeNlhw3P6J2KddEMQwsTN4iO/6sXljZPrNi7OPjnFw9yXhG
HZyQOV0E0fRk49nOzyRnPtg0aYaEzCLamuFC99V8wvqZGt4Ol+NR75rQlvopi6HV
MmaD5DhAMGrGbbndCZ+N2ZWtkr4CEhFUaR3sTADX4mSx
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:32:56 2025 by rpki-client