Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/JkkRBzU6KqC4iLmQvNFLg1pZbqQ.roa
File: JkkRBzU6KqC4iLmQvNFLg1pZbqQ.roa (raw, json)
Hash identifier: qQIWTHDKXS9dJmmc6TGCroCf2SQogHaE6HLb5eCxiv8=
Subject key identifier: 26:49:11:07:35:3A:2A:A0:B8:88:B9:90:BC:D1:4B:83:5A:59:6E:A4
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 019425FCDBD15DA63E7FDB91DDAF7ED2091F
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/JkkRBzU6KqC4iLmQvNFLg1pZbqQ.roa
Signing time: Thu 02 Jan 2025 07:48:35 +0000
ROA not before: Thu 02 Jan 2025 07:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8100
IP address blocks: 79.98.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:db:d1:5d:a6:3e:7f:db:91:dd:af:7e:d2:09:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 2 07:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26491107353a2aa0b888b990bcd14b835a596ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5b:dc:0f:cb:5b:f4:61:e2:38:89:9a:06:57:
6a:ee:c9:a1:dd:9b:48:1f:65:99:f6:ad:4f:73:c2:
20:cb:1d:00:49:9a:53:bf:e8:df:c0:2b:f4:15:c2:
dd:05:25:cb:d7:88:07:71:aa:65:9b:0b:ca:1a:0b:
ba:ff:8f:35:df:56:f8:65:2c:12:40:b3:b8:21:1c:
85:74:86:cf:5d:c0:72:c5:84:49:1f:c1:72:91:f5:
0f:15:0e:09:77:b2:df:7b:ee:e3:c5:03:68:0e:4f:
ba:f8:ba:1e:7b:c7:80:4f:90:36:fd:05:1d:4e:f0:
16:9a:f1:ea:90:23:2e:e6:a2:0b:ed:ba:95:1e:2a:
29:f2:0d:46:7a:b8:92:7f:7a:ad:7e:e4:b4:97:da:
75:4e:7c:3e:47:54:73:a2:79:c3:ff:32:0c:1f:03:
de:48:31:d5:ef:54:d0:f1:e8:97:27:cd:e6:11:13:
5a:d2:c8:8f:2c:ca:b5:74:aa:56:26:ca:54:5e:70:
26:73:cb:98:40:dc:75:90:59:37:04:33:17:c0:1f:
80:e9:7c:2e:48:45:37:d0:3e:58:2a:6b:bc:a2:a9:
0e:29:f5:fa:8d:03:24:6f:0f:26:c0:cb:13:2b:9e:
6f:dd:1a:c9:84:89:5a:89:61:ab:11:7a:c9:f5:6b:
de:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:49:11:07:35:3A:2A:A0:B8:88:B9:90:BC:D1:4B:83:5A:59:6E:A4
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/JkkRBzU6KqC4iLmQvNFLg1pZbqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.180.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:cd:c0:bc:d3:2f:63:f9:48:5c:de:2c:a5:fa:ea:a2:75:9f:
6f:32:df:c1:6f:a7:ca:3d:a2:d6:38:4d:64:cf:2f:9a:c9:c1:
44:44:42:65:b7:65:ae:29:9b:50:72:ee:c9:ac:be:98:68:3e:
07:49:db:f2:0e:c5:f8:72:23:34:eb:9f:0c:31:d3:b9:46:19:
86:32:7d:fb:71:55:29:1c:4d:a6:71:ba:b0:70:ba:84:ec:99:
77:5f:2a:5d:1c:d8:e8:0b:ae:18:86:15:67:a8:91:22:bb:9e:
c1:4d:ea:8b:a4:71:6f:18:b1:c4:a6:2a:7b:00:a3:f1:65:03:
79:56:a2:68:7b:43:e5:a5:11:40:0a:0a:fc:1f:51:3b:b0:31:
48:da:a1:c9:50:0e:cc:3d:30:cb:f9:be:e0:1c:eb:aa:0e:f7:
96:d7:74:1b:68:d7:46:73:fc:46:89:a2:8b:ac:d0:18:e3:9a:
45:3a:78:c8:51:b2:6e:69:d2:c2:ac:26:e7:83:4c:b2:80:02:
a3:3e:ce:44:33:bb:2b:fa:64:2b:42:a3:18:2d:f5:1e:29:2f:
0a:75:ac:ed:69:06:d9:63:04:d5:3a:aa:10:95:ce:96:17:04:
09:54:22:58:29:88:3e:10:8b:a0:e8:c0:cd:21:88:48:68:f9:
0c:1c:7e:b5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/NvRXaY+f9uR3a9+0gkfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy
ZGJmMDcwHhcNMjUwMTAyMDc0ODM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjQ5MTEwNzM1M2EyYWEwYjg4OGI5OTBiY2QxNGI4MzVhNTk2ZWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFvcD8tb9GHiOImaBldq7smh3ZtI
H2WZ9q1Pc8Igyx0ASZpTv+jfwCv0FcLdBSXL14gHcaplmwvKGgu6/48131b4ZSwS
QLO4IRyFdIbPXcByxYRJH8FykfUPFQ4Jd7Lfe+7jxQNoDk+6+Loee8eAT5A2/QUd
TvAWmvHqkCMu5qIL7bqVHiop8g1GeriSf3qtfuS0l9p1Tnw+R1RzonnD/zIMHwPe
SDHV71TQ8eiXJ83mERNa0siPLMq1dKpWJspUXnAmc8uYQNx1kFk3BDMXwB+A6Xwu
SEU30D5YKmu8oqkOKfX6jQMkbw8mwMsTK55v3RrJhIlaiWGrEXrJ9Wve7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCZJEQc1OiqguIi5kLzRS4NaWW6kMB8GA1UdIwQY
MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt
ZjNlNTA2YWVhYTAxLzEvSmtrUkJ6VTZLcUM0aUxtUXZORkxnMXBaYnFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx
LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT2K0MA0G
CSqGSIb3DQEBCwUAA4IBAQAtzcC80y9j+Uhc3iyl+uqidZ9vMt/Bb6fKPaLWOE1k
zy+aycFEREJlt2WuKZtQcu7JrL6YaD4HSdvyDsX4ciM0658MMdO5RhmGMn37cVUp
HE2mcbqwcLqE7Jl3XypdHNjoC64YhhVnqJEiu57BTeqLpHFvGLHEpip7AKPxZQN5
VqJoe0PlpRFACgr8H1E7sDFI2qHJUA7MPTDL+b7gHOuqDveW13QbaNdGc/xGiaKL
rNAY45pFOnjIUbJuadLCrCbng0yygAKjPs5EM7sr+mQrQqMYLfUeKS8KdaztaQbZ
YwTVOqoQlc6WFwQJVCJYKYg+EIug6MDNIYhIaPkMHH61
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:02:27 2025 by rpki-client