Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/JauXkuBrJ-Jj9T7iuekamPiA2KM.roa
File: JauXkuBrJ-Jj9T7iuekamPiA2KM.roa (raw, json)
Hash identifier: +JxWUzvZHawG/TTDHvvjcR4tNCgM0dBRjS+5hf64dGM=
Subject key identifier: 25:AB:97:92:E0:6B:27:E2:63:F5:3E:E2:B9:E9:1A:98:F8:80:D8:A3
Certificate issuer: /CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Certificate serial: 01941FFA3C741AE6C4387976962985C8BC5D
Authority key identifier: CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/JauXkuBrJ-Jj9T7iuekamPiA2KM.roa
Signing time: Wed 01 Jan 2025 03:48:00 +0000
ROA not before: Wed 01 Jan 2025 03:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208011
IP address blocks: 194.156.190.0/23 maxlen: 24
194.156.198.0/23 maxlen: 24
2a0f:43c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:3c:74:1a:e6:c4:38:79:76:96:29:85:c8:bc:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Validity
Not Before: Jan 1 03:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25ab9792e06b27e263f53ee2b9e91a98f880d8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f8:9c:9e:cb:33:61:3e:04:2b:cd:8f:7e:43:
28:54:c0:7d:80:ce:44:23:97:60:d6:ea:70:7a:63:
8d:f5:cc:9a:48:26:e1:b6:43:53:3f:24:34:8d:59:
7e:29:1c:f9:2f:5c:18:11:f6:70:a8:d1:c6:60:d0:
12:21:85:08:df:7e:3b:0b:30:3d:7a:37:81:64:87:
33:bf:2a:db:be:36:c5:30:e7:83:ab:5c:c6:9f:df:
1f:9d:ef:0b:59:1b:02:e6:a6:aa:c9:9e:04:4f:3d:
69:00:a8:57:fe:75:e1:8f:ed:22:8c:0b:cf:46:6c:
22:f5:0c:54:0a:b4:d1:59:99:04:bc:f0:38:8d:cb:
c2:2d:51:ee:c4:d3:ec:6b:a9:0f:ef:6a:bf:dc:13:
38:6c:f5:da:d4:be:6d:3d:60:37:b0:b8:db:8c:28:
fa:7b:7d:84:50:5c:d4:8a:c6:2d:9d:14:7a:a6:4f:
03:1f:b9:fd:79:16:35:2d:f9:6b:55:1c:33:e5:ec:
f0:6f:06:3e:35:b2:cc:31:b4:91:eb:89:cf:3d:7a:
f2:e2:25:0b:0f:79:04:c1:7d:a0:aa:1a:5e:4a:a3:
70:3d:90:0b:f6:e0:8f:c7:e1:cb:6f:6d:ed:cf:c0:
aa:63:dc:99:0c:d4:03:3b:22:68:da:10:21:f9:90:
70:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AB:97:92:E0:6B:27:E2:63:F5:3E:E2:B9:E9:1A:98:F8:80:D8:A3
X509v3 Authority Key Identifier:
keyid:CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/JauXkuBrJ-Jj9T7iuekamPiA2KM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.190.0/23
194.156.198.0/23
IPv6:
2a0f:43c0::/32
Signature Algorithm: sha256WithRSAEncryption
5f:b2:84:95:b2:a6:4b:f5:22:92:e9:1c:c4:0c:d9:b5:47:b7:
fb:90:37:4c:ac:6a:08:d8:5e:08:52:5e:68:88:19:e6:4e:39:
fa:08:7d:ab:1b:85:34:47:b8:d7:22:c8:3e:e0:1e:f0:c9:bc:
5e:18:1e:56:3e:fe:66:1e:b2:12:2f:cf:e8:67:ea:74:f7:b6:
9f:da:d6:d7:99:22:09:f3:ef:74:12:02:ef:0b:a7:5b:ca:9b:
ba:21:e6:24:bd:25:5c:b0:f5:45:26:e6:5f:d5:ac:54:2b:8e:
09:de:a1:05:91:3d:d9:9f:18:88:39:16:32:f0:58:95:40:7a:
f9:fe:43:55:98:af:d7:2e:79:05:11:13:fc:b7:f5:15:cd:06:
23:41:44:0a:24:6d:28:77:a8:55:15:59:6f:52:90:fe:ef:80:
f7:a8:bd:9b:58:19:af:b0:f2:cb:d2:04:76:86:fd:39:cd:81:
43:4e:3a:5b:9b:68:b1:ff:e6:c9:05:7a:c0:6e:63:9f:3c:77:
a1:97:f2:09:d4:94:72:9c:cf:f8:17:dc:d9:90:74:56:4c:59:
0a:80:00:3a:5d:6a:e9:14:db:74:20:41:66:41:b9:45:3d:d2:
8b:73:d9:ba:30:05:31:ca:70:aa:66:49:f7:17:b2:03:8a:78:
36:a8:71:d0
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQf+jx0GubEOHl2limFyLxdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMjZjOTFhZjBhYjI2NjhhMzYwMWIyZDk1N2RjNGNlMDAy
ZDU5ODYwHhcNMjUwMTAxMDM0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWFiOTc5MmUwNmIyN2UyNjNmNTNlZTJiOWU5MWE5OGY4ODBkOGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8vicnsszYT4EK82PfkMoVMB9gM5E
I5dg1upwemON9cyaSCbhtkNTPyQ0jVl+KRz5L1wYEfZwqNHGYNASIYUI3347CzA9
ejeBZIczvyrbvjbFMOeDq1zGn98fne8LWRsC5qaqyZ4ETz1pAKhX/nXhj+0ijAvP
Rmwi9QxUCrTRWZkEvPA4jcvCLVHuxNPsa6kP72q/3BM4bPXa1L5tPWA3sLjbjCj6
e32EUFzUisYtnRR6pk8DH7n9eRY1LflrVRwz5ezwbwY+NbLMMbSR64nPPXry4iUL
D3kEwX2gqhpeSqNwPZAL9uCPx+HLb23tz8CqY9yZDNQDOyJo2hAh+ZBw7wIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFCWrl5LgayfiY/U+4rnpGpj4gNijMB8GA1UdIwQY
MBaAFM8myRrwqyZoo2AbLZV9xM4ALVmGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenliSkd2Q3JKbWlqWUJzdGxYM0V6Z0F0V1lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS83NmRkZDctMGFmMi00M2NlLTk4NTkt
NmJjODM5NDY1NmI3LzEvSmF1WGt1QnJKLUpqOVQ3aXVla2FtUGlBMktNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS83NmRkZDctMGFmMi00M2NlLTk4NTktNmJjODM5NDY1NmI3
LzEvenliSkd2Q3JKbWlqWUJzdGxYM0V6Z0F0V1lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBwpy+AwQB
wpzGMA0EAgACMAcDBQAqD0PAMA0GCSqGSIb3DQEBCwUAA4IBAQBfsoSVsqZL9SKS
6RzEDNm1R7f7kDdMrGoI2F4IUl5oiBnmTjn6CH2rG4U0R7jXIsg+4B7wybxeGB5W
Pv5mHrISL8/oZ+p097af2tbXmSIJ8+90EgLvC6dbypu6IeYkvSVcsPVFJuZf1axU
K44J3qEFkT3ZnxiIORYy8FiVQHr5/kNVmK/XLnkFERP8t/UVzQYjQUQKJG0od6hV
FVlvUpD+74D3qL2bWBmvsPLL0gR2hv05zYFDTjpbm2ix/+bJBXrAbmOfPHehl/IJ
1JRynM/4F9zZkHRWTFkKgAA6XWrpFNt0IEFmQblFPdKLc9m6MAUxynCqZkn3F7ID
ing2qHHQ
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:45 2025 by rpki-client on console.sobornost.net