Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/S22conjO4ARyNNd8Xr75Kz_jvoA.roa
File: S22conjO4ARyNNd8Xr75Kz_jvoA.roa (raw, json)
Hash identifier: nGrDBLexAz3MDpCAIuRPIj9bMUACybQ0z2yJ6E80jAk=
Subject key identifier: 4B:6D:9C:A2:78:CE:E0:04:72:34:D7:7C:5E:BE:F9:2B:3F:E3:BE:80
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 0194258F5F09BAAB02637E538B9381E466A6
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/S22conjO4ARyNNd8Xr75Kz_jvoA.roa
Signing time: Thu 02 Jan 2025 05:49:00 +0000
ROA not before: Thu 02 Jan 2025 05:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31390
IP address blocks: 185.100.216.0/24 maxlen: 24
185.100.217.0/24 maxlen: 24
185.100.218.0/24 maxlen: 24
185.100.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:5f:09:ba:ab:02:63:7e:53:8b:93:81:e4:66:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jan 2 05:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b6d9ca278cee0047234d77c5ebef92b3fe3be80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:17:63:27:e2:90:09:0b:fb:f5:7a:bc:c5:e8:
91:6c:b5:85:11:0b:31:a1:a9:8a:12:84:ea:84:e3:
47:73:bf:72:7b:2e:7c:c3:02:fd:81:2b:61:b0:5b:
cc:01:2e:55:f4:b7:e1:fc:35:d9:4a:44:88:0f:84:
17:53:cf:59:c1:cc:1b:d1:ab:a6:83:b8:c2:4a:37:
f9:1a:24:2d:dd:b5:cf:d5:ea:18:9e:39:d3:bf:31:
dd:45:71:bc:05:44:7d:36:99:be:84:5d:52:12:9b:
42:fb:53:61:f7:ef:fb:d0:26:74:b3:6f:50:30:f7:
c9:0a:f6:70:05:e8:de:48:d0:88:ad:1d:68:08:79:
e7:8b:b1:31:6a:2f:f9:b7:b6:2d:8e:35:0a:39:64:
f9:cc:f7:1a:c9:f3:e7:d4:55:d2:58:1f:dc:47:40:
1a:26:32:9b:a7:94:4e:6a:25:ef:ca:a6:a1:55:e3:
9b:dd:4d:f0:c8:b6:ba:22:91:b0:2d:80:c6:d9:9a:
49:d3:c3:2f:36:66:ba:bd:d1:b4:0e:55:1d:56:ec:
ec:cd:2b:c9:c2:cb:94:07:d1:2e:df:32:d9:b5:42:
8b:0e:76:e7:2b:80:35:5f:79:b3:d2:82:57:73:ed:
af:62:32:a7:97:58:c9:45:d9:27:c4:64:6b:d7:6b:
b0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6D:9C:A2:78:CE:E0:04:72:34:D7:7C:5E:BE:F9:2B:3F:E3:BE:80
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/S22conjO4ARyNNd8Xr75Kz_jvoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.216.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:f2:6a:3c:49:f1:f1:63:57:92:5c:8c:80:2b:46:03:3a:5a:
d0:8b:92:8d:de:9c:88:4d:94:82:14:af:7a:2f:c2:78:4c:f5:
0c:dc:38:4f:57:03:56:80:92:85:96:3c:6b:e3:17:86:90:86:
d5:9e:ea:48:81:23:37:82:ce:58:8d:fe:49:39:6b:80:23:4e:
cb:5c:52:a2:05:8c:f3:de:1f:a9:d1:72:35:93:43:ce:4f:ee:
c3:df:aa:a9:e3:69:ea:7e:b9:a1:02:66:c5:3b:38:64:13:ca:
9d:8d:1d:5c:58:01:b6:60:6a:4c:db:a6:74:49:aa:b5:5e:0c:
42:39:b7:fe:dd:82:01:92:9b:c4:f9:01:ab:fb:25:3c:bb:ad:
5b:6c:55:46:90:99:0e:eb:eb:9b:ac:a2:53:c6:57:3f:14:b2:
ba:67:6a:1b:e5:5b:0d:15:8e:1e:6d:5f:b6:60:0a:19:6e:ce:
ed:a0:a2:2c:f4:8d:e2:3d:41:6a:1f:a5:5c:a2:9f:c6:a4:14:
33:9e:dd:e7:22:e2:a1:42:e6:ae:52:07:a7:eb:16:66:8d:40:
81:fc:1d:d3:15:76:14:39:dc:31:07:48:4b:fe:d9:83:85:b7:
c4:39:a4:d5:95:ed:0d:ef:cc:d2:5b:fe:1e:b8:14:c5:33:0b:
a9:9c:8c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:12:14 2025 by rpki-client on console.sobornost.net