Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/J6N10mOHco_CHrghtNkJ8CZXfhU.roa
File: J6N10mOHco_CHrghtNkJ8CZXfhU.roa (raw, json)
Hash identifier: 30kmxFBnSaCLifn+bmjA1t+lSi7TIa3l00vfDKtB59Y=
Subject key identifier: 27:A3:75:D2:63:87:72:8F:C2:1E:B8:21:B4:D9:09:F0:26:57:7E:15
Certificate issuer: /CN=8d3bc9b3a7424d95742427f99633d9c0b00f67f0
Certificate serial: 0194266C4607B35E580B3335D0696B45DAEF
Authority key identifier: 8D:3B:C9:B3:A7:42:4D:95:74:24:27:F9:96:33:D9:C0:B0:0F:67:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/J6N10mOHco_CHrghtNkJ8CZXfhU.roa
Signing time: Thu 02 Jan 2025 09:50:17 +0000
ROA not before: Thu 02 Jan 2025 09:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209399
IP address blocks: 185.11.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:46:07:b3:5e:58:0b:33:35:d0:69:6b:45:da:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3bc9b3a7424d95742427f99633d9c0b00f67f0
Validity
Not Before: Jan 2 09:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27a375d26387728fc21eb821b4d909f026577e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:20:ae:9a:ce:17:f5:32:7f:43:e6:87:19:9e:
51:fa:2c:f1:49:e8:f5:99:22:88:6b:d3:b7:c8:c9:
f0:bb:17:f8:48:cb:77:2a:88:44:b4:20:d4:d3:3b:
aa:58:aa:f3:6e:21:fb:75:4e:24:fc:65:d8:4f:60:
58:b3:fa:21:ea:6b:b0:ca:fa:53:3b:c1:db:48:55:
6c:3b:30:c1:3f:fd:3f:68:3f:c9:d9:c8:15:c7:cc:
2a:bc:51:04:7f:af:ee:c2:6d:56:92:58:3b:bd:38:
a3:64:67:67:8d:49:d2:bf:72:6a:97:4b:1a:6f:dc:
4d:8b:fb:89:61:09:b0:7e:81:8a:f3:25:69:dc:fe:
f8:93:5b:4a:db:d6:e8:84:f4:53:24:e6:ed:27:43:
38:8e:6b:74:1a:70:50:74:e1:80:15:75:00:41:7b:
f8:c3:60:a0:c5:22:2c:59:cc:f6:61:67:01:46:c8:
6b:53:f5:4f:e1:5e:0c:8e:10:21:be:8d:48:cb:da:
4b:57:c4:0c:be:32:a4:05:3f:62:3a:3f:d4:80:2d:
a0:79:3f:18:5a:82:98:dc:73:7d:b3:a7:30:a2:74:
85:08:1e:64:c6:70:cd:4a:3a:f6:00:a4:6c:86:7b:
67:9f:d8:77:63:84:4e:f5:19:82:5d:6d:39:21:69:
93:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A3:75:D2:63:87:72:8F:C2:1E:B8:21:B4:D9:09:F0:26:57:7E:15
X509v3 Authority Key Identifier:
keyid:8D:3B:C9:B3:A7:42:4D:95:74:24:27:F9:96:33:D9:C0:B0:0F:67:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/J6N10mOHco_CHrghtNkJ8CZXfhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.62.0/24
Signature Algorithm: sha256WithRSAEncryption
56:d4:09:16:d9:5a:b6:be:26:ef:03:8d:64:df:8e:22:72:79:
5f:bc:3c:23:45:fb:40:df:a4:1f:d4:e5:a8:0e:c0:9d:5c:29:
7e:6e:a9:cc:f1:86:4a:2d:ac:6c:c2:13:41:b1:91:2f:12:8d:
04:00:23:ce:26:4d:cb:11:02:66:45:42:30:58:cc:c5:4f:b5:
9c:3f:89:e0:1e:d7:e3:5f:5c:1c:a0:db:41:f9:cb:ab:e8:1e:
2f:c7:2c:cf:3d:46:71:d0:aa:95:aa:34:27:7f:da:61:3a:ed:
dc:91:a8:0c:fd:95:8e:11:15:d6:f7:cc:db:09:2d:fb:2a:de:
a9:8f:92:57:04:ca:ab:b6:18:b4:f4:10:91:d4:15:7f:19:f8:
ca:a7:38:22:de:7e:4c:18:20:9e:4b:d7:52:3a:aa:be:af:21:
39:88:d5:16:39:0d:01:1a:9f:ac:21:7b:27:6b:dd:d7:e8:1e:
5a:97:14:02:e9:19:60:05:44:42:27:33:66:f5:c3:0f:d9:f4:
fd:7b:15:7f:36:89:34:31:54:ec:b2:94:f4:3b:81:ce:87:58:
c2:6a:f5:ec:4c:bd:6a:91:df:50:8c:11:da:9e:24:85:57:62:
26:cd:40:85:3a:a4:17:5a:13:79:ab:04:a1:32:f8:a6:e7:2c:
38:f1:d5:4f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmbEYHs15YCzM10GlrRdrvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkM2JjOWIzYTc0MjRkOTU3NDI0MjdmOTk2MzNkOWMwYjAw
ZjY3ZjAwHhcNMjUwMTAyMDk1MDE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2EzNzVkMjYzODc3MjhmYzIxZWI4MjFiNGQ5MDlmMDI2NTc3ZTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CCums4X9TJ/Q+aHGZ5R+izxSej1
mSKIa9O3yMnwuxf4SMt3KohEtCDU0zuqWKrzbiH7dU4k/GXYT2BYs/oh6muwyvpT
O8HbSFVsOzDBP/0/aD/J2cgVx8wqvFEEf6/uwm1Wklg7vTijZGdnjUnSv3Jql0sa
b9xNi/uJYQmwfoGK8yVp3P74k1tK29bohPRTJObtJ0M4jmt0GnBQdOGAFXUAQXv4
w2CgxSIsWcz2YWcBRshrU/VP4V4MjhAhvo1Iy9pLV8QMvjKkBT9iOj/UgC2geT8Y
WoKY3HN9s6cwonSFCB5kxnDNSjr2AKRshntnn9h3Y4RO9RmCXW05IWmTiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCejddJjh3KPwh64IbTZCfAmV34VMB8GA1UdIwQY
MBaAFI07ybOnQk2VdCQn+ZYz2cCwD2fwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalR2SnM2ZENUWlYwSkNmNWxqUFp3TEFQWl9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jYWE1ZTItMDg1Zi00ZDY3LWI5YjAt
NWNhNTEwZjY3ZjcyLzEvSjZOMTBtT0hjb19DSHJnaHROa0o4Q1pYZmhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9jYWE1ZTItMDg1Zi00ZDY3LWI5YjAtNWNhNTEwZjY3Zjcy
LzEvalR2SnM2ZENUWlYwSkNmNWxqUFp3TEFQWl9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQs+MA0G
CSqGSIb3DQEBCwUAA4IBAQBW1AkW2Vq2vibvA41k344icnlfvDwjRftA36Qf1OWo
DsCdXCl+bqnM8YZKLaxswhNBsZEvEo0EACPOJk3LEQJmRUIwWMzFT7WcP4ngHtfj
X1wcoNtB+cur6B4vxyzPPUZx0KqVqjQnf9phOu3ckagM/ZWOERXW98zbCS37Kt6p
j5JXBMqrthi09BCR1BV/GfjKpzgi3n5MGCCeS9dSOqq+ryE5iNUWOQ0BGp+sIXsn
a93X6B5alxQC6RlgBURCJzNm9cMP2fT9exV/Nok0MVTsspT0O4HOh1jCavXsTL1q
kd9QjBHaniSFV2ImzUCFOqQXWhN5qwShMvim5yw48dVP
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:50 2025 by rpki-client on console.sobornost.net