Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/JAnV2_iGsAccCvpnwpKTLqq4-7Q.roa
File: JAnV2_iGsAccCvpnwpKTLqq4-7Q.roa (raw, json)
Hash identifier: bxupdhuM4pNOCOEHWEM+CQKFyxRIbwyOrgA4GUqKOjU=
Subject key identifier: 24:09:D5:DB:F8:86:B0:07:1C:0A:FA:67:C2:92:93:2E:AA:B8:FB:B4
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019424B2F581F26585314DEA92EFD5D7339C
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/JAnV2_iGsAccCvpnwpKTLqq4-7Q.roa
Signing time: Thu 02 Jan 2025 01:48:15 +0000
ROA not before: Thu 02 Jan 2025 01:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58269
IP address blocks: 37.148.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:f5:81:f2:65:85:31:4d:ea:92:ef:d5:d7:33:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 01:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2409d5dbf886b0071c0afa67c292932eaab8fbb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:11:92:26:fd:ec:8e:7f:53:64:38:07:a3:3b:
f8:48:f4:68:3d:af:2a:15:e5:cd:ac:9e:9a:cf:56:
7e:97:26:72:d4:c5:7e:f0:1b:4e:6e:ce:8f:0c:c9:
a6:b6:de:4c:35:8a:43:c3:50:93:03:0a:0b:f2:c9:
6f:d1:54:15:78:bb:f5:bf:e3:c6:07:29:61:35:e9:
c0:77:6e:cd:38:21:c2:04:31:ce:5c:0a:55:9b:11:
40:31:f8:f0:a6:3f:22:cd:02:9b:36:82:8e:3c:30:
aa:2d:e5:7a:79:e2:f0:b3:99:c4:76:13:49:b0:2c:
21:77:1e:67:c2:2c:de:4e:a9:5b:4e:43:ca:77:d6:
1d:2b:16:38:ce:e6:32:ac:59:77:3a:34:67:a1:eb:
5b:79:be:3f:08:64:d0:eb:b4:dd:27:c6:a3:32:71:
60:26:eb:a9:29:71:c1:f8:94:9d:2e:38:43:f9:bc:
6b:6a:c6:7a:93:5a:75:5e:73:36:19:d8:64:d7:fe:
a4:00:de:e4:02:e0:0a:8c:20:46:a7:47:28:0c:7d:
a0:94:f9:35:d4:c4:19:c9:7e:53:c2:b5:76:88:d0:
dd:d2:b8:17:c1:3c:13:10:58:6c:6c:4a:f0:97:42:
b8:89:80:e5:cd:4b:15:58:69:8f:ad:2b:4d:de:59:
df:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:09:D5:DB:F8:86:B0:07:1C:0A:FA:67:C2:92:93:2E:AA:B8:FB:B4
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/JAnV2_iGsAccCvpnwpKTLqq4-7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.174.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:8b:97:b4:0e:cb:46:21:f1:53:b0:e5:b4:f3:a3:4b:80:c4:
5e:5a:fa:a8:89:95:b8:65:ed:bb:3d:57:3b:a2:98:b8:46:44:
a1:a9:08:cd:25:ce:a0:19:71:25:34:2c:c4:81:e2:71:c8:bd:
2b:fd:63:93:b1:d7:da:8d:7f:f7:ff:77:0a:f7:05:8c:fb:dd:
f4:f8:59:34:33:b4:51:59:04:77:00:dc:9a:70:20:54:00:c7:
44:0b:d3:92:f9:70:b5:89:7c:08:ab:2a:ce:16:f3:3e:66:e0:
5a:d7:15:8e:d1:ca:c9:d0:e7:a9:92:cb:14:1d:40:78:5f:3c:
b7:e9:c9:43:60:59:d1:23:20:ca:b5:43:bc:1a:46:b0:b4:0a:
5b:4e:3e:ee:e9:de:84:43:bc:89:9b:9b:44:ae:b4:ff:06:67:
0a:9e:f3:3b:77:d3:2e:61:3e:06:fc:55:7c:11:5f:66:c9:d8:
44:4c:1b:6d:81:4e:fa:73:55:2b:cd:1f:5d:51:b5:ae:5b:ce:
a0:83:39:85:1c:ff:6b:da:7b:18:62:12:47:9b:ed:93:51:93:
2e:bf:b7:49:f0:d2:28:82:83:24:30:55:c6:0b:56:2c:62:df:
a5:01:55:e5:01:e1:9a:70:4b:88:03:82:cc:ff:80:af:99:6e:
e4:0d:96:10
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQksvWB8mWFMU3qku/V1zOcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm
YzQxZWMwHhcNMjUwMTAyMDE0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDA5ZDVkYmY4ODZiMDA3MWMwYWZhNjdjMjkyOTMyZWFhYjhmYmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhGSJv3sjn9TZDgHozv4SPRoPa8q
FeXNrJ6az1Z+lyZy1MV+8BtObs6PDMmmtt5MNYpDw1CTAwoL8slv0VQVeLv1v+PG
BylhNenAd27NOCHCBDHOXApVmxFAMfjwpj8izQKbNoKOPDCqLeV6eeLws5nEdhNJ
sCwhdx5nwizeTqlbTkPKd9YdKxY4zuYyrFl3OjRnoetbeb4/CGTQ67TdJ8ajMnFg
JuupKXHB+JSdLjhD+bxrasZ6k1p1XnM2Gdhk1/6kAN7kAuAKjCBGp0coDH2glPk1
1MQZyX5TwrV2iNDd0rgXwTwTEFhsbErwl0K4iYDlzUsVWGmPrStN3lnfbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCQJ1dv4hrAHHAr6Z8KSky6quPu0MB8GA1UdIwQY
MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt
NTU1NGQ2ZTE2ODZmLzEvSkFuVjJfaUdzQWNjQ3ZwbndwS1RMcXE0LTdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm
LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJZSuMA0G
CSqGSIb3DQEBCwUAA4IBAQAui5e0DstGIfFTsOW086NLgMReWvqoiZW4Ze27PVc7
opi4RkShqQjNJc6gGXElNCzEgeJxyL0r/WOTsdfajX/3/3cK9wWM+930+Fk0M7RR
WQR3ANyacCBUAMdEC9OS+XC1iXwIqyrOFvM+ZuBa1xWO0crJ0OepkssUHUB4Xzy3
6clDYFnRIyDKtUO8GkawtApbTj7u6d6EQ7yJm5tErrT/BmcKnvM7d9MuYT4G/FV8
EV9mydhETBttgU76c1UrzR9dUbWuW86ggzmFHP9r2nsYYhJHm+2TUZMuv7dJ8NIo
goMkMFXGC1YsYt+lAVXlAeGacEuIA4LM/4CvmW7kDZYQ
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:51 2025 by rpki-client on console.sobornost.net