Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/jQInECNXc0p8Lpjj-s1SoXORrsY.roa
File: jQInECNXc0p8Lpjj-s1SoXORrsY.roa (raw, json)
Hash identifier: QgcQD1WSSYMYOa1FRqEex60YkyPfDqbnNuvvBLNxxGQ=
Subject key identifier: 8D:02:27:10:23:57:73:4A:7C:2E:98:E3:FA:CD:52:A1:73:91:AE:C6
Certificate issuer: /CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Certificate serial: 0194228D76742E6258CBD904C6D83A073DA2
Authority key identifier: AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/jQInECNXc0p8Lpjj-s1SoXORrsY.roa
Signing time: Wed 01 Jan 2025 15:48:03 +0000
ROA not before: Wed 01 Jan 2025 15:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204798
IP address blocks: 185.206.124.0/24 maxlen: 24
185.206.125.0/24 maxlen: 24
185.206.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:76:74:2e:62:58:cb:d9:04:c6:d8:3a:07:3d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Validity
Not Before: Jan 1 15:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d0227102357734a7c2e98e3facd52a17391aec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:21:f8:20:d6:dd:58:bc:c6:e0:f8:32:dc:83:
03:92:a8:3b:1e:c4:8c:ec:6a:f6:4a:29:ed:59:6c:
dc:e2:18:b5:03:23:28:37:3a:ba:2f:77:12:fe:df:
95:d1:a9:ff:ef:2e:c6:30:67:a1:f0:db:32:86:36:
08:02:40:66:25:10:1c:93:11:c0:6c:95:e6:33:ed:
c4:15:86:36:d9:8f:2e:c6:0f:8f:1b:e7:55:f0:5b:
ec:0b:70:52:e3:6f:0c:4b:36:42:69:d2:a6:5a:e1:
61:59:82:94:da:44:f3:6f:43:73:42:4e:58:b3:cf:
76:a5:2b:04:8e:3b:cb:70:28:4e:4c:c4:9c:a8:49:
11:8d:8a:d0:1b:64:76:7d:31:a2:1e:18:cd:70:be:
ac:50:ea:64:a7:7f:b8:e6:2a:41:26:33:04:f1:f4:
93:78:3c:3a:94:a2:fa:84:a3:0a:f6:1f:20:45:51:
ab:50:67:03:11:1d:a9:11:59:91:3a:a8:54:74:67:
e9:7a:18:8e:3c:7d:e3:28:4f:e6:d3:60:54:d5:b7:
03:6e:44:f4:73:6e:cc:b6:8a:91:00:02:dd:0c:40:
29:df:64:59:fb:7e:b8:6c:40:6b:a5:1b:4b:db:b6:
cb:33:e4:21:ca:09:f0:aa:af:d9:00:eb:0e:c2:cf:
59:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:02:27:10:23:57:73:4A:7C:2E:98:E3:FA:CD:52:A1:73:91:AE:C6
X509v3 Authority Key Identifier:
keyid:AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/jQInECNXc0p8Lpjj-s1SoXORrsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.124.0-185.206.126.255
Signature Algorithm: sha256WithRSAEncryption
0f:a4:4e:5a:ce:d9:8d:28:64:6e:12:8e:9f:b2:f6:70:c1:9c:
36:14:b5:cd:bd:97:9c:b2:c0:8c:e7:2b:51:22:14:e2:46:74:
d7:e9:71:6e:f0:de:d2:bb:41:96:fd:29:69:77:ae:70:3b:f1:
04:c3:4d:cf:e0:9f:f9:7e:d0:b1:b6:a9:33:09:46:a4:1d:5d:
b7:3d:8c:01:bd:9f:75:fc:3d:df:b8:e7:99:a1:70:ec:5e:98:
e9:55:d3:7f:ab:ea:63:38:ae:c6:6e:6c:29:5b:81:04:98:a2:
16:38:95:f1:40:d9:29:ca:b9:39:9b:90:07:91:db:e1:ed:00:
93:1b:e0:71:19:02:52:c9:62:12:2c:c4:80:20:02:7f:d2:3d:
7d:f7:9e:dd:c9:f0:be:40:39:59:74:3a:02:20:8a:04:ff:14:
7d:ee:82:35:7b:f7:85:5b:c3:bf:d0:22:06:c2:ae:fb:c7:ca:
71:ca:87:56:c1:db:65:ee:16:c4:71:c1:92:df:a0:ff:78:89:
eb:66:4e:9a:94:c0:a3:53:73:53:50:61:f1:70:e5:d9:50:74:
dd:f1:e7:15:69:f8:4f:25:68:0e:7d:19:7e:54:6a:f7:90:c5:
cf:13:d8:d6:72:30:fb:9e:4c:08:33:bc:8d:97:e3:80:84:2d:
8b:0e:ce:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:04 2025 by rpki-client on console.sobornost.net