Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/1JOZ7dbb5H6duThfeMsJ0JbBk7I.roa
File: 1JOZ7dbb5H6duThfeMsJ0JbBk7I.roa (raw, json)
Hash identifier: 0Pd6o8RRKlvvsS/YlVCGhUpZijHcF0bp4ry/V9YxdXE=
Subject key identifier: D4:93:99:ED:D6:DB:E4:7E:9D:B9:38:5F:78:CB:09:D0:96:C1:93:B2
Certificate issuer: /CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Certificate serial: 0195D7C24C985F0900A2F2A7810DEE05C9B7
Authority key identifier: 18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/1JOZ7dbb5H6duThfeMsJ0JbBk7I.roa
Signing time: Thu 27 Mar 2025 13:19:49 +0000
ROA not before: Thu 27 Mar 2025 13:19:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39318
IP address blocks: 31.210.174.0/23 maxlen: 24
82.115.49.0/24 maxlen: 24
85.202.192.0/23 maxlen: 24
2a00:5da0:2000::/36 maxlen: 48
2a00:5da0:3000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d7:c2:4c:98:5f:09:00:a2:f2:a7:81:0d:ee:05:c9:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Validity
Not Before: Mar 27 13:19:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d49399edd6dbe47e9db9385f78cb09d096c193b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:42:36:53:20:55:a5:4c:43:aa:ee:6a:9a:8b:
8b:9c:ac:4d:f7:c7:2a:9f:0b:bf:d0:b9:31:76:1c:
6b:cf:32:0c:85:29:b6:77:be:c8:be:df:e7:81:ec:
d4:dd:57:3c:52:e4:dc:b3:8a:1f:92:49:4a:34:8d:
bd:5d:81:56:97:ff:43:13:34:73:04:03:73:6d:86:
c5:fa:b4:5a:c4:a0:f5:cd:90:0c:e3:e0:58:42:85:
92:7d:d8:0e:ce:49:b2:62:78:ae:04:03:4a:37:14:
bb:6b:39:d0:51:b1:51:ce:5b:6a:71:fe:35:94:74:
a2:3d:d6:1a:eb:a3:6b:82:8a:5c:61:ac:e7:da:45:
51:35:72:85:d3:e0:3a:9f:21:50:d4:6a:7b:68:1d:
0c:a5:97:4d:e7:ac:9d:11:49:09:f4:8f:f1:54:5b:
38:1e:7c:fb:ec:f4:28:88:96:91:79:4d:64:7b:e0:
26:84:84:fd:60:61:71:5c:a0:f6:25:f3:bd:50:b4:
fb:71:d9:b6:7b:67:ad:d4:c1:ba:19:7c:5f:07:69:
e3:a1:f1:aa:43:1f:a9:af:df:f5:76:3d:5d:91:a8:
d3:9d:da:bc:bf:c9:69:61:56:1a:f2:fc:fb:11:5b:
a3:51:c5:43:0d:80:b2:60:31:d1:6e:d6:82:c8:a8:
78:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:93:99:ED:D6:DB:E4:7E:9D:B9:38:5F:78:CB:09:D0:96:C1:93:B2
X509v3 Authority Key Identifier:
keyid:18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/1JOZ7dbb5H6duThfeMsJ0JbBk7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.174.0/23
82.115.49.0/24
85.202.192.0/23
IPv6:
2a00:5da0:2000::/35
Signature Algorithm: sha256WithRSAEncryption
7e:46:d1:3c:83:61:38:a7:fd:4d:06:8a:90:63:cc:d6:05:10:
2a:90:9f:b6:bc:ae:a2:d5:61:58:82:a5:57:45:51:f8:98:53:
a9:44:18:77:3f:9c:a3:ac:36:ce:5d:86:e2:09:04:68:20:b0:
63:59:ad:79:96:a2:01:71:f3:a7:0e:2e:2a:d1:52:03:86:57:
18:18:74:2c:15:37:3e:60:34:a0:da:9d:81:31:de:b7:ad:74:
89:8d:59:6d:15:05:20:ab:b9:33:89:15:2f:c4:64:5e:7e:cc:
28:04:f8:86:d2:c3:3c:51:a1:05:9d:cf:f1:1d:9e:d9:ef:89:
6e:1a:92:07:cb:db:c6:de:b0:d1:e6:b0:ed:4b:45:e6:4c:2b:
b4:b6:f6:6b:be:6a:73:e7:2a:99:2a:9a:8b:36:41:39:b6:59:
c2:0d:0b:0d:cd:3d:3a:6c:fb:a8:9f:e5:12:66:97:5b:56:8d:
98:cb:3f:ce:cb:7c:ff:da:76:33:f9:6b:53:f8:cc:1d:77:5d:
e4:a4:3c:28:36:cc:25:55:05:d5:4d:ed:bf:dc:e4:93:6d:3a:
e6:34:61:de:15:75:8d:9b:bc:7d:7e:8a:25:57:06:40:ae:6f:
57:a6:82:b0:8f:6a:39:d9:b0:4c:1c:66:21:9f:ea:61:14:f0:
cf:f6:3f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:17 2025 by rpki-client on console.sobornost.net