Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/jnxiRSp6LL1UuZSH55PRoBU9Uug.roa
File: jnxiRSp6LL1UuZSH55PRoBU9Uug.roa (raw, json)
Hash identifier: EzydjgFzmvXFQDadZtYOhUDG1+kFGRWU2sNIMDhFrQ0=
Subject key identifier: 8E:7C:62:45:2A:7A:2C:BD:54:B9:94:87:E7:93:D1:A0:15:3D:52:E8
Certificate issuer: /CN=e1874a887aa288dab72c658e93694ed5dafd2026
Certificate serial: 019420D5BD194B9258D36C01954B482F1C8A
Authority key identifier: E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/jnxiRSp6LL1UuZSH55PRoBU9Uug.roa
Signing time: Wed 01 Jan 2025 07:47:45 +0000
ROA not before: Wed 01 Jan 2025 07:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211855
IP address blocks: 185.105.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:bd:19:4b:92:58:d3:6c:01:95:4b:48:2f:1c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1874a887aa288dab72c658e93694ed5dafd2026
Validity
Not Before: Jan 1 07:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e7c62452a7a2cbd54b99487e793d1a0153d52e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:72:14:f0:8e:0b:97:64:01:c3:e9:18:6e:c9:
4b:dd:3e:ca:51:e3:c0:ff:11:ce:38:b0:14:25:26:
e2:67:7a:7a:de:93:bf:6c:16:d8:5a:f3:a9:cc:4f:
29:88:e3:fd:ab:39:a4:22:09:ef:93:29:26:c6:02:
47:03:f0:31:94:f0:8a:53:02:8d:8a:bb:64:e0:ea:
bf:cb:d2:41:19:72:dd:6b:9e:5e:41:0d:4c:7a:f7:
a0:9f:e6:04:22:ff:ef:7e:bb:84:3d:54:69:70:3a:
7c:05:64:6f:13:49:32:c1:07:37:f8:7e:d3:8b:d5:
7a:29:e5:6d:db:da:bd:bc:e3:d7:5e:66:d7:3f:10:
c4:f7:a9:02:0a:16:fe:24:28:42:9e:d4:d6:c4:23:
c0:85:7f:80:bc:a0:8b:b8:74:85:c8:47:1f:95:54:
2b:c6:e8:2f:0f:73:cc:0f:bc:4a:ca:a1:ec:00:dc:
79:f9:c1:e5:48:fe:a8:b4:06:54:21:ac:0a:27:2c:
a2:2c:04:53:cc:0e:9f:1a:4f:b3:dd:a3:b6:92:3d:
16:34:70:48:0e:b8:b3:8b:af:66:3b:9b:e3:c6:63:
a5:d9:b0:b0:be:87:b0:6f:61:82:b2:42:c4:2b:3c:
28:dd:74:72:79:26:be:47:9c:59:c2:db:1c:da:3a:
8c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7C:62:45:2A:7A:2C:BD:54:B9:94:87:E7:93:D1:A0:15:3D:52:E8
X509v3 Authority Key Identifier:
keyid:E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/jnxiRSp6LL1UuZSH55PRoBU9Uug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.11.0/24
Signature Algorithm: sha256WithRSAEncryption
11:ae:e7:b3:c2:91:f0:1c:a0:e7:4e:9b:70:b0:08:87:3c:1f:
7d:c6:6a:bd:c1:5f:19:f4:3c:9a:9f:c1:6e:c1:ff:76:49:47:
b7:2f:d1:e1:19:0e:d9:99:46:f2:80:d9:12:53:8b:1b:51:d0:
bc:5b:dc:c8:0c:c3:11:b3:91:4f:d6:e5:8c:01:d9:65:82:8b:
90:07:90:3e:5d:b9:ff:99:4b:3f:3a:cc:6f:62:e6:56:73:9d:
70:10:80:c5:63:2b:a9:a1:d0:ef:91:b1:52:fc:d9:25:29:11:
17:4e:a7:64:f2:24:2b:cd:ab:9f:3a:76:ff:15:b9:72:ce:af:
06:c4:c5:ca:ca:27:3a:c6:e3:a1:46:b6:9d:11:f3:a6:27:10:
93:98:e2:ed:05:70:ec:30:21:2c:a7:38:00:c8:56:40:00:13:
2f:1f:29:ab:b4:7a:cd:8a:1f:d1:a3:e4:71:87:5b:35:79:e8:
98:33:b1:64:e6:a1:2f:28:10:e6:2a:1f:9c:a2:8f:bc:b1:ef:
8d:58:ef:03:3f:47:cd:97:84:f4:ee:1f:3f:5a:09:56:cf:23:
d7:44:f4:f8:92:8b:48:87:dd:45:93:9d:8f:bf:1a:ef:b4:1a:
17:cb:23:9e:92:ee:15:88:1f:a8:22:61:c7:16:bb:41:de:db:
21:b6:25:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:20 2025 by rpki-client on console.sobornost.net