Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/2JjyX_-1ihqsSblonAIGQ2WI8zE.roa
File: 2JjyX_-1ihqsSblonAIGQ2WI8zE.roa (raw, json)
Hash identifier: zFek1n9vUOT2IuGKFpGhKS8yEEOPqAUeFGqimhy7H3I=
Subject key identifier: D8:98:F2:5F:FF:B5:8A:1A:AC:49:B9:68:9C:02:06:43:65:88:F3:31
Certificate issuer: /CN=7a350d024af01f8eaf125717caa03aafad184e1d
Certificate serial: 019421B1A124D7CF67085E6AE9F9358BD1C5
Authority key identifier: 7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/2JjyX_-1ihqsSblonAIGQ2WI8zE.roa
Signing time: Wed 01 Jan 2025 11:47:56 +0000
ROA not before: Wed 01 Jan 2025 11:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41606
IP address blocks: 89.251.176.0/20 maxlen: 20
89.251.176.0/24 maxlen: 24
89.251.177.0/24 maxlen: 24
89.251.178.0/24 maxlen: 24
89.251.179.0/24 maxlen: 24
89.251.180.0/24 maxlen: 24
89.251.181.0/24 maxlen: 24
89.251.182.0/24 maxlen: 24
89.251.183.0/24 maxlen: 24
89.251.184.0/24 maxlen: 24
89.251.185.0/24 maxlen: 24
89.251.186.0/24 maxlen: 24
89.251.187.0/24 maxlen: 24
89.251.188.0/22 maxlen: 22
89.251.188.0/23 maxlen: 23
89.251.188.0/24 maxlen: 24
89.251.189.0/24 maxlen: 24
89.251.190.0/24 maxlen: 24
89.251.191.0/24 maxlen: 24
109.104.232.0/24 maxlen: 24
185.115.132.0/22 maxlen: 22
185.115.132.0/24 maxlen: 24
185.115.133.0/24 maxlen: 24
185.115.134.0/24 maxlen: 24
185.115.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:a1:24:d7:cf:67:08:5e:6a:e9:f9:35:8b:d1:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a350d024af01f8eaf125717caa03aafad184e1d
Validity
Not Before: Jan 1 11:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d898f25fffb58a1aac49b9689c0206436588f331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a2:a7:0b:75:e4:ba:bc:c2:03:49:ed:f6:51:
ba:cd:65:af:63:c3:d2:2e:62:20:68:79:c4:bf:7e:
35:98:73:3c:d3:67:da:f4:ed:e3:41:89:32:06:7c:
d5:6a:74:02:38:94:53:cc:c7:19:dd:6a:b5:83:b2:
46:e5:3d:7a:69:bd:78:36:2a:6b:3d:2b:d5:df:0a:
6c:ae:96:31:0c:69:f0:52:48:42:82:56:9a:b3:13:
4f:fd:99:4a:4f:c4:90:f5:d9:78:b5:3f:c0:4b:a7:
7c:d5:80:95:27:d8:b3:d0:64:ab:f0:d7:55:9a:64:
db:dd:b7:3d:92:17:44:a6:52:52:2d:84:15:9e:84:
c5:21:a6:4a:29:0c:e9:84:06:27:7c:45:fb:0e:3b:
b2:41:f7:9c:3e:2b:0d:ce:81:5e:97:4b:ea:84:bf:
45:75:57:10:da:bf:99:e4:60:6d:17:11:9a:a5:f6:
87:f9:93:cd:b3:65:a8:e4:c4:ae:46:71:4d:b5:cd:
8a:5c:ae:54:af:d6:fd:02:a7:53:58:c4:d8:cb:e3:
af:9d:32:de:a3:dc:a8:fa:c0:6e:41:b2:f6:9f:11:
48:d3:21:88:dd:24:9f:c2:15:a4:b0:24:5a:82:53:
0a:9f:c9:23:2d:db:b2:ee:ff:1b:01:79:d7:5d:71:
d7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:98:F2:5F:FF:B5:8A:1A:AC:49:B9:68:9C:02:06:43:65:88:F3:31
X509v3 Authority Key Identifier:
keyid:7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/2JjyX_-1ihqsSblonAIGQ2WI8zE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.176.0/20
109.104.232.0/24
185.115.132.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:73:45:54:44:62:9e:0f:ba:fe:8a:0e:63:8a:36:13:c0:7e:
f8:c0:c0:94:c0:fd:e9:18:ed:e4:73:ee:23:1f:db:2b:c1:1d:
c6:22:31:03:63:69:fb:61:f7:ff:71:e2:cd:ba:bf:61:c6:ff:
45:2c:19:1c:b4:79:3c:b0:2c:46:02:2d:cb:de:85:f4:27:db:
bc:4c:c0:f8:4d:8e:0a:b2:39:60:48:e6:0a:4b:be:3b:94:06:
a4:09:9c:a6:b4:2a:cd:b5:10:bc:a4:68:39:e8:c9:aa:a9:3f:
12:fe:56:8d:fa:d3:d4:44:eb:12:ec:53:1c:81:fc:41:80:d9:
dd:b8:9a:ae:3c:ed:fe:2d:e6:8f:2c:50:6b:54:48:a6:0f:71:
7e:54:02:64:6c:c1:0a:1e:c6:ab:9c:da:ef:10:f4:c0:ac:4c:
43:77:69:8d:4f:7d:1f:26:4b:08:8c:5d:46:be:54:36:0b:3a:
c2:aa:92:92:94:93:b5:c6:c3:38:c4:8b:91:f9:8e:ef:3d:9f:
0b:d3:41:b6:e3:60:f0:74:d9:ec:22:04:5c:df:cf:96:84:b0:
4a:92:29:27:ce:66:3d:13:9e:39:14:e0:2e:2f:b0:80:18:36:
ee:6d:19:57:99:56:fa:5e:99:14:87:b9:15:66:95:51:24:7d:
35:2a:8f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:30 2025 by rpki-client on console.sobornost.net