Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/J4NELhXbzsP0O-fo9Zwk6eyKSHs.roa
File: J4NELhXbzsP0O-fo9Zwk6eyKSHs.roa (raw, json)
Hash identifier: PonpGKcr3QXOrmCtfTF4Hg7UZOzqXswPkTn+XjDFr7I=
Subject key identifier: 27:83:44:2E:15:DB:CE:C3:F4:3B:E7:E8:F5:9C:24:E9:EC:8A:48:7B
Certificate issuer: /CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
Certificate serial: 0195B91A658D72D842C7EA9F934B8501EA37
Authority key identifier: 05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/J4NELhXbzsP0O-fo9Zwk6eyKSHs.roa
Signing time: Fri 21 Mar 2025 14:27:49 +0000
ROA not before: Fri 21 Mar 2025 14:27:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8240
IP address blocks: 185.161.84.0/22 maxlen: 24
185.161.87.0/24 maxlen: 24
185.172.24.0/22 maxlen: 22
195.80.96.0/19 maxlen: 19
213.184.32.0/19 maxlen: 19
2a02:88::/32 maxlen: 32
2a0b:6c00::/29 maxlen: 32
2a0b:6c00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b9:1a:65:8d:72:d8:42:c7:ea:9f:93:4b:85:01:ea:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
Validity
Not Before: Mar 21 14:27:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2783442e15dbcec3f43be7e8f59c24e9ec8a487b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b0:88:06:54:80:b1:85:8c:30:94:9d:c1:59:
54:c3:b7:86:44:82:95:30:7b:a5:c3:27:e6:f3:88:
94:f3:d4:b7:bc:10:d3:d3:3d:ed:53:cc:a5:68:50:
f0:e9:e3:c1:ae:35:8d:3c:6b:40:e9:23:f1:8f:ab:
da:0d:da:06:c7:7a:a3:ff:f3:95:d0:51:c9:35:84:
e4:40:ae:25:16:8b:94:98:d6:ca:58:3a:f8:2d:b9:
1a:7b:a6:38:e6:1d:f3:96:e8:ad:d5:50:1f:c2:6c:
0e:9d:cc:e0:e6:6c:68:7d:01:56:25:d4:a7:36:32:
e4:7d:fb:16:0c:3c:c0:bf:ff:e9:eb:06:82:2c:f2:
25:7f:de:e4:47:37:45:3a:84:ed:dd:89:e5:43:fa:
85:70:a0:6a:6e:8d:29:43:40:67:e8:65:8c:6f:5f:
98:ab:1a:f4:c4:b4:9b:13:61:36:26:cd:4b:ca:06:
f8:70:5c:5b:0e:cb:3f:21:69:66:65:ce:3e:37:43:
65:f5:06:80:1a:84:35:ae:07:95:70:40:a1:aa:40:
be:31:7f:7b:be:d0:3a:bd:93:fa:da:1b:74:16:91:
73:32:3b:3b:90:20:cf:58:1f:9e:ee:2f:7e:f2:f4:
e5:e6:fb:b7:39:ce:4f:69:8d:e0:b7:54:1f:ee:88:
8d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:83:44:2E:15:DB:CE:C3:F4:3B:E7:E8:F5:9C:24:E9:EC:8A:48:7B
X509v3 Authority Key Identifier:
keyid:05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/J4NELhXbzsP0O-fo9Zwk6eyKSHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.84.0/22
185.172.24.0/22
195.80.96.0/19
213.184.32.0/19
IPv6:
2a02:88::/32
2a0b:6c00::/29
Signature Algorithm: sha256WithRSAEncryption
52:15:00:53:29:1c:dd:87:30:65:c2:3c:5e:f7:3e:8b:41:b8:
e1:b0:d5:c1:6c:df:5c:ef:7a:ea:44:6b:4c:b2:12:4d:51:2d:
34:e6:23:3d:57:8a:8d:49:53:0c:86:58:03:d5:48:6e:48:c1:
9a:da:b5:9b:9a:1a:1f:1c:ec:3a:c7:e9:56:42:c2:13:a5:0e:
0a:c1:e1:d1:73:bc:84:08:05:e4:a6:b5:26:d1:43:9a:2e:66:
87:80:36:6a:08:bb:44:3b:fa:2e:c0:da:b5:f4:a2:82:c6:ed:
48:bc:af:09:f0:ca:1d:33:2a:23:b7:db:2c:db:68:a1:73:2f:
ba:8f:b6:6d:a4:c3:68:86:78:2f:7d:2a:ee:4f:27:1a:3a:93:
2d:3b:f6:ce:bb:fe:5f:8e:52:cc:ea:99:35:b5:b4:ac:7a:61:
76:e5:13:f4:12:aa:a3:49:6c:25:99:7a:35:4d:5f:2b:30:26:
25:4b:ad:82:3e:fa:f8:7e:e5:9e:4f:0b:cb:20:da:06:ca:ee:
fd:05:f0:32:71:fc:4d:04:91:b6:a6:af:6d:63:09:56:f8:dc:
1e:ca:eb:e7:a3:e2:7e:41:3d:c0:ce:34:a8:69:d6:28:19:17:
56:68:d5:b1:b7:61:50:81:a0:45:12:ff:98:57:3b:f0:98:df:
e8:c4:be:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:36 2025 by rpki-client on console.sobornost.net