Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/jfhQ8qxqYX2y_c95n4BoqN_WfWo.roa
File: jfhQ8qxqYX2y_c95n4BoqN_WfWo.roa (raw, json)
Hash identifier: zTJaslFTlA280BuQpjcGlBIpfzZ8r2vvsWV2BclBmps=
Subject key identifier: 8D:F8:50:F2:AC:6A:61:7D:B2:FD:CF:79:9F:80:68:A8:DF:D6:7D:6A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019423D6EFB3F6DF8AD5126123305A1A5C9F
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/jfhQ8qxqYX2y_c95n4BoqN_WfWo.roa
Signing time: Wed 01 Jan 2025 21:47:56 +0000
ROA not before: Wed 01 Jan 2025 21:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197033
IP address blocks: 46.18.224.0/21 maxlen: 21
91.216.43.0/24 maxlen: 24
185.24.152.0/22 maxlen: 22
185.33.88.0/22 maxlen: 22
185.147.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ef:b3:f6:df:8a:d5:12:61:23:30:5a:1a:5c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Jan 1 21:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8df850f2ac6a617db2fdcf799f8068a8dfd67d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e0:29:4c:c3:9d:a3:82:c3:b0:6c:39:33:64:
7f:b3:af:be:11:29:21:5e:78:7d:52:d0:45:ee:e7:
ed:05:89:1f:2a:d6:4d:ef:25:db:07:fc:e8:0a:82:
cf:a2:67:85:43:7a:14:d7:89:ef:1a:23:ab:ab:34:
dc:ac:5e:26:99:7e:68:e7:f9:6d:b5:1b:88:c0:1c:
98:0e:17:9b:79:6f:f9:71:34:c4:bc:4b:59:28:18:
fa:31:65:7c:3f:7d:1e:2f:93:8f:43:9f:14:ee:b0:
8b:9c:a4:cf:84:60:a2:ee:84:46:c6:ff:75:ed:1a:
88:24:6f:71:e4:c1:99:50:c3:4b:b5:fe:3a:19:df:
2e:97:39:bb:6b:bf:e6:8d:0f:bf:f8:0c:8c:d2:13:
ee:aa:3a:59:9e:23:06:5a:e3:d7:16:41:f1:70:e3:
30:46:9d:60:b4:41:06:09:97:7a:cc:d2:37:b5:04:
7e:60:02:d4:96:1b:1d:4e:bb:83:66:0c:6a:27:fe:
bb:d7:af:77:f6:fd:16:d6:04:1a:ea:8e:74:ef:d6:
a9:65:bf:82:53:29:35:9d:55:49:9d:0e:28:3c:37:
4e:8a:af:17:d3:8f:1c:d8:4c:f5:25:e4:b2:35:a2:
79:ff:c3:dc:bc:50:80:d1:f3:6e:61:fc:d9:27:71:
f8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F8:50:F2:AC:6A:61:7D:B2:FD:CF:79:9F:80:68:A8:DF:D6:7D:6A
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/jfhQ8qxqYX2y_c95n4BoqN_WfWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.224.0/21
91.216.43.0/24
185.24.152.0/22
185.33.88.0/22
185.147.65.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:a1:25:cb:e5:bd:f3:7a:52:a5:a4:7a:d8:ca:57:24:28:fa:
66:ef:36:05:55:e0:39:cc:0c:f4:6d:8c:2e:f0:35:84:aa:6f:
c6:e2:40:17:0f:cf:db:75:db:92:7d:28:ef:3a:45:b1:c8:55:
05:c1:59:08:23:74:7c:fd:c2:8b:5c:a4:69:8a:17:4b:6a:2b:
cb:58:a7:f7:fa:8f:3a:62:eb:73:f4:c3:a1:e3:51:85:f6:f8:
a0:f5:ed:3c:e3:41:a9:41:8b:68:d1:55:8d:11:e5:07:e4:1c:
7a:14:04:db:c5:1b:eb:3e:58:6e:59:c1:c7:37:c2:e3:1f:79:
6c:dc:3f:ac:e0:da:08:f2:63:ff:06:2d:cc:95:fd:7a:52:a7:
32:75:64:25:d2:50:cc:6c:f0:09:d0:6e:51:df:eb:8c:75:58:
47:5e:9e:30:93:71:71:8d:7f:3f:f6:3c:51:a0:68:e0:97:b0:
b1:74:e5:2c:79:22:3b:28:39:62:fe:a8:9c:99:12:0c:40:80:
59:df:59:7a:da:15:a5:a1:24:25:1f:40:cf:a2:14:df:64:c2:
66:9b:4c:aa:57:c7:2c:e2:70:01:ef:4a:ec:d1:6a:b0:32:1b:
32:46:28:a4:6e:81:af:c1:4c:63:ec:c4:a4:28:8c:b6:90:37:
2e:ab:f0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:27 2025 by rpki-client on console.sobornost.net