Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/J2krWsZ_nrVo68RmuJg6gtIP5Cc.roa
File: J2krWsZ_nrVo68RmuJg6gtIP5Cc.roa (raw, json)
Hash identifier: edy80RXVye8xP8f43mCgyStXMeEBN6IE5pQ7y7lCAc8=
Subject key identifier: 27:69:2B:5A:C6:7F:9E:B5:68:EB:C4:66:B8:98:3A:82:D2:0F:E4:27
Certificate issuer: /CN=b921277f3e7954a4af5520a99042fb0893af804d
Certificate serial: 019426D9565711A0C4E35291CB619AE31D59
Authority key identifier: B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/J2krWsZ_nrVo68RmuJg6gtIP5Cc.roa
Signing time: Thu 02 Jan 2025 11:49:25 +0000
ROA not before: Thu 02 Jan 2025 11:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213131
IP address blocks: 185.230.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:56:57:11:a0:c4:e3:52:91:cb:61:9a:e3:1d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b921277f3e7954a4af5520a99042fb0893af804d
Validity
Not Before: Jan 2 11:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27692b5ac67f9eb568ebc466b8983a82d20fe427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:76:17:4c:29:7d:3a:dd:78:a4:e6:47:85:be:
54:4d:99:e9:1a:5f:ff:52:b5:c1:ec:b5:95:f8:b0:
d1:ac:de:84:48:9f:ac:27:0b:91:e8:33:ae:22:50:
5b:bb:0d:24:a4:91:ac:78:37:43:5e:46:67:d4:18:
b4:9f:00:af:e4:3e:69:0c:7a:bb:66:9d:88:01:a7:
97:4c:3c:96:80:2d:9f:31:a8:7b:06:66:91:7e:2b:
63:83:72:92:bd:05:85:a8:7a:65:ca:ca:0b:f2:2a:
29:5a:29:47:5c:6d:ff:0c:6a:f6:b4:f7:4a:15:ff:
6a:2c:3a:97:c0:b7:73:fb:91:c9:51:b8:a1:59:05:
12:86:02:d6:ed:df:7d:de:bb:1f:dc:66:1f:23:ed:
b7:91:5e:b0:38:ea:22:e2:e0:e9:ec:c5:99:2e:df:
22:58:4c:23:0f:a0:53:26:7d:e0:11:97:f3:0d:27:
bc:22:33:ca:2f:e5:d0:10:58:4b:a9:f2:e0:64:b6:
7a:cf:fa:5a:3b:48:86:34:e2:8e:ad:55:2a:09:0f:
5e:6b:41:bd:0b:5f:26:a0:f0:6d:70:eb:f1:75:e9:
1f:24:76:2b:29:91:20:cf:2d:af:15:c5:e7:e5:f8:
ad:58:3f:3b:a0:7d:f9:10:76:a9:55:5d:b8:0d:35:
77:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:69:2B:5A:C6:7F:9E:B5:68:EB:C4:66:B8:98:3A:82:D2:0F:E4:27
X509v3 Authority Key Identifier:
keyid:B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/J2krWsZ_nrVo68RmuJg6gtIP5Cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.158.0/24
Signature Algorithm: sha256WithRSAEncryption
89:58:bf:cf:87:2e:97:6c:e1:47:f9:33:bf:0a:e9:cc:d0:0a:
70:41:72:7d:7e:a7:a4:e1:3b:f3:3c:05:5e:00:aa:52:24:bc:
af:30:5c:a1:0f:3b:e1:22:13:49:a3:a0:f7:da:56:5c:a9:b9:
94:25:03:d7:41:fc:c1:fc:20:b9:dc:0b:37:b6:72:f7:42:a2:
d8:b8:91:3d:3f:bb:4e:24:a2:0b:48:89:4f:82:cf:d1:28:49:
4d:a2:12:1e:3a:3b:00:7c:48:db:ff:e5:2a:00:43:e1:a1:9d:
84:91:6f:22:7e:07:44:45:62:cd:89:6f:50:31:34:ba:e6:67:
d0:8a:ab:ec:a7:2e:ef:f4:28:a2:69:dc:9f:5c:de:34:e2:87:
95:22:05:b6:67:ef:fb:77:45:41:c9:e4:b6:81:38:43:64:5f:
28:c1:c9:d6:8d:f8:fb:6f:7e:1c:54:24:74:2f:b2:8a:f8:73:
58:a3:16:21:47:ee:68:3c:ab:06:17:2c:26:5e:22:6f:8f:f3:
1a:55:64:a7:77:7c:ac:20:6a:b9:2d:85:33:e0:82:b3:58:6c:
d3:b2:87:b7:45:dc:ac:1a:d1:49:ad:ab:61:d3:30:a2:b9:99:
24:42:64:cd:07:b4:c2:f9:f6:a4:87:4b:68:d9:84:27:fe:1b:
fc:b2:52:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:32 2025 by rpki-client on console.sobornost.net