Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/mJE_Ax4JDpdyNPeWFMSVsXGju14.roa
File: mJE_Ax4JDpdyNPeWFMSVsXGju14.roa (raw, json)
Hash identifier: t5TGMLR0+nDNKqcsV3Ft/NZxzvRzL5m7zfzdz2TzA60=
Subject key identifier: 98:91:3F:03:1E:09:0E:97:72:34:F7:96:14:C4:95:B1:71:A3:BB:5E
Certificate issuer: /CN=79e376c8e490d28620c24f97e2b933d62fd0238b
Certificate serial: 0195D312F5AD63D3C63B964E1EA6DC7CF7BC
Authority key identifier: 79:E3:76:C8:E4:90:D2:86:20:C2:4F:97:E2:B9:33:D6:2F:D0:23:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/mJE_Ax4JDpdyNPeWFMSVsXGju14.roa
Signing time: Wed 26 Mar 2025 15:29:49 +0000
ROA not before: Wed 26 Mar 2025 15:29:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58277
IP address blocks: 185.247.220.0/22 maxlen: 22
185.247.220.0/24 maxlen: 24
185.247.221.0/24 maxlen: 24
185.247.222.0/24 maxlen: 24
185.247.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d3:12:f5:ad:63:d3:c6:3b:96:4e:1e:a6:dc:7c:f7:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79e376c8e490d28620c24f97e2b933d62fd0238b
Validity
Not Before: Mar 26 15:29:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98913f031e090e977234f79614c495b171a3bb5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6a:a3:c6:70:e4:89:da:fc:d5:15:7f:d0:c4:
fa:14:0e:81:5b:47:74:82:97:d8:8e:28:8f:05:02:
50:82:a0:bc:11:fe:a6:c5:51:ae:56:d4:76:71:f4:
a3:f2:91:ba:68:84:8e:3e:63:61:3c:36:6f:ee:f1:
55:54:70:54:c9:e9:54:65:a6:69:4d:25:aa:4a:95:
5f:1e:a2:00:d5:c7:fd:99:ac:ea:c1:22:b2:35:ce:
cf:00:10:b8:b5:ad:d0:66:66:0d:30:a9:86:54:9e:
73:8e:e9:ef:15:ef:e9:96:8f:cb:47:98:73:49:77:
e5:8c:ff:a8:99:23:bb:9e:11:42:24:70:ec:6b:39:
bb:c5:84:7e:68:c3:b0:6c:ae:ca:77:1c:9b:63:6f:
e8:fd:99:c2:f1:e0:76:f5:bd:00:35:25:e8:a8:68:
24:d2:c9:68:88:62:56:66:e2:31:5c:34:a7:ac:58:
a2:02:40:80:e4:28:60:61:51:50:9e:14:ca:aa:8a:
f3:fa:db:3b:ac:4c:da:ad:2a:46:87:c1:6c:c8:40:
db:a6:26:ff:d0:0c:98:75:10:84:3a:d2:03:85:bc:
c9:9b:32:be:74:94:4d:b9:96:21:8b:ac:3d:06:27:
2e:4d:8d:aa:41:4b:52:20:ff:7f:bf:55:cc:06:17:
19:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:91:3F:03:1E:09:0E:97:72:34:F7:96:14:C4:95:B1:71:A3:BB:5E
X509v3 Authority Key Identifier:
keyid:79:E3:76:C8:E4:90:D2:86:20:C2:4F:97:E2:B9:33:D6:2F:D0:23:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/mJE_Ax4JDpdyNPeWFMSVsXGju14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.220.0/22
Signature Algorithm: sha256WithRSAEncryption
00:c9:d3:b5:a1:c3:f0:8b:e8:c7:e5:2e:27:f5:12:9d:5b:a1:
0d:c1:3c:78:23:b6:a7:79:79:f8:93:46:54:eb:3d:5e:ea:d4:
b2:57:52:64:3c:21:cb:95:c2:74:18:a9:52:7a:85:f9:b5:44:
fc:54:a6:b6:26:9c:bf:8c:16:e0:8a:9b:f2:f6:5a:26:32:6a:
a3:ef:d2:a8:77:50:bf:cf:75:70:2c:4d:3f:f2:5e:97:3e:1f:
1c:11:6d:27:2a:68:cc:5a:d7:94:4e:a3:23:06:68:fa:3e:79:
68:2f:d8:75:e9:6e:56:be:35:47:36:a9:64:66:8f:cc:23:23:
46:a7:18:30:57:6e:b2:e5:09:5b:bb:69:5a:6a:77:e9:b4:ed:
9e:c6:d6:1d:13:c5:89:ec:9e:02:6d:db:e2:78:53:b8:89:66:
ae:1d:81:3e:7c:be:de:d0:57:64:72:b0:49:4d:e4:d4:7a:11:
80:1a:a6:d1:8e:99:1b:df:84:59:05:96:d0:12:ce:41:21:38:
2c:a5:23:ad:0b:7f:a9:6d:f6:47:aa:62:3b:bd:f8:46:32:ad:
61:81:cd:06:08:98:b1:2d:fc:43:d5:30:ed:2a:be:85:97:b6:
be:58:1e:ad:72:a9:49:bb:d9:75:ff:d3:51:70:aa:8b:a4:4b:
d7:2e:91:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:46 2025 by rpki-client on console.sobornost.net