Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nJBx_aFvLLmg9WQ03TK76fpJWGM.roa
File: nJBx_aFvLLmg9WQ03TK76fpJWGM.roa (raw, json)
Hash identifier: 02dNoeVE9Sy74k3q/XOECz/G2VHIiUVMONX/87WPyrU=
Subject key identifier: 9C:90:71:FD:A1:6F:2C:B9:A0:F5:64:34:DD:32:BB:E9:FA:49:58:63
Certificate issuer: /CN=9d8c08f4ad8fead371da3e7c02b6cfd689fca5ba
Certificate serial: 019461C470C5E005B6606D6B902FF19B0B55
Authority key identifier: 9D:8C:08:F4:AD:8F:EA:D3:71:DA:3E:7C:02:B6:CF:D6:89:FC:A5:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nJBx_aFvLLmg9WQ03TK76fpJWGM.roa
Signing time: Mon 13 Jan 2025 22:24:11 +0000
ROA not before: Mon 13 Jan 2025 22:24:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210391
IP address blocks: 185.147.252.0/24 maxlen: 24
185.147.254.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:61:c4:70:c5:e0:05:b6:60:6d:6b:90:2f:f1:9b:0b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8c08f4ad8fead371da3e7c02b6cfd689fca5ba
Validity
Not Before: Jan 13 22:24:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c9071fda16f2cb9a0f56434dd32bbe9fa495863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0f:6a:bc:7d:80:ca:91:b5:0e:d7:0b:ce:06:
88:b4:23:3f:80:99:f6:09:62:2e:24:35:59:ac:61:
dc:c7:71:e7:71:2e:91:28:e4:b3:69:00:81:db:b7:
6a:e6:c7:b6:79:3c:7d:3c:cb:2f:b0:f5:3d:5f:7c:
d5:df:7d:c1:6a:81:fc:de:40:f0:d6:bd:ce:23:f5:
0a:a4:84:11:42:4b:6f:cd:1a:17:dd:b4:58:df:35:
3a:3f:75:05:7c:d0:89:08:16:04:15:4a:71:a6:43:
08:4d:3b:ce:47:69:1b:09:fe:99:4c:22:53:26:0f:
0d:a5:c3:51:e9:10:e1:2f:7a:bc:dc:38:d4:f6:75:
04:3d:f4:21:20:06:b5:8c:57:83:cd:8f:1f:e0:96:
b7:ff:0a:43:8e:2f:0c:9e:b6:46:f7:f1:7a:65:ef:
2e:fb:a8:c3:d2:d7:99:da:02:f5:c4:47:d7:4e:75:
31:cf:91:d1:54:ac:ad:d5:ca:2e:d2:86:17:fd:49:
3e:95:b1:e2:10:96:e9:35:81:1b:7c:08:ba:e8:3b:
b6:c0:70:a8:a9:67:14:35:d7:9d:32:6a:f1:b6:39:
8a:fa:f6:ed:0a:63:0d:f8:df:99:ae:03:39:65:f8:
45:0d:23:e2:ef:d4:ec:e2:69:74:f5:16:39:78:28:
ee:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:90:71:FD:A1:6F:2C:B9:A0:F5:64:34:DD:32:BB:E9:FA:49:58:63
X509v3 Authority Key Identifier:
keyid:9D:8C:08:F4:AD:8F:EA:D3:71:DA:3E:7C:02:B6:CF:D6:89:FC:A5:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nJBx_aFvLLmg9WQ03TK76fpJWGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.252.0/24
185.147.254.0/23
Signature Algorithm: sha256WithRSAEncryption
13:d1:56:9c:12:cb:a7:bb:f5:8d:ca:55:96:2b:28:89:8e:32:
6a:35:5e:96:8e:e4:8c:e6:6f:30:0f:ce:dc:98:da:8f:ce:32:
5a:e2:b5:db:b5:37:ae:5d:11:8e:dc:f3:83:f3:81:8c:44:7b:
d2:db:c8:c5:1d:f9:7a:08:19:bd:19:f2:51:fb:ca:d6:32:da:
96:88:fe:eb:de:e1:fe:59:89:b6:e4:ce:98:f1:58:e1:53:85:
35:1f:10:bb:1e:46:57:6c:dc:8a:9b:64:2c:c6:2e:65:24:e3:
a1:9f:ca:39:f0:e0:c8:96:74:dc:49:3b:d6:f1:81:ba:c1:b2:
a8:7d:fd:3b:df:ba:be:ab:11:41:ec:99:c4:25:f4:0d:27:31:
d7:9a:ea:0e:7b:28:da:3f:8d:d8:99:b8:a4:a8:23:18:f8:cb:
35:3d:ac:39:64:5b:5f:87:e5:80:0a:fe:d2:1c:a7:75:91:1b:
f6:31:59:71:c0:fe:6e:8b:42:e4:56:23:21:27:b7:ca:ec:e9:
97:b0:01:e6:0e:d5:e2:a5:d6:6a:cb:0e:02:8a:7a:47:83:b2:
d2:6b:4e:53:f6:f5:72:c6:1e:0e:ba:9c:b4:e3:0e:9e:4e:c4:
be:8d:ef:d7:82:97:06:c0:62:23:5e:85:83:fc:d6:91:f3:c7:
6b:d5:e9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:13 2025 by rpki-client on console.sobornost.net