Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Jc9gCZFYVkn4UVeq03DjU86k3oA.roa
File: Jc9gCZFYVkn4UVeq03DjU86k3oA.roa (raw, json)
Hash identifier: d6a6fcDFNgCQ6Wus8ItQT0qiwJ6PVLkrNZhb4DY6MSc=
Subject key identifier: 25:CF:60:09:91:58:56:49:F8:51:57:AA:D3:70:E3:53:CE:A4:DE:80
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0195F56E6F00C5E07642231BA83CD8790BB9
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Jc9gCZFYVkn4UVeq03DjU86k3oA.roa
Signing time: Wed 02 Apr 2025 07:36:50 +0000
ROA not before: Wed 02 Apr 2025 07:36:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 80.240.87.0/24 maxlen: 24
82.153.231.0/24 maxlen: 24
109.176.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f5:6e:6f:00:c5:e0:76:42:23:1b:a8:3c:d8:79:0b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 2 07:36:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25cf600991585649f85157aad370e353cea4de80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4c:8d:6d:06:a6:88:66:c0:6b:70:67:3f:47:
86:0f:0b:82:e0:ae:66:45:b4:4e:73:8f:4d:e2:02:
7c:3f:b5:78:aa:32:48:43:0a:ee:99:0d:49:74:13:
6b:63:0d:dd:5e:dc:b8:19:62:03:02:8b:95:6e:18:
2a:bc:43:43:fd:cc:1c:57:4b:a7:5b:4b:0e:4a:1b:
18:c3:3f:b4:cb:45:7f:64:47:6e:02:9e:66:db:91:
bd:5a:6b:96:f7:50:31:85:c5:8d:54:02:5d:ce:22:
3e:aa:a5:9b:4f:f3:5b:d0:d9:6c:bd:59:3e:5b:1b:
cf:02:65:db:f9:0a:21:a2:b8:df:dc:b7:39:45:30:
19:76:b4:8c:bd:95:68:ca:38:a8:90:1f:bb:24:ca:
23:aa:56:cd:ed:85:23:09:2e:f4:8f:73:bd:95:e7:
2a:3f:62:01:4c:b5:15:b6:24:74:01:4d:3d:4d:88:
7f:7e:db:1d:7d:66:a3:e9:40:02:fc:1a:c7:64:8e:
e4:2a:41:5f:56:84:9f:36:0e:8f:f9:dd:ba:5f:e8:
d8:a0:f8:99:8f:a2:6b:71:65:ba:57:5c:b3:7b:0e:
c4:5d:d5:05:54:90:88:5f:de:75:52:fc:e3:25:eb:
06:6e:94:fb:53:76:aa:9c:d0:dd:45:71:13:ab:d6:
75:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CF:60:09:91:58:56:49:F8:51:57:AA:D3:70:E3:53:CE:A4:DE:80
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Jc9gCZFYVkn4UVeq03DjU86k3oA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.87.0/24
82.153.231.0/24
109.176.15.0/24
Signature Algorithm: sha256WithRSAEncryption
88:a5:62:a1:7a:d8:a9:d8:99:d3:78:69:18:4e:90:09:08:58:
1b:f7:07:a9:64:44:53:67:ff:70:c4:23:3b:c9:bb:9a:2b:fd:
80:3b:0e:87:4e:4a:f5:13:e1:0f:5c:5f:b6:fa:df:1d:82:d6:
60:55:dc:0c:42:9d:6a:e5:08:91:54:52:7e:62:14:52:f9:48:
e1:1e:a6:2f:51:91:45:fd:8f:5a:71:0e:48:f2:14:b0:dc:ce:
14:a6:07:7d:4d:c5:b9:3e:80:38:dc:2e:75:6c:ba:8b:7a:32:
9c:c5:8a:3d:24:5c:60:ce:76:a1:7c:d5:ba:6e:56:2a:70:78:
bf:5e:dd:9c:f2:e3:c4:55:d9:6d:d2:d6:e9:7a:30:1c:4c:06:
15:3d:74:11:fc:2e:f8:7e:81:7a:ff:8b:6a:53:40:bf:aa:1f:
1b:60:2d:61:a2:47:d3:38:fd:04:99:a1:5f:44:1c:f7:fb:66:
25:34:b4:9c:2d:f4:ca:53:78:64:81:46:a7:57:cf:d7:f1:15:
be:c3:7e:90:00:41:7a:bb:42:91:06:17:c7:b2:33:67:38:29:
b9:9b:83:4c:1e:33:24:d4:ac:06:fc:48:c1:5f:c6:3a:fb:5a:
e9:74:03:2f:8a:66:ea:49:ef:db:ec:61:f1:ef:7f:e4:0f:8e:
f0:b2:fe:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:16 2025 by rpki-client on console.sobornost.net