Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jdy-k1JHcLOhKo_LYhBmj7qiY-4.roa
File: jdy-k1JHcLOhKo_LYhBmj7qiY-4.roa (raw, json)
Hash identifier: 6fC/SIP7jnGAOltCljYq3viR51i4DMh2EyaZxDNbLsY=
Subject key identifier: 8D:DC:BE:93:52:47:70:B3:A1:2A:8F:CB:62:10:66:8F:BA:A2:63:EE
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019613D1E5EE000E1EF0D6AA59A9E88161D1
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jdy-k1JHcLOhKo_LYhBmj7qiY-4.roa
Signing time: Tue 08 Apr 2025 05:14:04 +0000
ROA not before: Tue 08 Apr 2025 05:14:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212793
IP address blocks: 151.243.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:d1:e5:ee:00:0e:1e:f0:d6:aa:59:a9:e8:81:61:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 8 05:14:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ddcbe93524770b3a12a8fcb6210668fbaa263ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d6:02:80:9e:a7:83:e1:e0:7f:66:f7:c0:b3:
b5:2b:14:41:2f:2f:cb:2c:44:a1:0f:fc:0f:92:c7:
fe:d8:73:11:b8:1f:a2:de:18:ee:6e:a8:5c:15:d1:
68:00:bd:02:2e:42:1b:94:21:db:91:ef:0c:29:c9:
76:67:3e:69:df:db:87:da:0e:ce:67:91:dc:ae:6b:
7b:af:14:fd:74:38:d9:4c:20:22:ea:da:14:55:3e:
b2:03:52:f8:ac:99:ae:ce:a1:5f:87:a5:ab:f2:a1:
11:94:7d:db:c3:10:ce:9b:9c:06:1d:fb:a5:fb:11:
21:ca:9c:82:9b:44:4b:2a:f0:d6:7b:0b:bb:19:b2:
06:47:9a:2c:7d:86:c1:54:5a:ab:c3:a3:4f:6d:0b:
6e:98:21:1e:50:c5:70:2e:63:f3:6b:2b:96:ab:06:
2b:2f:ca:da:03:e3:cb:7e:ea:71:08:37:f2:10:1f:
72:d5:0c:2d:ad:76:60:b3:08:d6:6c:2c:b8:1e:bf:
42:bc:5b:2f:c5:55:4c:89:27:1e:8e:5d:64:98:87:
b4:be:0d:fe:72:1f:b2:39:13:ba:42:85:c2:35:80:
f8:c8:5a:3f:71:0a:ef:e2:a9:92:74:1b:7c:6b:2c:
1e:36:8c:4d:75:4b:6a:95:95:c0:89:2d:c6:35:14:
72:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:DC:BE:93:52:47:70:B3:A1:2A:8F:CB:62:10:66:8F:BA:A2:63:EE
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jdy-k1JHcLOhKo_LYhBmj7qiY-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.36.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:07:74:f1:2a:29:52:8e:1d:3f:c3:bc:2c:c5:f4:cf:d0:82:
6f:be:54:ad:2b:6a:9d:ae:f4:ad:70:52:c0:2b:06:d5:3c:c8:
77:4d:fc:33:f5:6c:ef:94:4d:b7:9d:c8:ed:b5:2b:7b:fb:9d:
6c:08:6b:ab:86:5d:6e:7f:0b:69:1c:2b:e0:78:85:4f:93:b3:
27:cb:4f:9d:44:f1:88:d9:e3:ab:33:0a:19:4e:00:31:53:e9:
3f:17:bc:54:39:00:67:76:55:aa:ee:27:ea:ef:b0:3a:f6:8e:
5f:7d:6d:02:6f:bb:f2:f2:e4:a9:40:8d:56:a5:8c:ec:2c:15:
fe:08:f0:d0:aa:3f:f5:21:3e:8e:10:2a:6a:45:66:12:28:11:
37:20:f0:ed:73:70:4b:b1:e3:1d:5f:91:d6:6d:3b:52:e4:a0:
b1:f7:1c:ed:0c:26:8c:ea:34:8a:bf:8b:ad:38:6f:d7:94:ce:
67:e4:60:39:67:3c:e7:51:e4:06:83:9c:82:6f:2b:40:33:f2:
2b:8a:2a:c2:1e:8a:d1:b9:d8:f1:e1:94:a0:cc:01:51:99:f1:
cc:db:90:f5:b8:84:e6:d8:2f:16:31:77:74:78:5c:40:61:22:
42:b9:b2:5e:ad:ec:b5:a3:7b:66:ee:ea:52:93:41:76:1f:5a:
83:4c:19:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:23 2025 by rpki-client on console.sobornost.net