Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/JROuZAUGn_uROa26H7eCA7kb4tU.roa
File: JROuZAUGn_uROa26H7eCA7kb4tU.roa (raw, json)
Hash identifier: VxgK0RqcCU8OfeeQD1Bnel6yFDs/O6brmPZY7KVwoN4=
Subject key identifier: 25:13:AE:64:05:06:9F:FB:91:39:AD:BA:1F:B7:82:03:B9:1B:E2:D5
Certificate issuer: /CN=7c1bc58ad95da78492b42d8863d45e8f6aa6aa24
Certificate serial: 019424B392109370BCB1272835C2D7DB67BE
Authority key identifier: 7C:1B:C5:8A:D9:5D:A7:84:92:B4:2D:88:63:D4:5E:8F:6A:A6:AA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/JROuZAUGn_uROa26H7eCA7kb4tU.roa
Signing time: Thu 02 Jan 2025 01:48:55 +0000
ROA not before: Thu 02 Jan 2025 01:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48964
IP address blocks: 178.216.224.0/21 maxlen: 21
178.216.224.0/23 maxlen: 23
178.216.226.0/23 maxlen: 23
178.216.228.0/23 maxlen: 23
178.216.230.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:92:10:93:70:bc:b1:27:28:35:c2:d7:db:67:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c1bc58ad95da78492b42d8863d45e8f6aa6aa24
Validity
Not Before: Jan 2 01:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2513ae6405069ffb9139adba1fb78203b91be2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3f:8e:c3:cf:1b:99:0c:f3:df:51:39:22:30:
c3:24:0f:8d:d2:a7:f8:0e:27:0b:77:cd:2a:f9:6d:
9d:e3:aa:89:4a:42:3e:7a:26:a6:5a:f5:bc:be:cd:
eb:1d:1e:0f:6b:e8:f6:09:c3:eb:54:a5:dc:9a:21:
e7:07:18:ec:82:69:cf:ef:4a:96:c8:b5:fe:ff:e5:
92:91:53:43:ec:d9:93:ec:b4:2b:70:d0:40:eb:40:
6c:29:0b:8c:51:6d:bd:d8:92:3f:02:1a:52:cc:b5:
df:ef:4a:5a:71:c4:3a:80:66:2a:2b:75:76:e7:05:
c6:55:34:f2:93:5c:22:bd:98:f1:5f:59:39:35:79:
53:7f:58:24:aa:81:51:7c:c7:f0:33:7c:40:5e:0d:
11:31:a2:50:a0:b2:f7:28:ae:d5:54:48:b0:c6:d7:
9a:15:79:3c:69:b0:7b:20:88:86:1c:40:3d:8f:a5:
11:5e:63:0f:43:cb:50:0d:79:95:cb:43:13:af:88:
a0:d1:e5:ef:c7:68:60:14:c5:8e:12:ee:5b:21:03:
bb:7f:d2:9d:92:01:6d:64:d2:38:e5:43:a5:68:54:
be:eb:43:6e:9f:3d:4b:f3:f3:8b:6d:fc:54:ae:6b:
e5:83:cd:73:ad:ae:04:2c:66:fe:4c:61:39:b8:c9:
27:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:13:AE:64:05:06:9F:FB:91:39:AD:BA:1F:B7:82:03:B9:1B:E2:D5
X509v3 Authority Key Identifier:
keyid:7C:1B:C5:8A:D9:5D:A7:84:92:B4:2D:88:63:D4:5E:8F:6A:A6:AA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/JROuZAUGn_uROa26H7eCA7kb4tU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.216.224.0/21
Signature Algorithm: sha256WithRSAEncryption
20:ef:34:2e:38:9e:ee:42:d1:f6:3d:24:ad:2f:ba:36:77:c8:
b5:c9:47:7a:2f:38:6f:af:e3:ed:bb:26:70:47:d5:56:34:bc:
5d:80:5a:7c:19:f6:f3:51:30:6b:77:55:7a:73:85:f2:c9:c1:
29:bd:a9:82:2c:93:61:c4:4a:2d:24:8f:a1:44:4d:72:fb:38:
fa:b5:9a:3a:14:2f:fd:a8:7d:4c:88:9b:41:3b:e7:95:f1:ce:
69:52:84:26:5c:50:30:9d:1c:23:6e:9b:ca:b9:a2:94:ee:24:
d4:31:7f:1a:cf:e1:a4:1b:68:ea:d3:f9:3d:70:e2:2c:34:e2:
c2:eb:0e:a6:43:c0:af:08:6d:f7:14:64:85:93:f3:91:4e:7b:
eb:c1:5a:dc:0b:3a:ba:e8:08:dc:25:f9:bd:73:22:c3:2d:8e:
58:67:42:4c:46:ba:d4:16:19:ca:c8:55:8e:66:fb:01:c1:e7:
60:fa:36:60:bf:c5:69:80:94:22:09:e4:72:40:7a:44:2c:0a:
22:fe:55:74:d2:49:12:59:b9:8b:fe:f1:49:d4:4e:76:89:53:
60:6e:d2:61:52:9d:28:e5:d9:19:50:81:bd:6d:67:52:db:db:
8c:26:e8:b7:59:e0:f8:16:b6:db:72:a2:8b:bb:2e:0a:8d:3b:
03:9a:cf:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:19 2025 by rpki-client on console.sobornost.net