Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/jeS6MzGjyajhq1xTKVFYKQisOvE.roa
File: jeS6MzGjyajhq1xTKVFYKQisOvE.roa (raw, json)
Hash identifier: jH0c3uNXNqP5D5cKBijjnuw+oityQx81s+MFU0/3N0E=
Subject key identifier: 8D:E4:BA:33:31:A3:C9:A8:E1:AB:5C:53:29:51:58:29:08:AC:3A:F1
Certificate issuer: /CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Certificate serial: 01943C3206CF4CD267F5B407A98826293219
Authority key identifier: D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/jeS6MzGjyajhq1xTKVFYKQisOvE.roa
Signing time: Mon 06 Jan 2025 15:18:18 +0000
ROA not before: Mon 06 Jan 2025 15:18:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40994
IP address blocks: 31.14.17.0/24 maxlen: 24
46.102.156.0/24 maxlen: 24
46.102.157.0/24 maxlen: 24
83.138.55.0/24 maxlen: 24
86.106.182.0/23 maxlen: 24
94.177.8.0/23 maxlen: 24
110.172.148.0/24 maxlen: 24
193.219.97.0/24 maxlen: 24
203.34.137.0/24 maxlen: 24
203.98.67.0/24 maxlen: 24
2a0d:f302::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3c:32:06:cf:4c:d2:67:f5:b4:07:a9:88:26:29:32:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Validity
Not Before: Jan 6 15:18:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8de4ba3331a3c9a8e1ab5c532951582908ac3af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a6:9f:74:3d:78:13:a5:5d:53:4e:67:6f:91:
aa:72:bb:02:d6:b7:73:3f:64:60:81:69:f4:6b:b5:
24:ae:a3:76:04:26:72:d4:4b:ff:a2:f0:e3:d7:f2:
36:b4:f7:b8:cf:e2:d9:1e:80:cd:18:36:c9:9c:1d:
92:81:5d:c3:76:5f:15:2c:fe:91:32:c0:c9:e0:4f:
eb:2f:7c:be:0e:5a:ee:61:02:54:9b:14:ce:d0:f7:
c4:74:fc:e7:e2:77:a0:18:17:ef:46:8f:3e:b8:6d:
75:20:7c:91:a1:d8:7f:df:0a:61:fa:af:94:4f:68:
10:e5:ed:c5:f2:c3:6e:94:ef:92:0d:a2:b5:c9:c5:
c2:8e:e3:d2:9d:26:5a:88:36:07:30:99:c1:a3:b7:
b9:b6:c0:22:e4:6a:38:bc:55:0a:37:14:0c:2b:89:
56:fd:67:dc:78:ec:cb:d6:bc:e4:b7:ba:1f:41:db:
a9:86:dc:ad:1b:34:fb:af:38:9d:29:f7:11:22:13:
8f:60:c5:cd:22:d8:86:42:d7:dd:8e:7a:02:63:7f:
38:77:87:01:a9:db:bd:d3:c6:5c:f9:84:36:b8:a1:
5c:3a:29:9a:e7:0b:0e:7b:9c:86:82:b6:f7:d4:bd:
82:b7:0c:01:79:76:20:f1:a6:1b:d8:c8:02:e0:d1:
6a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E4:BA:33:31:A3:C9:A8:E1:AB:5C:53:29:51:58:29:08:AC:3A:F1
X509v3 Authority Key Identifier:
keyid:D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/jeS6MzGjyajhq1xTKVFYKQisOvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.17.0/24
46.102.156.0/23
83.138.55.0/24
86.106.182.0/23
94.177.8.0/23
110.172.148.0/24
193.219.97.0/24
203.34.137.0/24
203.98.67.0/24
IPv6:
2a0d:f302::/32
Signature Algorithm: sha256WithRSAEncryption
09:bf:d4:d4:71:8d:38:96:0f:8c:20:c0:8a:74:01:3d:26:a0:
a2:8b:ca:22:8f:f3:bd:c7:12:a0:af:7f:a7:ec:de:70:a7:c3:
c7:1a:c9:25:4f:63:76:55:5d:79:4e:5c:81:68:c6:ff:5f:6e:
16:f6:19:fa:00:72:5b:04:7f:4c:26:6d:ff:4c:46:da:66:f4:
50:0d:70:9e:8c:8c:42:1c:bc:63:cd:d5:2c:bf:8e:b2:3e:a1:
9b:2c:a9:8f:9c:8e:bf:00:1d:b6:c1:b9:74:b3:d3:1c:2e:1c:
b0:86:e1:d8:fc:d7:11:19:a6:7a:49:6a:24:35:2d:c1:c8:7f:
07:b7:e0:0e:bf:7f:c7:66:86:ef:cc:e1:00:fa:fb:7c:00:78:
30:73:1f:0c:b9:5f:b6:e9:86:cc:91:c3:8b:23:9d:55:e6:4a:
27:7a:0d:8b:9d:d3:c6:8f:a1:81:8f:c8:6c:bb:ac:1c:23:6f:
70:b6:89:c8:80:03:c7:e7:02:13:9a:2d:71:20:bb:0a:7e:d1:
1d:8b:21:6c:ca:7f:25:86:98:19:8e:ab:b7:c3:55:99:db:7a:
e4:27:1f:08:af:cc:d5:d6:8d:af:c4:eb:61:d6:92:30:b5:3d:
11:14:50:5d:27:94:18:b5:1c:92:92:f3:a9:17:8a:0f:bf:2e:
a0:ec:aa:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:29 2025 by rpki-client on console.sobornost.net