Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/JqQax9sv0vRADwA78DtmjWkQLEE.roa
File: JqQax9sv0vRADwA78DtmjWkQLEE.roa (raw, json)
Hash identifier: Yj45NvtpL9PKcZ/9PbAe7wPZg60kGlm36nNetlLSWMc=
Subject key identifier: 26:A4:1A:C7:DB:2F:D2:F4:40:0F:00:3B:F0:3B:66:8D:69:10:2C:41
Certificate issuer: /CN=c7a2e4eb9fd3ccd1ba44a362f76f989b7b44d5f2
Certificate serial: 01942368C5B2C6EC97F602CD3C4DDF46370B
Authority key identifier: C7:A2:E4:EB:9F:D3:CC:D1:BA:44:A3:62:F7:6F:98:9B:7B:44:D5:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/JqQax9sv0vRADwA78DtmjWkQLEE.roa
Signing time: Wed 01 Jan 2025 19:47:36 +0000
ROA not before: Wed 01 Jan 2025 19:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62452
IP address blocks: 194.33.68.0/24 maxlen: 24
194.33.70.0/23 maxlen: 23
2001:67c:2994::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:c5:b2:c6:ec:97:f6:02:cd:3c:4d:df:46:37:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7a2e4eb9fd3ccd1ba44a362f76f989b7b44d5f2
Validity
Not Before: Jan 1 19:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26a41ac7db2fd2f4400f003bf03b668d69102c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ff:84:96:53:be:12:03:ff:95:37:74:8e:02:
06:2e:40:0e:f0:74:04:0e:09:d6:97:0d:55:bc:a3:
d7:54:a4:4e:54:a1:4a:a0:fb:8b:4d:a8:44:13:da:
c9:b4:45:e3:b8:18:ce:ab:a4:52:22:17:19:43:ab:
59:ce:4b:ae:76:da:ea:07:64:a6:ce:36:93:48:3c:
a9:00:22:76:3e:d6:52:a9:10:a8:94:49:56:d0:55:
bb:12:10:71:22:4d:dc:96:4d:37:45:58:3f:13:7b:
bd:9e:a2:88:19:14:97:80:99:26:6b:d4:48:3c:0e:
46:fa:97:57:bf:0e:cb:9b:f2:ba:d4:4b:a4:60:a9:
d3:0d:58:09:90:21:69:86:a1:19:44:13:22:0b:26:
d1:db:13:97:3b:1a:0c:19:ec:6b:67:0c:09:7a:ba:
49:77:dd:75:46:37:bd:72:5f:e4:77:9d:93:2a:be:
60:a0:77:d9:af:03:41:cb:a7:89:00:40:11:b4:24:
de:45:b2:ff:de:02:04:de:95:83:3b:73:8a:81:20:
ff:dc:c9:a2:5f:3f:fe:6a:76:a0:ca:50:f4:0f:57:
66:1d:83:b7:9e:97:6b:2d:a4:8d:b5:62:6d:ce:5d:
1e:a0:30:d7:c9:de:dd:d1:76:c7:e3:ff:48:ec:7a:
4f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A4:1A:C7:DB:2F:D2:F4:40:0F:00:3B:F0:3B:66:8D:69:10:2C:41
X509v3 Authority Key Identifier:
keyid:C7:A2:E4:EB:9F:D3:CC:D1:BA:44:A3:62:F7:6F:98:9B:7B:44:D5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/JqQax9sv0vRADwA78DtmjWkQLEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.68.0/24
194.33.70.0/23
IPv6:
2001:67c:2994::/48
Signature Algorithm: sha256WithRSAEncryption
7d:d3:2a:4b:96:e2:d4:a6:e0:57:7e:20:e2:7b:1f:ca:7d:a4:
99:e8:e7:e5:92:6f:2e:18:d2:f8:db:49:d2:ee:db:64:d6:b0:
f7:27:93:e0:a2:97:59:ac:c4:3e:4c:b1:56:72:2a:81:76:6d:
f9:22:e8:c4:f6:78:a5:61:ea:bd:40:53:51:5e:16:11:9e:0b:
27:9b:63:dd:64:4a:d2:0e:08:43:ca:3f:b3:bd:41:09:7c:d9:
92:ce:9b:64:69:2b:4e:f7:c3:da:c8:43:a5:14:d5:3d:cc:a5:
2b:cb:f6:d1:52:68:9b:2d:dd:c0:de:04:16:17:71:b8:5d:78:
00:37:d5:34:27:71:46:a8:02:c1:26:0b:07:01:83:af:44:a7:
26:a4:95:19:a2:8b:cf:8d:74:a7:d0:25:b9:34:fd:15:e3:25:
b7:a6:05:5c:1b:d4:dc:2b:a0:76:99:b0:7a:91:38:a6:65:47:
a8:bb:34:a4:43:92:6d:1f:d9:42:c2:6d:d9:16:56:01:99:ca:
ae:1a:38:fb:bc:f8:16:11:00:89:4b:ac:e7:0a:54:32:40:b2:
dd:81:84:4a:3b:a2:4a:9b:a4:dc:18:46:13:15:93:cd:f7:8f:
f8:ea:3a:f2:96:9e:3f:14:54:d4:9b:96:4e:d3:6f:a9:ae:b7:
fa:55:ba:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:32 2025 by rpki-client on console.sobornost.net