Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/JS9UWtZttem3o1fXhyj6cDhffLI.roa
File: JS9UWtZttem3o1fXhyj6cDhffLI.roa (raw, json)
Hash identifier: 2i5hM4JyTJhdNStU0tEfjgguQh3ME+ydQZVTRw+h18A=
Subject key identifier: 25:2F:54:5A:D6:6D:B5:E9:B7:A3:57:D7:87:28:FA:70:38:5F:7C:B2
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 019423D70EDE876859368DD5E8AF493929B2
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/JS9UWtZttem3o1fXhyj6cDhffLI.roa
Signing time: Wed 01 Jan 2025 21:48:04 +0000
ROA not before: Wed 01 Jan 2025 21:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196925
IP address blocks: 46.32.169.0/24 maxlen: 24
46.32.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:0e:de:87:68:59:36:8d:d5:e8:af:49:39:29:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: Jan 1 21:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=252f545ad66db5e9b7a357d78728fa70385f7cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ac:c8:d0:cc:60:d9:49:6a:28:30:91:68:94:
28:65:75:81:08:a0:d3:61:79:57:d8:f6:9a:d7:e1:
94:1f:d4:e3:61:95:38:05:02:20:fe:2a:73:79:35:
6a:b3:21:ce:76:df:9f:ab:59:63:65:8f:20:4c:87:
e2:44:71:46:3d:52:3e:39:80:61:b1:67:f8:a5:59:
66:3e:2a:49:23:1d:54:1f:e1:75:17:dc:d7:ad:7c:
5c:ff:6b:bc:dc:9b:5c:e5:6d:10:e0:79:08:d6:9b:
df:13:8e:b9:c6:59:7d:55:2b:ce:5a:4d:06:b4:8d:
cb:e7:8e:6c:b5:4c:aa:75:2b:c2:3c:a4:42:6c:e1:
ac:d1:5c:55:e1:37:f8:ab:10:f8:c7:a7:62:26:12:
f0:fa:0e:d3:f1:66:37:39:d4:d0:be:43:97:8f:22:
ad:4b:e2:f7:67:05:85:05:04:74:b4:09:b4:5c:21:
af:32:42:14:da:81:ec:12:01:c1:10:a7:43:f6:9f:
7d:c2:c7:16:12:6c:0c:47:74:df:7e:47:79:68:5d:
c7:81:e7:eb:6b:62:cd:5a:51:c9:74:b5:be:5c:96:
89:19:1d:90:34:a2:92:e9:fa:ce:7e:49:db:33:2a:
c4:a2:95:90:39:11:8b:2f:56:c3:b3:77:83:79:2b:
77:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2F:54:5A:D6:6D:B5:E9:B7:A3:57:D7:87:28:FA:70:38:5F:7C:B2
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/JS9UWtZttem3o1fXhyj6cDhffLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.169.0/24
46.32.178.0/24
Signature Algorithm: sha256WithRSAEncryption
25:68:77:a2:d0:8f:2a:4e:e4:76:96:cc:31:12:a4:ef:5c:a3:
65:ad:44:5b:79:ca:99:aa:a2:8f:d4:8c:d2:ff:cf:f7:ac:c6:
2d:46:c0:c5:de:f4:9f:d8:1a:59:e0:25:6d:7a:c7:27:e6:6d:
b7:80:f7:74:1f:5d:70:79:9d:87:88:eb:bf:aa:f4:55:c5:ed:
f8:ce:96:15:79:dd:f2:37:2c:b1:45:27:8e:11:ec:b6:9e:95:
47:ad:05:fe:10:fc:72:b8:50:ac:2e:a2:d8:97:ac:86:c8:0b:
bd:f5:05:e6:58:e8:73:20:f5:db:50:aa:31:14:18:39:0e:f8:
92:8a:6c:14:3e:19:5a:36:c4:fa:05:98:9b:6b:37:bb:25:ef:
8e:66:77:ef:1e:79:02:d3:ea:dc:43:0d:3e:7c:88:91:e3:de:
91:d9:fe:ed:4a:20:30:33:ca:9f:7d:03:27:e4:2d:96:e1:ce:
d2:a6:e1:5a:93:85:91:23:40:61:93:80:d4:30:1c:a9:ff:37:
6c:e8:34:0b:1a:ad:2a:6b:fe:a5:5d:a5:5f:53:99:97:05:22:
31:27:61:da:a1:92:d5:a1:7d:cf:c6:0c:82:b0:27:a9:92:f1:
42:4c:58:76:80:37:36:f3:7b:f7:94:93:a9:74:2c:3c:4f:96:
a6:df:45:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:44 2025 by rpki-client on console.sobornost.net