Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/JdsxpHDD-qqNJkrJeExqLIW60EE.roa
File: JdsxpHDD-qqNJkrJeExqLIW60EE.roa (raw, json)
Hash identifier: wUmR1eI1Oq3wFYscONP1bCcbT5gMXn5T1HRqSh6Eweg=
Subject key identifier: 25:DB:31:A4:70:C3:FA:AA:8D:26:4A:C9:78:4C:6A:2C:85:BA:D0:41
Certificate issuer: /CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Certificate serial: 019424B290F626833E78928E735C4FD63424
Authority key identifier: F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/JdsxpHDD-qqNJkrJeExqLIW60EE.roa
Signing time: Thu 02 Jan 2025 01:47:49 +0000
ROA not before: Thu 02 Jan 2025 01:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47777
IP address blocks: 46.19.56.0/21 maxlen: 24
94.125.24.0/21 maxlen: 24
94.125.28.0/24 maxlen: 24
185.15.180.0/22 maxlen: 22
185.15.183.0/24 maxlen: 24
2a00:1b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:90:f6:26:83:3e:78:92:8e:73:5c:4f:d6:34:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Validity
Not Before: Jan 2 01:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25db31a470c3faaa8d264ac9784c6a2c85bad041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b7:c0:64:d4:22:ba:fc:7e:35:89:08:a5:1a:
ca:25:a5:39:c9:18:ae:a9:32:9c:c2:24:ba:9e:d5:
cf:81:35:83:af:d3:fb:7f:37:f4:42:ff:50:0e:ea:
3a:bc:84:d3:ca:4a:87:f9:ee:0f:6d:ce:84:32:22:
c5:8a:f9:cd:b9:30:83:27:11:a0:47:12:67:5b:c0:
e4:b4:b7:65:c8:e8:f1:2a:62:cf:be:5f:b9:4f:1e:
eb:d8:25:19:a5:cb:bc:8b:2a:38:1e:73:92:2c:d0:
af:ce:31:40:a8:f2:9d:50:74:aa:34:fe:16:9a:16:
2b:cc:22:1e:8b:d7:bc:8e:6a:0e:b1:b4:d7:50:a8:
b9:7b:56:0c:4c:d4:cb:96:23:7f:60:19:2a:72:ec:
95:3f:b7:4d:68:21:40:32:b0:e6:1e:fb:b5:1a:03:
44:9c:d7:a2:40:ac:58:d4:9f:f6:15:80:34:45:e5:
cf:63:d0:c1:60:48:bc:c5:fc:e6:c3:c9:33:3c:07:
85:b7:b5:7c:ec:33:54:e2:df:d8:42:c9:a8:c9:2d:
f5:4e:34:5b:df:e8:dd:ae:39:08:6f:e4:64:1f:18:
03:ed:8e:1d:c3:43:a7:fb:9a:c0:d2:e0:73:7b:21:
74:40:15:df:aa:8f:15:98:b8:b2:c6:3c:bb:ac:d4:
ae:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DB:31:A4:70:C3:FA:AA:8D:26:4A:C9:78:4C:6A:2C:85:BA:D0:41
X509v3 Authority Key Identifier:
keyid:F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/JdsxpHDD-qqNJkrJeExqLIW60EE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.56.0/21
94.125.24.0/21
185.15.180.0/22
IPv6:
2a00:1b40::/32
Signature Algorithm: sha256WithRSAEncryption
2e:23:b8:30:56:6b:42:e6:5a:f6:33:83:9f:7d:5d:41:ff:bd:
8f:7b:e9:3b:e6:15:da:6b:7e:91:2e:7d:94:38:ad:9b:f7:85:
b3:44:ac:41:a3:40:73:2a:c3:1f:92:93:39:b0:10:15:6c:9a:
39:97:73:6c:35:a3:1f:8e:32:af:ff:fc:9b:94:99:0e:68:84:
3d:fc:52:98:23:23:4c:67:4d:9c:cc:55:87:14:22:b2:ca:20:
ea:e9:f3:ee:72:f8:47:b1:39:b0:b7:d0:60:d0:63:b4:85:4f:
63:41:78:a9:17:47:66:80:a5:25:49:a3:d6:60:eb:b0:7f:a4:
2f:70:6d:f0:a0:60:ae:80:17:2e:e4:13:0f:cc:03:7e:2d:b5:
8f:9a:ec:d3:ba:fd:db:0e:29:c2:3e:90:eb:c0:17:91:28:e7:
09:00:dd:02:1b:e2:c3:3d:47:4c:e4:f3:10:77:fe:f6:84:f7:
b5:c8:f3:05:8d:5d:c4:9b:ec:ea:71:72:5a:3d:23:9c:e2:51:
90:9e:87:59:ed:4a:a3:10:d5:4d:4d:e9:34:7c:89:a2:be:77:
ce:29:94:5a:ad:56:22:a8:bc:8a:10:da:e2:84:3b:01:b4:6f:
7e:a3:e3:12:77:91:97:e9:8b:88:26:2f:74:f5:df:07:41:77:
4c:e4:0e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:54 2025 by rpki-client on console.sobornost.net