Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/JfosHD6swZBELA7-1SokhINwqBU.roa
File: JfosHD6swZBELA7-1SokhINwqBU.roa (raw, json)
Hash identifier: uhtEt5y7g2W8E2mV9p4HzdrhOCyliMGIoFOc3pDAegw=
Subject key identifier: 25:FA:2C:1C:3E:AC:C1:90:44:2C:0E:FE:D5:2A:24:84:83:70:A8:15
Certificate issuer: /CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
Certificate serial: 01942748005ACE0349C0EBE5823E3ED6D44F
Authority key identifier: 0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/JfosHD6swZBELA7-1SokhINwqBU.roa
Signing time: Thu 02 Jan 2025 13:50:17 +0000
ROA not before: Thu 02 Jan 2025 13:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202921
IP address blocks: 147.161.24.0/22 maxlen: 22
147.161.24.0/24 maxlen: 24
147.161.25.0/24 maxlen: 24
147.161.26.0/24 maxlen: 24
147.161.27.0/24 maxlen: 24
185.148.212.0/22 maxlen: 22
185.148.212.0/24 maxlen: 24
185.148.213.0/24 maxlen: 24
185.148.214.0/24 maxlen: 24
185.148.215.0/24 maxlen: 24
212.69.128.0/22 maxlen: 22
212.69.128.0/24 maxlen: 24
212.69.129.0/24 maxlen: 24
212.69.130.0/24 maxlen: 24
212.69.131.0/24 maxlen: 24
2a0d:f780::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:00:5a:ce:03:49:c0:eb:e5:82:3e:3e:d6:d4:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
Validity
Not Before: Jan 2 13:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25fa2c1c3eacc190442c0efed52a24848370a815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2e:80:4a:9a:0e:bc:44:40:16:9c:98:68:29:
d5:60:b1:a4:8a:bc:ea:57:3c:1f:da:24:30:00:eb:
25:9e:ea:0c:5c:c0:66:e8:4a:3d:54:83:ba:df:31:
c7:14:e4:1f:c7:a4:dc:8f:8f:fb:ef:cf:88:90:26:
aa:0f:22:ec:86:8d:c8:4a:5b:6b:ea:ba:af:dd:df:
74:de:2a:dd:9f:60:94:86:39:9c:7a:91:52:29:89:
e7:ae:d7:ff:dc:23:97:4f:b1:9a:db:26:ea:9a:0a:
f5:84:62:ee:9d:97:ac:b6:45:77:76:10:57:1f:fb:
6f:95:5e:c4:a4:f3:2c:52:a3:f9:80:2d:e2:22:40:
d6:6e:e8:9b:0f:10:50:ab:49:43:2c:c6:44:d1:fb:
11:0b:f2:ad:3e:66:c2:ba:e5:0e:29:69:94:6f:88:
f5:4b:12:fd:b8:ed:fb:7c:dc:70:85:e6:86:20:ce:
1c:d0:3b:a9:24:82:5a:64:5d:f9:6b:5e:64:a9:9a:
35:b0:42:37:62:e5:07:1a:1f:f8:42:28:35:eb:5d:
89:c9:b1:91:0e:0e:99:75:a2:c3:a3:4c:bd:0f:fd:
15:08:b8:c6:ff:78:97:9a:ec:af:92:33:cf:2a:30:
b8:ff:9f:69:3b:68:de:d6:59:3d:40:82:fd:2e:45:
c6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FA:2C:1C:3E:AC:C1:90:44:2C:0E:FE:D5:2A:24:84:83:70:A8:15
X509v3 Authority Key Identifier:
keyid:0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/JfosHD6swZBELA7-1SokhINwqBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.161.24.0/22
185.148.212.0/22
212.69.128.0/22
IPv6:
2a0d:f780::/29
Signature Algorithm: sha256WithRSAEncryption
9d:30:91:c7:2c:7f:dd:9d:c1:3c:e3:fe:cb:e1:42:30:e7:78:
57:30:24:c8:12:3a:48:1b:a1:22:84:c5:10:f5:18:03:df:ac:
f2:f8:cc:87:ba:8e:8e:89:7e:ab:c9:a2:21:af:32:a8:49:3c:
61:d0:fa:4b:82:de:ce:90:b1:14:99:79:e2:20:19:80:d1:1a:
ce:9f:be:fd:04:52:46:3b:1c:bf:29:5d:b5:5e:5a:95:05:91:
4e:24:d7:fc:ed:83:ee:cb:96:86:ad:0b:26:ce:26:0f:31:38:
51:2c:9c:b6:8d:4d:23:29:7b:a0:0b:6f:de:02:08:ca:8d:d5:
c3:7d:c0:1b:3b:c9:25:d9:f6:e8:c4:b1:92:c6:96:0c:f4:07:
8c:aa:d8:15:98:de:1b:bd:d7:93:30:8b:a1:3a:82:ee:75:d4:
72:01:b7:9f:13:9e:d3:5a:77:fc:a5:2e:a2:cc:b2:8e:46:99:
06:a3:6b:50:0a:e9:91:6f:c3:65:f7:07:94:65:88:6b:bd:81:
14:f8:3b:34:fc:a9:c3:45:eb:c2:79:1c:d4:5c:59:57:fb:c6:
26:c6:91:ba:9f:96:4f:64:03:8d:1b:6c:79:7a:06:aa:ff:d8:
99:9e:d9:a1:c0:cc:d7:9c:f0:45:2e:58:71:67:a0:78:6e:76:
cb:a8:25:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:01 2025 by rpki-client on console.sobornost.net