Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/JKZSaEq-32SHY-bAWiWwoCf7Nj0.roa
File: JKZSaEq-32SHY-bAWiWwoCf7Nj0.roa (raw, json)
Hash identifier: yG2sh1v4s77ObqidFtWCzFl8F2FhijHzBj04Ij6JtCg=
Subject key identifier: 24:A6:52:68:4A:BE:DF:64:87:63:E6:C0:5A:25:B0:A0:27:FB:36:3D
Certificate issuer: /CN=44c0f2a2a56007e4c45ccc71e7da092861305b20
Certificate serial: 0196167422B0F93DDD98B16F81E5E2EDBD1D
Authority key identifier: 44:C0:F2:A2:A5:60:07:E4:C4:5C:CC:71:E7:DA:09:28:61:30:5B:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/JKZSaEq-32SHY-bAWiWwoCf7Nj0.roa
Signing time: Tue 08 Apr 2025 17:30:31 +0000
ROA not before: Tue 08 Apr 2025 17:30:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31027
IP address blocks: 185.19.232.0/22 maxlen: 22
213.146.64.0/19 maxlen: 19
2a00:4960::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:16:74:22:b0:f9:3d:dd:98:b1:6f:81:e5:e2:ed:bd:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c0f2a2a56007e4c45ccc71e7da092861305b20
Validity
Not Before: Apr 8 17:30:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24a652684abedf648763e6c05a25b0a027fb363d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:04:57:20:5c:71:c9:af:37:21:c8:ab:15:45:
03:c0:ee:90:b5:0e:7c:b6:44:27:f0:06:c2:21:70:
af:c0:3d:60:a5:78:bd:6f:f9:a2:69:a8:8d:35:92:
f1:1f:bb:4d:5b:fd:57:81:78:35:09:10:43:32:50:
96:a2:4f:de:40:20:a9:2d:3b:cd:b4:d7:88:d7:bc:
63:f1:54:3f:bd:f3:f8:c7:52:3c:2d:9d:4f:5d:3b:
cd:6e:80:69:d0:79:c1:a9:80:9f:c8:df:11:18:a0:
a2:7c:3c:cf:f0:b3:f7:b7:b4:6d:8f:5b:66:2a:18:
92:df:0c:65:a6:95:95:aa:93:ed:9c:bd:e0:ac:c4:
be:9e:a2:36:df:42:5f:64:8b:8a:88:9f:12:d8:2a:
39:f6:bf:3f:9b:b1:ff:04:4e:31:f3:2a:98:ac:5a:
6e:f6:63:16:88:d5:c8:35:51:d9:f7:6c:99:a0:24:
9f:63:f2:76:88:c5:d6:7d:bb:d3:42:50:48:6f:fe:
17:8f:7e:42:a1:ad:38:6a:6d:b2:39:b2:d4:7f:f3:
86:01:94:50:5e:d4:46:0a:85:6d:c1:4a:b9:e1:4b:
74:ff:d1:b9:97:77:5e:54:81:3b:c9:5d:51:0a:01:
9c:de:aa:6c:7f:b1:1f:2d:59:91:ff:52:e8:53:ac:
ce:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A6:52:68:4A:BE:DF:64:87:63:E6:C0:5A:25:B0:A0:27:FB:36:3D
X509v3 Authority Key Identifier:
keyid:44:C0:F2:A2:A5:60:07:E4:C4:5C:CC:71:E7:DA:09:28:61:30:5B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/JKZSaEq-32SHY-bAWiWwoCf7Nj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.232.0/22
213.146.64.0/19
IPv6:
2a00:4960::/32
Signature Algorithm: sha256WithRSAEncryption
36:1b:4e:d1:58:0b:99:62:53:e5:06:4a:b9:5f:e5:32:dc:7f:
28:65:71:72:58:37:ee:fd:5b:ee:9c:c0:77:dd:2c:7d:ca:6f:
9b:87:12:9f:0f:e9:d5:ce:31:b4:4e:4b:f8:ee:98:82:5e:bf:
5f:ee:eb:d9:27:10:d6:e3:4b:1d:40:36:e3:13:a9:c3:d3:66:
69:06:a0:78:be:4d:a8:9a:0e:0f:46:72:ed:e7:59:6f:e4:e9:
0d:22:2c:d6:d6:ad:e3:c5:fe:13:d7:9d:e9:52:6b:50:1e:0f:
46:ef:0b:33:10:36:55:ad:d7:da:76:be:b7:7c:73:ec:90:c1:
87:2a:3e:bb:d2:83:17:ca:3e:86:2e:14:a8:11:08:65:f2:54:
dc:ed:fe:35:61:c3:2b:d7:e5:51:d8:0f:bb:a2:12:cc:67:2c:
9e:6b:25:72:aa:e3:58:98:6e:6d:19:30:ea:f5:2e:60:fc:61:
6a:e1:54:1e:a9:ed:a3:5f:a2:d5:8d:14:e4:f0:98:ad:5e:d0:
1c:25:a7:57:f8:c0:10:8e:bc:10:10:19:26:23:34:1d:9d:be:
da:89:b8:28:ac:b9:a7:85:13:17:33:e5:2d:22:c7:f2:92:1a:
3b:98:56:36:27:e2:d6:37:0e:61:6c:6f:85:1b:34:18:2e:af:
82:ba:31:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:09 2025 by rpki-client on console.sobornost.net