Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/Jw4aASdhNdVI-FplW-882cj74Fw.roa
File: Jw4aASdhNdVI-FplW-882cj74Fw.roa (raw, json)
Hash identifier: ewm0/xps8d7RUrK5yQyWODWIjZ5yxmU6C2dpLRlFoTs=
Subject key identifier: 27:0E:1A:01:27:61:35:D5:48:F8:5A:65:5B:EF:3C:D9:C8:FB:E0:5C
Certificate issuer: /CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Certificate serial: 0194266B798B5CCCE2C3499E384E13A93C54
Authority key identifier: A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/Jw4aASdhNdVI-FplW-882cj74Fw.roa
Signing time: Thu 02 Jan 2025 09:49:25 +0000
ROA not before: Thu 02 Jan 2025 09:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64428
IP address blocks: 185.165.40.0/24 maxlen: 24
185.165.41.0/24 maxlen: 24
185.165.42.0/24 maxlen: 24
185.165.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:79:8b:5c:cc:e2:c3:49:9e:38:4e:13:a9:3c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Validity
Not Before: Jan 2 09:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=270e1a01276135d548f85a655bef3cd9c8fbe05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9d:23:99:f6:d1:02:c9:7a:af:27:69:74:7a:
cb:1c:f3:cb:07:55:26:32:c6:f3:fc:93:12:8b:4c:
a5:d1:d7:5e:f3:d5:8e:0c:f0:7b:cc:a5:97:8b:98:
77:f3:e4:34:eb:2d:da:61:83:18:89:52:98:cf:6b:
eb:45:e1:26:d5:aa:14:f1:dc:d5:f4:b0:68:85:1c:
1e:37:70:3f:65:47:23:2f:03:44:c1:f0:88:38:8d:
0b:d9:23:87:75:02:78:e2:31:c1:42:84:87:3b:c7:
12:b0:1c:ea:a8:27:30:11:c5:15:26:6a:19:60:ad:
05:2d:cd:4f:64:66:22:d1:b4:95:4a:51:39:e2:5f:
c9:91:49:41:0b:09:d5:9a:7b:fe:81:b6:12:46:f7:
c6:b0:68:f7:9f:5b:7b:2a:7c:cf:9b:8b:eb:1d:b4:
8e:87:c0:97:64:cc:ee:0b:15:84:04:2e:6b:8d:40:
fb:00:c1:18:02:3d:c8:41:0c:b9:51:28:54:35:53:
56:2f:e7:d0:37:a8:99:57:ff:72:f4:93:52:8c:c5:
a8:62:70:0b:17:4b:4d:a8:05:45:36:b2:e2:fb:72:
e3:e2:3a:ea:46:fb:55:cd:02:b8:4e:e7:f1:4f:d6:
c1:0e:96:0e:cb:a0:ca:d9:21:95:3f:e2:63:7a:79:
02:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:0E:1A:01:27:61:35:D5:48:F8:5A:65:5B:EF:3C:D9:C8:FB:E0:5C
X509v3 Authority Key Identifier:
keyid:A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/Jw4aASdhNdVI-FplW-882cj74Fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.40.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:5c:06:2a:b8:0c:8e:16:9c:ce:8c:9e:b5:24:2a:6d:05:f8:
11:f4:96:99:c9:bb:ba:e5:8f:77:d7:20:62:d5:39:b9:6e:38:
f8:a4:7b:f8:99:39:8f:a9:64:d7:b0:a8:6a:17:ae:5c:43:95:
2d:d0:d4:86:a4:f1:47:b8:f6:49:ab:2f:bb:89:38:7c:f8:1d:
1b:78:b8:b6:33:8f:b9:b0:d6:fb:3f:a7:5a:70:96:3d:7a:fd:
d1:ec:08:9a:1d:9d:0f:4e:08:65:45:63:92:a6:4c:ca:2e:df:
d4:d9:8b:29:de:50:de:2b:b8:8f:f1:a3:5f:3d:8a:45:9a:a1:
92:10:26:85:9a:a5:2d:85:24:d2:4e:d0:3b:1b:e1:87:e4:36:
87:b7:21:07:3f:d7:bf:d5:ae:7e:f0:65:a0:66:cb:95:4a:48:
d0:37:81:cd:e6:da:3f:7f:85:b0:90:aa:e7:6c:93:0d:72:8e:
c4:25:a3:d2:a8:15:e8:3a:0a:36:aa:ec:f7:6d:9d:b6:40:3c:
14:4d:d8:35:0b:22:ab:6f:ef:f9:c1:ff:b3:9d:cd:a7:cf:ef:
0c:b4:f4:dc:59:e1:37:06:95:d5:27:35:6e:b7:ca:a5:9e:ef:
ed:5a:33:85:81:54:f4:d4:2d:a6:4c:37:24:85:da:cf:95:42:
fa:2e:61:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:26 2025 by rpki-client on console.sobornost.net