Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/J0gYCpNrq5uBLAfexZzLlnOmFlI.roa
File: J0gYCpNrq5uBLAfexZzLlnOmFlI.roa (raw, json)
Hash identifier: VLnrMlgxhKPlu3IM8gKgy9DosCGihEAgnKfrS36yU1A=
Subject key identifier: 27:48:18:0A:93:6B:AB:9B:81:2C:07:DE:C5:9C:CB:96:73:A6:16:52
Certificate issuer: /CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
Certificate serial: 0194258EF1CBFE9B52E66EA43C4A4CE48789
Authority key identifier: 78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/J0gYCpNrq5uBLAfexZzLlnOmFlI.roa
Signing time: Thu 02 Jan 2025 05:48:32 +0000
ROA not before: Thu 02 Jan 2025 05:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201027
IP address blocks: 185.238.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:f1:cb:fe:9b:52:e6:6e:a4:3c:4a:4c:e4:87:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
Validity
Not Before: Jan 2 05:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2748180a936bab9b812c07dec59ccb9673a61652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b3:9d:1b:94:02:69:64:7f:39:7f:12:78:ed:
1e:38:48:03:fc:84:3e:a9:f3:7b:63:71:6e:4d:22:
82:a0:35:50:9e:cd:66:e1:0f:86:d7:f3:0d:15:ec:
af:51:8d:52:14:3e:15:e2:f8:16:a6:d6:5e:36:dd:
0a:09:cd:d6:00:d6:69:e7:9d:17:77:b5:41:5d:3c:
1e:97:54:83:bb:0d:23:21:97:df:d6:3a:77:64:21:
d7:1d:70:23:f8:52:ae:79:38:9a:cd:dc:f2:9e:65:
39:2a:96:a1:79:93:7f:21:5f:66:24:e6:82:56:23:
39:98:97:ee:7d:3e:84:e1:5a:15:96:d2:dc:90:4c:
5b:3e:09:c0:fb:d1:ed:9b:5e:7d:1d:53:51:c1:37:
66:ac:38:57:6a:62:ff:d5:5f:02:83:78:6d:c0:fc:
84:58:0e:c6:d3:25:ab:bb:7e:ed:59:d5:70:8e:91:
96:ff:da:d3:fd:55:fb:35:9a:50:09:5c:d2:5c:d4:
1d:d5:f4:2b:5c:78:35:e8:16:48:73:a5:61:01:3a:
9b:ae:44:a1:04:bb:4f:be:e6:ad:c0:39:00:4d:86:
d8:26:32:83:c0:11:3a:a8:25:7f:24:96:f0:72:b1:
b2:cd:be:c1:42:db:ef:bc:33:45:4f:5f:d9:52:90:
a5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:48:18:0A:93:6B:AB:9B:81:2C:07:DE:C5:9C:CB:96:73:A6:16:52
X509v3 Authority Key Identifier:
keyid:78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/J0gYCpNrq5uBLAfexZzLlnOmFlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.63.0/24
Signature Algorithm: sha256WithRSAEncryption
93:30:fb:14:64:b7:10:7d:3a:13:ef:24:d9:b7:78:f0:41:37:
1e:19:73:c1:0f:7d:a2:d2:04:b5:73:12:9c:93:c4:9a:05:76:
22:8c:94:2a:59:4f:7d:7f:7e:b2:a5:b8:05:d5:56:f3:4c:ce:
56:d4:c7:84:c5:0f:a2:92:57:35:d2:c1:7c:f2:0e:e9:ff:0b:
70:8b:e9:46:1a:70:64:28:f7:47:89:72:58:88:d7:36:76:13:
f6:7a:e2:44:c4:fd:7e:41:40:e6:57:0d:68:1f:6f:4c:88:be:
9c:67:8a:75:39:ec:82:f1:83:20:df:1c:07:23:e7:e5:dc:90:
34:28:fa:28:20:bf:23:71:a1:9c:a2:b2:ab:14:35:50:b3:f9:
0d:21:71:c8:7b:c1:2a:93:f3:82:ad:43:fe:0c:df:33:5c:a5:
aa:49:7c:4b:30:f7:f7:71:ff:46:e4:30:d1:d6:5a:a8:19:c7:
80:39:52:f5:16:73:69:ef:ad:91:c4:90:0c:3e:b6:05:c5:a8:
2b:6e:45:71:3d:61:08:8e:59:70:71:b3:85:af:e4:f2:75:a4:
86:b4:29:e7:81:b9:af:ae:a8:7c:07:7b:d1:8c:89:2e:0a:0a:
93:9c:d8:38:c3:ba:1d:a3:4a:99:e1:de:d2:f7:d7:cc:2c:02:
36:6b:ce:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljvHL/ptS5m6kPEpM5IeJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4OGY1YjIxMGYzYzNlYjQyMDY1OTYwZTg1ZDA2MWU5ZDlk
NjNhYjgwHhcNMjUwMTAyMDU0ODMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzQ4MTgwYTkzNmJhYjliODEyYzA3ZGVjNTljY2I5NjczYTYxNjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8bOdG5QCaWR/OX8SeO0eOEgD/IQ+
qfN7Y3FuTSKCoDVQns1m4Q+G1/MNFeyvUY1SFD4V4vgWptZeNt0KCc3WANZp550X
d7VBXTwel1SDuw0jIZff1jp3ZCHXHXAj+FKueTiazdzynmU5KpaheZN/IV9mJOaC
ViM5mJfufT6E4VoVltLckExbPgnA+9Htm159HVNRwTdmrDhXamL/1V8Cg3htwPyE
WA7G0yWru37tWdVwjpGW/9rT/VX7NZpQCVzSXNQd1fQrXHg16BZIc6VhATqbrkSh
BLtPvuatwDkATYbYJjKDwBE6qCV/JJbwcrGyzb7BQtvvvDNFT1/ZUpClPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCdIGAqTa6ubgSwH3sWcy5ZzphZSMB8GA1UdIwQY
MBaAFHiPWyEPPD60IGWWDoXQYenZ1jq4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUk5YklRODhQclFnWlpZT2hkQmg2ZG5XT3JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9lMTAwYjUtNmYwYS00ZmU5LWJlZmIt
YzRhY2I4OTY5YzQ5LzEvSjBnWUNwTnJxNXVCTEFmZXhaekxsbk9tRmxJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9lMTAwYjUtNmYwYS00ZmU5LWJlZmItYzRhY2I4OTY5YzQ5
LzEvZUk5YklRODhQclFnWlpZT2hkQmg2ZG5XT3JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAue4/MA0G
CSqGSIb3DQEBCwUAA4IBAQCTMPsUZLcQfToT7yTZt3jwQTceGXPBD32i0gS1cxKc
k8SaBXYijJQqWU99f36ypbgF1VbzTM5W1MeExQ+iklc10sF88g7p/wtwi+lGGnBk
KPdHiXJYiNc2dhP2euJExP1+QUDmVw1oH29MiL6cZ4p1OeyC8YMg3xwHI+fl3JA0
KPooIL8jcaGcorKrFDVQs/kNIXHIe8Eqk/OCrUP+DN8zXKWqSXxLMPf3cf9G5DDR
1lqoGceAOVL1FnNp762RxJAMPrYFxagrbkVxPWEIjllwcbOFr+TydaSGtCnngbmv
rqh8B3vRjIkuCgqTnNg4w7odo0qZ4d7S99fMLAI2a87J
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:28 2025 by rpki-client on console.sobornost.net