Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/92f56e-a6a9-492f-9828-1205fe4ce361/1/JksTwBqMu6mir3iXItYAcZTkiBg.roa
File: JksTwBqMu6mir3iXItYAcZTkiBg.roa (raw, json)
Hash identifier: RpdxCkhqaoSpmsMLdu6NPf18xyekalTabGY7q5mIpGE=
Subject key identifier: 26:4B:13:C0:1A:8C:BB:A9:A2:AF:78:97:22:D6:00:71:94:E4:88:18
Certificate issuer: /CN=965e0880b3c7bd0b90a64c244e2fa1cf0d37d072
Certificate serial: 0194228E41819A2F9B0F9422ED2943A6370B
Authority key identifier: 96:5E:08:80:B3:C7:BD:0B:90:A6:4C:24:4E:2F:A1:CF:0D:37:D0:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ll4IgLPHvQuQpkwkTi-hzw030HI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/92f56e-a6a9-492f-9828-1205fe4ce361/1/JksTwBqMu6mir3iXItYAcZTkiBg.roa
Signing time: Wed 01 Jan 2025 15:48:55 +0000
ROA not before: Wed 01 Jan 2025 15:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200845
IP address blocks: 185.201.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:41:81:9a:2f:9b:0f:94:22:ed:29:43:a6:37:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965e0880b3c7bd0b90a64c244e2fa1cf0d37d072
Validity
Not Before: Jan 1 15:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=264b13c01a8cbba9a2af789722d6007194e48818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cd:65:23:d9:3f:e6:6c:3f:dd:c6:a0:67:c4:
53:23:95:ec:91:54:89:d0:85:ac:0b:ba:30:64:ac:
92:6b:da:70:ac:e2:e8:13:2b:e3:67:4c:6d:83:6f:
82:cc:22:5c:51:55:6c:ac:6a:94:c1:d6:9d:c7:d2:
48:f9:7e:f9:ab:fe:71:91:3d:56:ae:d0:74:38:cc:
38:1b:a3:f8:fa:a5:17:46:47:9e:50:95:ab:ac:77:
4c:74:8d:0b:26:0c:17:4a:98:d6:87:a5:93:6e:ca:
c1:db:13:a1:81:f8:08:fd:af:8a:12:b8:3f:90:b7:
22:2d:11:92:84:38:46:30:67:0c:cc:7f:1b:65:be:
38:80:b8:ef:ec:34:dd:1d:0c:46:b0:50:e1:ab:7f:
fa:21:f8:93:79:ea:ee:23:05:8a:03:5d:e9:f4:a0:
72:c0:40:66:35:1b:77:f2:20:44:9f:e1:a0:0e:ba:
fe:42:01:57:f6:b6:7d:30:36:c9:01:f2:f0:bc:e5:
f9:d7:1a:9a:6e:5d:ba:eb:2a:60:eb:00:ae:21:58:
76:e0:8f:1b:dc:2e:71:58:50:d4:1e:b6:1c:3a:bb:
7b:0b:e5:24:9e:80:18:0a:46:38:47:66:e7:71:54:
40:d5:57:6b:77:4b:72:f8:73:90:f9:3d:38:aa:6f:
63:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4B:13:C0:1A:8C:BB:A9:A2:AF:78:97:22:D6:00:71:94:E4:88:18
X509v3 Authority Key Identifier:
keyid:96:5E:08:80:B3:C7:BD:0B:90:A6:4C:24:4E:2F:A1:CF:0D:37:D0:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ll4IgLPHvQuQpkwkTi-hzw030HI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/92f56e-a6a9-492f-9828-1205fe4ce361/1/JksTwBqMu6mir3iXItYAcZTkiBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/92f56e-a6a9-492f-9828-1205fe4ce361/1/ll4IgLPHvQuQpkwkTi-hzw030HI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.176.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:15:87:f2:e9:d6:4e:4c:25:6f:9f:9f:45:9c:49:7b:17:4f:
78:7a:fe:5f:10:c7:49:58:d3:36:48:30:3d:16:1d:4f:9c:cb:
77:61:d6:2b:aa:ff:58:43:4a:c1:35:16:8b:49:df:93:c6:03:
71:b1:45:b6:3a:b4:29:2d:46:c3:bd:f9:25:e8:ee:c7:24:2b:
24:0c:c0:8d:ea:39:af:c2:29:f8:6f:7a:ac:73:1f:21:0d:c9:
36:28:fe:c9:f6:31:45:ff:be:28:82:85:7f:ba:4f:0b:63:1f:
02:71:88:95:a2:3b:b0:a5:ff:dc:4a:6b:53:85:0a:26:22:ce:
9e:b1:5e:3a:4a:02:73:0e:78:1e:06:8c:bb:b9:c1:88:76:f7:
8a:df:65:c7:ea:ac:20:38:b4:5a:87:98:7a:5d:48:13:28:63:
c3:91:c8:74:d8:a1:39:ed:07:43:26:70:a9:14:e3:13:13:54:
90:26:ae:b5:14:ce:d4:bf:bd:d4:7a:f0:99:a4:3d:73:b3:9c:
ec:63:ff:cc:e5:11:62:79:19:5e:4d:77:ed:46:17:2c:33:e5:
71:cc:c1:ac:1c:07:26:d1:83:47:8b:b0:01:f8:78:48:60:4b:
2b:9a:a3:0f:ad:cc:7e:14:d7:2a:9d:cb:95:97:25:ae:5e:fa:
61:88:04:b1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijkGBmi+bD5Qi7SlDpjcLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NWUwODgwYjNjN2JkMGI5MGE2NGMyNDRlMmZhMWNmMGQz
N2QwNzIwHhcNMjUwMTAxMTU0ODU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjRiMTNjMDFhOGNiYmE5YTJhZjc4OTcyMmQ2MDA3MTk0ZTQ4ODE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM1lI9k/5mw/3cagZ8RTI5XskVSJ
0IWsC7owZKySa9pwrOLoEyvjZ0xtg2+CzCJcUVVsrGqUwdadx9JI+X75q/5xkT1W
rtB0OMw4G6P4+qUXRkeeUJWrrHdMdI0LJgwXSpjWh6WTbsrB2xOhgfgI/a+KErg/
kLciLRGShDhGMGcMzH8bZb44gLjv7DTdHQxGsFDhq3/6IfiTeeruIwWKA13p9KBy
wEBmNRt38iBEn+GgDrr+QgFX9rZ9MDbJAfLwvOX51xqabl266ypg6wCuIVh24I8b
3C5xWFDUHrYcOrt7C+UknoAYCkY4R2bncVRA1Vdrd0ty+HOQ+T04qm9jzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCZLE8AajLupoq94lyLWAHGU5IgYMB8GA1UdIwQY
MBaAFJZeCICzx70LkKZMJE4voc8NN9ByMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGw0SWdMUEh2UXVRcGt3a1RpLWh6dzAzMEhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS85MmY1NmUtYTZhOS00OTJmLTk4Mjgt
MTIwNWZlNGNlMzYxLzEvSmtzVHdCcU11Nm1pcjNpWEl0WUFjWlRraUJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS85MmY1NmUtYTZhOS00OTJmLTk4MjgtMTIwNWZlNGNlMzYx
LzEvbGw0SWdMUEh2UXVRcGt3a1RpLWh6dzAzMEhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucmwMA0G
CSqGSIb3DQEBCwUAA4IBAQB/FYfy6dZOTCVvn59FnEl7F094ev5fEMdJWNM2SDA9
Fh1PnMt3YdYrqv9YQ0rBNRaLSd+TxgNxsUW2OrQpLUbDvfkl6O7HJCskDMCN6jmv
win4b3qscx8hDck2KP7J9jFF/74ogoV/uk8LYx8CcYiVojuwpf/cSmtThQomIs6e
sV46SgJzDngeBoy7ucGIdveK32XH6qwgOLRah5h6XUgTKGPDkch02KE57QdDJnCp
FOMTE1SQJq61FM7Uv73UevCZpD1zs5zsY//M5RFieRleTXftRhcsM+VxzMGsHAcm
0YNHi7AB+HhIYEsrmqMPrcx+FNcqncuVlyWuXvphiASx
-----END CERTIFICATE-----
Generated at Sat Mar 8 04:56:02 2025 by rpki-client on console.sobornost.net