Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/jIQE6oG-USVQsaVIsuMgVZrbPS8.roa
File: jIQE6oG-USVQsaVIsuMgVZrbPS8.roa (raw, json)
Hash identifier: tj3eChM7EThfXzNYj4xO6MKRf71fqyAWWs5gIA5ClkU=
Subject key identifier: 8C:84:04:EA:81:BE:51:25:50:B1:A5:48:B2:E3:20:55:9A:DB:3D:2F
Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial: 01942748209CB7B1358C8E6D52E18C0A5B1C
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/jIQE6oG-USVQsaVIsuMgVZrbPS8.roa
Signing time: Thu 02 Jan 2025 13:50:25 +0000
ROA not before: Thu 02 Jan 2025 13:50:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204653
IP address blocks: 185.123.120.0/23 maxlen: 23
185.123.121.0/24 maxlen: 24
212.80.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:20:9c:b7:b1:35:8c:8e:6d:52:e1:8c:0a:5b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Validity
Not Before: Jan 2 13:50:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c8404ea81be512550b1a548b2e320559adb3d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b9:85:95:0f:b1:26:13:1c:70:0a:b5:49:7b:
e5:27:3d:79:5f:4d:fb:eb:d2:0a:a7:48:27:ae:dc:
73:f1:f4:c0:0b:51:bf:a8:28:fd:8e:02:0d:fa:b0:
09:89:be:77:c2:70:7b:bf:b8:8b:a2:d7:dd:69:20:
2e:e5:67:6c:b5:54:45:11:63:4b:24:1a:fe:39:ec:
45:a6:03:d4:bc:0e:6c:aa:71:6f:55:94:77:da:0c:
03:ac:88:ee:13:ae:26:d0:c9:5e:82:ac:be:e0:84:
16:0e:4b:41:82:1e:c0:43:27:a9:8c:53:96:75:80:
22:32:6a:cd:4c:a1:53:6b:26:53:d4:cc:0e:62:f2:
66:75:2b:d2:18:a3:2b:c0:3b:1c:47:a9:7f:2c:ca:
ab:7e:80:ce:33:9c:4f:73:f9:41:49:eb:08:73:4a:
0e:5a:24:99:fc:95:b2:12:5f:34:94:92:75:70:61:
44:f7:ad:57:8d:f3:a0:b5:1f:49:fa:f4:9a:5a:47:
14:0e:f5:5b:d1:1c:a2:1c:ea:ce:ab:88:00:8f:48:
b2:88:f2:6a:8b:3d:ba:3d:a8:ae:18:c8:25:28:67:
98:2c:98:50:13:f1:9c:ee:66:e0:5e:25:ef:1a:47:
b5:91:11:ea:75:1e:f8:77:bd:e3:d5:84:23:5e:48:
bb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:84:04:EA:81:BE:51:25:50:B1:A5:48:B2:E3:20:55:9A:DB:3D:2F
X509v3 Authority Key Identifier:
keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/jIQE6oG-USVQsaVIsuMgVZrbPS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.120.0/23
212.80.177.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:df:18:6c:ff:b8:d8:20:02:be:5a:88:3b:13:a5:74:1c:2b:
3b:5d:31:2b:69:94:f4:88:8d:ff:99:88:9b:e3:68:be:99:f7:
8d:6c:e2:bd:c8:d8:17:28:4f:49:29:f5:34:c2:8e:1d:d2:ad:
72:98:e0:a2:b4:a9:20:a2:c3:36:d2:39:15:7c:db:52:8b:60:
52:7f:42:f8:0d:f2:61:c1:71:56:fa:79:a8:a8:af:ab:a1:36:
8f:4e:7d:9a:db:73:b4:3a:a6:61:fd:c5:db:95:f1:0f:b5:c1:
d2:7d:c5:9b:df:a0:81:38:ec:f7:c0:b1:4b:79:66:f6:df:7c:
e9:06:39:a9:f1:48:01:04:c9:3a:28:14:52:5b:06:b9:04:02:
34:9f:aa:3e:e9:f6:f2:ac:b4:61:a1:bc:64:ff:42:08:57:c9:
d9:07:87:01:4a:43:e9:ec:a4:21:b7:7c:a8:40:11:4f:1b:9d:
1b:31:d5:93:36:9b:1d:15:d9:5e:da:8c:20:6b:b1:59:8d:c3:
0d:1d:01:dc:8c:26:29:00:bc:a0:c2:bc:ad:ed:d1:cf:63:44:
93:06:33:9f:86:e0:2f:6e:ff:a5:f3:ee:ab:28:19:e8:3d:7b:
c3:cd:b2:ea:45:05:fc:77:5f:c6:e4:aa:5f:68:a9:d5:84:e1:
bc:c5:a1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:33 2025 by rpki-client on console.sobornost.net