Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/JqTAJDe2OYCUvbJc8miiDJhn9ck.roa
File: JqTAJDe2OYCUvbJc8miiDJhn9ck.roa (raw, json)
Hash identifier: XOVcEkw4qLtgeZZ1W3TII3S4x02laIR1b6T9nld7824=
Subject key identifier: 26:A4:C0:24:37:B6:39:80:94:BD:B2:5C:F2:68:A2:0C:98:67:F5:C9
Certificate issuer: /CN=48e99a3feec64d6bad098d1b2df0b536a0388ea3
Certificate serial: 019424457C992B0BCC41CD8C06A33D7788C6
Authority key identifier: 48:E9:9A:3F:EE:C6:4D:6B:AD:09:8D:1B:2D:F0:B5:36:A0:38:8E:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/JqTAJDe2OYCUvbJc8miiDJhn9ck.roa
Signing time: Wed 01 Jan 2025 23:48:41 +0000
ROA not before: Wed 01 Jan 2025 23:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44943
IP address blocks: 178.22.48.0/21 maxlen: 21
185.34.240.0/24 maxlen: 24
185.34.241.0/24 maxlen: 24
2a00:b880::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:7c:99:2b:0b:cc:41:cd:8c:06:a3:3d:77:88:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e99a3feec64d6bad098d1b2df0b536a0388ea3
Validity
Not Before: Jan 1 23:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26a4c02437b6398094bdb25cf268a20c9867f5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ff:87:93:f4:af:79:81:e9:d0:98:d3:16:8b:
07:e5:96:c3:69:69:51:20:17:48:ce:5e:15:0e:53:
2a:bb:5d:85:b5:2a:16:8d:f0:92:b1:ae:ed:52:b5:
72:8e:57:fe:c2:df:59:ee:85:a0:30:2e:09:07:a4:
ea:2b:ad:66:8c:0c:bb:90:15:d1:ff:58:0a:b1:3b:
2f:1a:bd:a5:bf:6b:3b:01:2a:bd:8e:cf:ec:49:ef:
ce:61:8c:e4:7d:c4:33:a6:2c:ca:5e:18:15:1a:5b:
a5:10:36:fd:35:89:ac:62:72:4e:43:1f:51:b1:da:
33:89:af:de:5f:d3:3f:e5:e7:6b:72:c3:3e:b5:09:
ec:3e:6d:c3:42:a7:f4:3f:ee:53:28:47:09:d0:47:
ad:ea:d2:e2:96:a8:9f:1d:17:09:e0:62:81:6e:d9:
ce:a9:b6:ad:9e:8a:a6:fd:0a:ba:d7:7b:8e:af:7b:
ec:94:65:f5:16:4c:dc:bd:87:06:c1:86:fb:83:61:
10:5f:e0:36:21:38:9e:b3:a6:7e:bf:17:87:fb:f9:
49:2b:40:63:0a:bc:b8:f8:bf:fa:ec:f8:69:e3:59:
30:ee:53:ef:d2:1d:22:05:63:2d:fc:c5:69:7e:9c:
be:67:aa:e2:88:c3:0c:3d:85:38:94:83:d4:70:b7:
96:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A4:C0:24:37:B6:39:80:94:BD:B2:5C:F2:68:A2:0C:98:67:F5:C9
X509v3 Authority Key Identifier:
keyid:48:E9:9A:3F:EE:C6:4D:6B:AD:09:8D:1B:2D:F0:B5:36:A0:38:8E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/JqTAJDe2OYCUvbJc8miiDJhn9ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.22.48.0/21
185.34.240.0/23
IPv6:
2a00:b880::/32
Signature Algorithm: sha256WithRSAEncryption
7b:f8:98:33:cd:93:4a:54:9c:96:30:e7:03:76:3f:f0:17:45:
6f:2a:ca:9b:7b:a8:fc:2c:4e:e0:dd:f3:94:cb:17:5c:65:e4:
cb:2d:e4:80:91:b6:34:2b:df:cf:c2:ed:77:d7:ef:3e:41:7e:
69:6c:67:3f:11:d5:76:5e:29:ea:95:f1:f0:b4:bf:6c:eb:59:
62:a9:7d:d6:c5:90:b9:97:e4:4c:2f:b8:b7:d6:26:32:e4:07:
46:8e:ab:ea:b6:fd:12:35:5c:d5:8b:d3:8c:8c:68:9b:f1:40:
55:9c:82:88:71:80:12:e6:7c:0c:93:52:18:88:fb:2d:52:95:
44:19:65:58:7b:ce:a4:ea:61:7d:18:43:53:56:78:3b:ed:22:
e8:6a:6c:70:b0:70:05:73:15:bb:f7:69:de:ae:46:a0:bf:3d:
63:61:b1:4b:c8:c3:ce:3b:e0:85:48:79:76:15:1e:07:84:af:
4c:40:2f:84:d8:19:0d:6d:3c:9d:fd:39:e4:c7:ae:c3:72:5d:
f0:62:80:21:54:71:e4:1d:98:81:25:17:eb:db:89:c2:60:72:
ca:51:88:fc:62:bd:7e:13:29:a1:6e:42:77:b5:cf:54:7c:06:
d9:5a:98:f1:96:14:7e:4c:9d:ad:3b:d8:a5:53:72:a8:df:c7:
ce:8d:6e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:45 2025 by rpki-client on console.sobornost.net