Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/jHbOO-v3l--J7LgIxP9_M8wQbrA.roa
File: jHbOO-v3l--J7LgIxP9_M8wQbrA.roa (raw, json)
Hash identifier: FeF1DOYHjXY3CVPpoNeujItbqTAw7Wp1ChNuqHrFnss=
Subject key identifier: 8C:76:CE:3B:EB:F7:97:EF:89:EC:B8:08:C4:FF:7F:33:CC:10:6E:B0
Certificate issuer: /CN=47cf2714f29db80352e9f309ea2e8c528c946bd9
Certificate serial: 019427B37337E5C778A5A74478B773629D5A
Authority key identifier: 47:CF:27:14:F2:9D:B8:03:52:E9:F3:09:EA:2E:8C:52:8C:94:6B:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/jHbOO-v3l--J7LgIxP9_M8wQbrA.roa
Signing time: Thu 02 Jan 2025 15:47:39 +0000
ROA not before: Thu 02 Jan 2025 15:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204861
IP address blocks: 194.169.190.0/24 maxlen: 24
194.169.193.0/24 maxlen: 24
194.169.196.0/24 maxlen: 24
194.169.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:73:37:e5:c7:78:a5:a7:44:78:b7:73:62:9d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47cf2714f29db80352e9f309ea2e8c528c946bd9
Validity
Not Before: Jan 2 15:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c76ce3bebf797ef89ecb808c4ff7f33cc106eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:26:41:85:05:8d:cc:68:f6:71:13:57:22:5b:
eb:e7:10:19:28:6f:e2:a9:3d:04:c6:52:f3:a3:65:
9b:52:81:69:66:52:d4:b5:98:40:e2:3a:a7:2f:6d:
41:b4:53:9f:ab:6f:c9:9a:cb:bc:b5:8d:07:0b:fd:
e7:f4:c9:77:ba:07:b6:4a:e1:68:c0:fd:91:9b:7c:
b0:e7:05:8a:98:08:dd:43:ff:59:f8:af:4c:b8:dc:
9e:fc:94:72:05:27:fa:5a:a3:dd:0f:a4:6a:62:17:
67:d5:63:60:47:ec:5f:f2:d3:d0:ae:42:c4:57:61:
f9:bd:f2:8b:32:65:c0:3a:30:58:71:86:83:82:0a:
a1:83:76:fa:25:d5:58:6f:6f:4b:b8:cb:84:c5:26:
36:80:8e:c1:4e:e9:a7:62:ff:d7:10:af:64:17:53:
fa:56:f7:97:23:07:35:11:dc:bd:72:db:82:26:e5:
68:85:e7:61:a5:66:e0:c8:f5:49:67:a1:41:3f:f8:
68:99:04:41:81:84:2e:a2:8d:27:70:63:3d:a7:2a:
c2:09:5e:fa:cf:78:6c:a3:9c:ef:18:2d:e5:bc:70:
0c:02:47:95:05:e2:97:49:2c:11:31:a9:8a:8e:f1:
0b:5e:53:3e:e9:94:56:11:1b:80:18:2f:f8:9f:66:
51:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:76:CE:3B:EB:F7:97:EF:89:EC:B8:08:C4:FF:7F:33:CC:10:6E:B0
X509v3 Authority Key Identifier:
keyid:47:CF:27:14:F2:9D:B8:03:52:E9:F3:09:EA:2E:8C:52:8C:94:6B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/jHbOO-v3l--J7LgIxP9_M8wQbrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.190.0/24
194.169.193.0/24
194.169.196.0/24
194.169.213.0/24
Signature Algorithm: sha256WithRSAEncryption
18:20:e4:91:7d:f5:b8:b0:cc:11:ee:5f:52:82:8f:06:26:0f:
d1:70:8a:cc:a9:18:d0:91:3a:22:43:9b:5b:a7:0e:5e:b2:1b:
5c:c7:60:e0:8a:6a:2c:4d:97:66:bf:70:4f:3c:ce:cd:bd:22:
c7:3b:c6:61:40:0b:1c:f0:5b:87:5f:55:f3:5a:05:48:33:08:
11:b6:09:4f:e1:28:60:15:81:2c:16:bc:80:07:62:65:d3:c2:
81:5f:f8:b1:c9:42:df:a2:8e:e2:f4:94:30:83:26:c9:f6:10:
ee:a1:1a:5e:0d:c7:38:bf:ce:26:f3:f4:df:66:d6:34:71:7f:
14:c3:95:c3:19:74:9c:ac:83:f7:60:78:69:2b:84:2c:ad:a5:
f9:cb:15:0a:49:a3:0a:6d:d6:5b:ae:d8:ea:bd:d9:23:83:84:
3d:f7:33:ce:eb:96:d4:31:93:b2:c7:3a:bc:b5:f7:b0:57:a6:
a0:1e:71:dc:b5:35:7d:b7:76:30:c1:17:e4:c2:bc:99:28:2e:
83:ad:d2:65:d3:9e:b7:08:d4:75:41:e8:27:e3:e9:f5:5f:60:
52:1d:43:9d:21:74:80:e0:e6:2f:53:3e:54:f4:d3:bb:f4:43:
48:1e:b0:ee:30:6b:66:6a:3f:fe:2c:ef:99:7a:5d:b0:aa:ea:
0f:87:7c:76
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQns3M35cd4padEeLdzYp1aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3Y2YyNzE0ZjI5ZGI4MDM1MmU5ZjMwOWVhMmU4YzUyOGM5
NDZiZDkwHhcNMjUwMTAyMTU0NzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Yzc2Y2UzYmViZjc5N2VmODllY2I4MDhjNGZmN2YzM2NjMTA2ZWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiZBhQWNzGj2cRNXIlvr5xAZKG/i
qT0ExlLzo2WbUoFpZlLUtZhA4jqnL21BtFOfq2/Jmsu8tY0HC/3n9Ml3uge2SuFo
wP2Rm3yw5wWKmAjdQ/9Z+K9MuNye/JRyBSf6WqPdD6RqYhdn1WNgR+xf8tPQrkLE
V2H5vfKLMmXAOjBYcYaDggqhg3b6JdVYb29LuMuExSY2gI7BTumnYv/XEK9kF1P6
VveXIwc1Edy9ctuCJuVohedhpWbgyPVJZ6FBP/homQRBgYQuoo0ncGM9pyrCCV76
z3hso5zvGC3lvHAMAkeVBeKXSSwRMamKjvELXlM+6ZRWERuAGC/4n2ZRzQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFIx2zjvr95fviey4CMT/fzPMEG6wMB8GA1UdIwQY
MBaAFEfPJxTynbgDUunzCeoujFKMlGvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjg4bkZQS2R1QU5TNmZNSjZpNk1Vb3lVYTlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yYjE5MmYtNmNlZS00N2ZhLTgzOTUt
NThhZGY3OGQ4Mjc4LzEvakhiT08tdjNsLS1KN0xnSXhQOV9NOHdRYnJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yYjE5MmYtNmNlZS00N2ZhLTgzOTUtNThhZGY3OGQ4Mjc4
LzEvUjg4bkZQS2R1QU5TNmZNSjZpNk1Vb3lVYTlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwqm+AwQA
wqnBAwQAwqnEAwQAwqnVMA0GCSqGSIb3DQEBCwUAA4IBAQAYIOSRffW4sMwR7l9S
go8GJg/RcIrMqRjQkToiQ5tbpw5eshtcx2DgimosTZdmv3BPPM7NvSLHO8ZhQAsc
8FuHX1XzWgVIMwgRtglP4ShgFYEsFryAB2Jl08KBX/ixyULfoo7i9JQwgybJ9hDu
oRpeDcc4v84m8/TfZtY0cX8Uw5XDGXScrIP3YHhpK4QsraX5yxUKSaMKbdZbrtjq
vdkjg4Q99zPO65bUMZOyxzq8tfewV6agHnHctTV9t3YwwRfkwryZKC6DrdJl0563
CNR1Qegn4+n1X2BSHUOdIXSA4OYvUz5U9NO79ENIHrDuMGtmaj/+LO+Zel2wquoP
h3x2
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:45 2025 by rpki-client on console.sobornost.net