Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/JY1Ry82sD4kNWhz4gQuDnSIFpN8.roa
File: JY1Ry82sD4kNWhz4gQuDnSIFpN8.roa (raw, json)
Hash identifier: 8elrrlaE2J0H4bGnc8sBg7PwEFKBgdvohUzIrvCFh2E=
Subject key identifier: 25:8D:51:CB:CD:AC:0F:89:0D:5A:1C:F8:81:0B:83:9D:22:05:A4:DF
Certificate issuer: /CN=8775e6408b8e05aa914b874635a47b7b820c6c32
Certificate serial: 0195275A7FDA6A961FCF0DC350EAF2109E46
Authority key identifier: 87:75:E6:40:8B:8E:05:AA:91:4B:87:46:35:A4:7B:7B:82:0C:6C:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/JY1Ry82sD4kNWhz4gQuDnSIFpN8.roa
Signing time: Fri 21 Feb 2025 07:13:17 +0000
ROA not before: Fri 21 Feb 2025 07:13:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215395
IP address blocks: 195.78.153.0/24 maxlen: 24
195.78.154.0/24 maxlen: 24
195.78.155.0/24 maxlen: 24
195.78.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:27:5a:7f:da:6a:96:1f:cf:0d:c3:50:ea:f2:10:9e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8775e6408b8e05aa914b874635a47b7b820c6c32
Validity
Not Before: Feb 21 07:13:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=258d51cbcdac0f890d5a1cf8810b839d2205a4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bd:dd:9d:37:cd:55:8b:4e:a9:b2:01:4e:7a:
07:ac:76:4d:c9:87:b4:c2:8d:ef:29:e9:cf:34:21:
f2:42:3b:46:86:78:da:93:cd:0c:e4:58:3d:1f:b8:
42:90:cc:6a:cf:a9:1b:ac:40:22:90:28:e7:be:50:
b6:5b:27:cd:72:1d:65:e8:be:66:24:a3:d2:2a:68:
f3:1f:1b:1d:95:3c:0b:47:9a:04:34:fd:83:28:4c:
3f:a3:20:2c:14:ff:79:79:a4:fa:f8:20:6b:5c:a6:
f8:82:6f:2c:71:1c:02:1f:4f:8b:07:b6:8f:d0:93:
ad:4f:9d:49:69:6b:91:0e:6b:ba:73:10:b2:aa:4a:
f8:07:4a:5b:31:fa:e9:66:0f:c1:ca:e2:e6:63:2a:
3a:db:e7:ce:fc:88:14:74:74:f0:f0:60:07:f4:4b:
40:9f:f0:2a:aa:65:1c:91:a8:92:19:00:c1:53:97:
7e:be:29:a1:7f:73:06:a4:55:77:6b:db:65:61:f0:
99:f4:5e:4c:67:bc:5b:49:10:b9:7a:16:ad:30:44:
73:76:98:f6:23:6f:66:ba:4f:1d:ec:36:f1:a0:67:
ed:31:03:f9:23:4d:46:42:40:07:61:5c:1d:89:74:
49:de:46:80:bd:52:24:a5:6a:9e:9d:62:03:fa:48:
6c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8D:51:CB:CD:AC:0F:89:0D:5A:1C:F8:81:0B:83:9D:22:05:A4:DF
X509v3 Authority Key Identifier:
keyid:87:75:E6:40:8B:8E:05:AA:91:4B:87:46:35:A4:7B:7B:82:0C:6C:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/JY1Ry82sD4kNWhz4gQuDnSIFpN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.78.153.0-195.78.156.255
Signature Algorithm: sha256WithRSAEncryption
38:ff:17:e6:97:36:2a:be:83:60:dd:e5:7e:f2:98:0f:fa:30:
bc:b9:bf:de:96:ee:74:d6:90:b2:ac:39:45:75:12:92:5e:2e:
90:cc:86:69:57:b3:7d:97:c2:05:18:70:4a:40:1f:b8:35:74:
e1:34:21:e2:f5:8d:69:ac:6d:e3:2b:2d:c3:2c:11:5b:96:34:
5b:c4:eb:e8:c2:b7:4f:61:37:ce:fe:3d:77:8c:46:d4:7d:a6:
cc:b2:c2:aa:37:06:91:93:39:d5:05:eb:64:84:78:31:8c:73:
73:27:9d:e5:70:bc:5c:79:0d:c2:48:1c:2e:51:df:c0:45:cc:
0f:fe:4f:b6:4f:cf:07:bd:0b:2f:3f:11:2d:77:3e:78:ec:9b:
f7:83:5a:d2:f5:2f:3e:99:70:cc:a2:c4:e0:7d:cb:ca:5f:82:
87:f0:b9:c3:a0:b1:e7:db:43:62:fb:bd:be:1a:84:87:f3:81:
f6:8b:14:2f:e1:4e:d3:cd:c9:0c:ec:4b:af:46:80:9a:a6:8d:
68:da:4e:e8:42:7b:24:94:fe:a8:a4:e0:ef:bb:7b:66:2e:a0:
bf:67:45:4a:8f:22:24:98:78:7b:ca:96:df:bd:76:55:03:52:
2e:36:ea:f7:46:a4:29:5d:a5:7c:0e:8a:b7:bd:12:e7:ef:95:
78:a0:2f:b9
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZUnWn/aapYfzw3DUOryEJ5GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NzVlNjQwOGI4ZTA1YWE5MTRiODc0NjM1YTQ3YjdiODIw
YzZjMzIwHhcNMjUwMjIxMDcxMzE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNThkNTFjYmNkYWMwZjg5MGQ1YTFjZjg4MTBiODM5ZDIyMDVhNGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnr3dnTfNVYtOqbIBTnoHrHZNyYe0
wo3vKenPNCHyQjtGhnjak80M5Fg9H7hCkMxqz6kbrEAikCjnvlC2WyfNch1l6L5m
JKPSKmjzHxsdlTwLR5oENP2DKEw/oyAsFP95eaT6+CBrXKb4gm8scRwCH0+LB7aP
0JOtT51JaWuRDmu6cxCyqkr4B0pbMfrpZg/ByuLmYyo62+fO/IgUdHTw8GAH9EtA
n/AqqmUckaiSGQDBU5d+vimhf3MGpFV3a9tlYfCZ9F5MZ7xbSRC5ehatMERzdpj2
I29muk8d7DbxoGftMQP5I01GQkAHYVwdiXRJ3kaAvVIkpWqenWID+khswQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFCWNUcvNrA+JDVoc+IELg50iBaTfMB8GA1UdIwQY
MBaAFId15kCLjgWqkUuHRjWke3uCDGwyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDNYbVFJdU9CYXFSUzRkR05hUjdlNElNYkRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zNmUwNjUtYTFmNi00ZTE0LWIyZDct
NjFlNTRjZmMyYWJjLzEvSlkxUnk4MnNENGtOV2h6NGdRdURuU0lGcE44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8zNmUwNjUtYTFmNi00ZTE0LWIyZDctNjFlNTRjZmMyYWJj
LzEvaDNYbVFJdU9CYXFSUzRkR05hUjdlNElNYkRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADDTpkD
BADDTpwwDQYJKoZIhvcNAQELBQADggEBADj/F+aXNiq+g2Dd5X7ymA/6MLy5v96W
7nTWkLKsOUV1EpJeLpDMhmlXs32XwgUYcEpAH7g1dOE0IeL1jWmsbeMrLcMsEVuW
NFvE6+jCt09hN87+PXeMRtR9psyywqo3BpGTOdUF62SEeDGMc3MnneVwvFx5DcJI
HC5R38BFzA/+T7ZPzwe9Cy8/ES13Pnjsm/eDWtL1Lz6ZcMyixOB9y8pfgofwucOg
sefbQ2L7vb4ahIfzgfaLFC/hTtPNyQzsS69GgJqmjWjaTuhCeySU/qik4O+7e2Yu
oL9nRUqPIiSYeHvKlt+9dlUDUi426vdGpCldpXwOire9EufvlXigL7k=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:47 2025 by rpki-client on console.sobornost.net