Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Jib-vdhAToDDe5haCuFfbFX3-Ro.roa
File: Jib-vdhAToDDe5haCuFfbFX3-Ro.roa (raw, json)
Hash identifier: 7K5ZCbipwOz34SPMvnAA+GeOLx6gWu0F7w+Sr1WdVf0=
Subject key identifier: 26:26:FE:BD:D8:40:4E:80:C3:7B:98:5A:0A:E1:5F:6C:55:F7:F9:1A
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C867758221D0094945F49B7CD60BB
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Jib-vdhAToDDe5haCuFfbFX3-Ro.roa
Signing time: Thu 02 Jan 2025 09:50:33 +0000
ROA not before: Thu 02 Jan 2025 09:50:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201776
IP address blocks: 2.63.144.0/20 maxlen: 20
2.63.176.0/20 maxlen: 20
2.63.224.0/20 maxlen: 20
46.61.150.0/24 maxlen: 24
46.61.245.0/24 maxlen: 24
84.42.92.0/22 maxlen: 24
92.50.204.0/23 maxlen: 23
176.208.74.0/24 maxlen: 24
176.211.120.0/22 maxlen: 22
188.128.76.0/23 maxlen: 23
188.254.122.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:86:77:58:22:1d:00:94:94:5f:49:b7:cd:60:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2626febdd8404e80c37b985a0ae15f6c55f7f91a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:65:56:30:3e:03:93:5c:64:08:fc:a1:65:db:
97:ad:d8:83:ef:d2:54:e4:9a:05:8e:aa:20:58:6d:
85:a8:15:5f:c0:56:7f:2d:3c:98:c5:02:fb:d8:46:
49:9d:86:ae:ac:16:bc:2c:84:1b:6e:af:b1:3a:16:
14:f4:1f:be:28:26:e3:d6:67:c5:61:d0:ed:cc:67:
37:e1:03:0b:a0:d3:96:f6:fa:c7:2b:b9:95:b8:e5:
00:19:cd:87:20:5d:6f:93:6a:7e:54:86:34:1c:46:
ce:6e:4c:fc:22:7e:66:f2:2d:f5:24:13:c0:37:84:
8f:f0:07:fe:7d:23:57:f2:6e:04:a5:19:e3:bb:fb:
19:66:77:c9:8f:8e:6e:c0:cd:1d:b8:ee:71:c3:3f:
4a:89:bc:1a:f5:6e:4d:cd:df:0f:86:b8:95:b6:2b:
da:41:39:b5:a1:e3:ff:46:cc:53:6e:d3:56:28:95:
19:7a:79:49:06:a2:38:2d:3b:b0:43:1f:5d:a7:5a:
a3:54:28:f9:fe:f6:69:47:af:ce:cc:dc:b2:9f:af:
22:c0:71:ba:ed:d5:89:a8:18:13:58:f1:0e:9b:de:
9c:56:20:ab:6a:61:9e:5c:3c:41:a5:87:60:05:81:
40:8c:b6:2b:54:f9:11:91:b9:b5:cc:66:42:3c:80:
40:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:26:FE:BD:D8:40:4E:80:C3:7B:98:5A:0A:E1:5F:6C:55:F7:F9:1A
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Jib-vdhAToDDe5haCuFfbFX3-Ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.63.144.0/20
2.63.176.0/20
2.63.224.0/20
46.61.150.0/24
46.61.245.0/24
84.42.92.0/22
92.50.204.0/23
176.208.74.0/24
176.211.120.0/22
188.128.76.0/23
188.254.122.0/23
Signature Algorithm: sha256WithRSAEncryption
64:f3:98:a2:74:cd:f9:bd:19:e3:93:d5:c8:4b:87:2e:08:81:
0d:dc:07:79:54:b4:54:d7:c5:5d:89:04:18:9f:e1:46:d3:83:
8b:9c:0a:6d:b8:51:ea:50:78:9e:0d:bc:60:9e:a8:a5:94:8a:
24:f3:d0:1e:26:4a:11:ee:af:1b:03:3d:e3:59:21:cc:65:22:
18:b1:26:55:ae:2e:26:74:50:f0:d7:67:a9:44:35:ad:8a:de:
de:77:67:50:ce:7f:96:dc:32:9b:69:96:17:a0:7f:a0:45:33:
c1:23:dd:d3:1a:2e:95:9e:2b:f6:fd:44:a8:46:60:16:12:ba:
cd:db:cf:40:14:97:8b:0e:07:55:79:a7:4a:53:00:c7:98:55:
f8:2c:9c:e2:32:d0:48:c6:96:a3:da:86:6f:d2:f1:93:f0:ca:
43:f4:b6:a0:7d:54:1d:85:9c:2c:35:04:76:07:f9:e0:21:b8:
b4:07:a9:22:d7:60:6a:bf:c0:48:45:36:91:ef:cd:ca:bb:ff:
7f:9e:92:a3:6a:dd:45:a2:6e:af:03:9a:6f:03:3e:07:64:71:
05:a2:c7:12:a4:98:ab:17:ab:89:d7:98:a5:06:60:2e:de:98:
56:0e:c5:ec:64:63:37:5a:c9:d8:50:65:a3:3d:92:41:24:c9:
9e:e3:31:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 25 22:18:46 2025 by rpki-client on console.sobornost.net