Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/J4rQ9gsrKayiuOOExEGxMHRTLss.roa
File: J4rQ9gsrKayiuOOExEGxMHRTLss.roa (raw, json)
Hash identifier: J+BOWsTNmfnM3hLMHXcZYhZuZ1oIUj5I4r3BR6mevWk=
Subject key identifier: 27:8A:D0:F6:0B:2B:29:AC:A2:B8:E3:84:C4:41:B1:30:74:53:2E:CB
Certificate issuer: /CN=0dc9c1b717156a18a34d9323b67a0a03eda85ac9
Certificate serial: 019424B3B8E0CCF1A3506C7A2E75686069D5
Authority key identifier: 0D:C9:C1:B7:17:15:6A:18:A3:4D:93:23:B6:7A:0A:03:ED:A8:5A:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/J4rQ9gsrKayiuOOExEGxMHRTLss.roa
Signing time: Thu 02 Jan 2025 01:49:05 +0000
ROA not before: Thu 02 Jan 2025 01:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199849
IP address blocks: 185.44.112.0/24 maxlen: 24
185.44.113.0/24 maxlen: 24
185.44.114.0/24 maxlen: 24
185.44.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:b8:e0:cc:f1:a3:50:6c:7a:2e:75:68:60:69:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc9c1b717156a18a34d9323b67a0a03eda85ac9
Validity
Not Before: Jan 2 01:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=278ad0f60b2b29aca2b8e384c441b13074532ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:90:8e:ee:3f:76:48:91:03:e8:56:fc:30:22:
71:97:90:d5:ff:64:62:03:d8:7d:d4:b5:1a:51:4e:
86:a5:56:59:01:94:ac:77:a7:80:bf:01:fb:50:83:
eb:f7:79:14:77:49:a5:a7:26:34:60:05:eb:5b:48:
6f:88:dd:02:2c:d1:b6:6e:1e:d1:a7:28:64:d1:a9:
aa:8e:96:d1:b4:08:04:11:a3:d9:ce:db:7d:5f:76:
ff:24:59:7b:ac:b1:9e:cd:e7:62:58:c9:f1:c4:ae:
a2:11:7e:19:4c:11:46:a1:96:d0:74:40:48:4e:09:
6f:62:a4:3a:e1:f7:d9:2f:33:09:9a:7f:95:2c:92:
c9:ce:ec:26:61:4c:27:5b:ff:46:7e:73:05:71:70:
c0:72:f7:30:dc:ac:9f:b1:2f:bf:87:68:8f:39:77:
8e:83:63:53:7e:3d:47:c6:d5:6c:eb:3b:b8:e5:ba:
cb:d5:7d:90:70:74:37:54:e2:07:8a:ae:30:e1:6c:
05:f1:c3:3f:ac:ca:99:ad:7d:84:a4:5a:4a:c6:7f:
88:5e:57:f7:65:62:c1:74:73:5b:0e:d8:d5:3a:a2:
bf:d4:9e:01:5c:86:c6:0f:80:57:48:3e:92:09:db:
2d:be:63:c3:ab:a4:70:32:bd:2b:7d:54:8d:52:95:
6a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8A:D0:F6:0B:2B:29:AC:A2:B8:E3:84:C4:41:B1:30:74:53:2E:CB
X509v3 Authority Key Identifier:
keyid:0D:C9:C1:B7:17:15:6A:18:A3:4D:93:23:B6:7A:0A:03:ED:A8:5A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/J4rQ9gsrKayiuOOExEGxMHRTLss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.112.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:3f:ee:09:20:7f:c0:a9:3d:d6:e4:58:ef:d6:eb:88:5b:2a:
e1:20:2f:ee:2a:90:20:72:98:a2:85:43:20:3e:66:53:01:41:
68:cf:36:10:26:ba:bf:d6:51:7c:a9:3d:b9:2b:a6:1d:e9:f0:
a6:76:0c:07:4b:5a:f7:f3:3e:53:92:bb:48:3d:01:2f:20:a1:
82:ff:3c:4b:b5:5d:a2:78:f2:e8:86:5f:c7:d6:c9:ce:45:f9:
83:3d:44:34:92:28:5d:75:d1:7c:85:d3:e4:8c:f0:30:f9:6a:
c3:5a:93:aa:5e:35:ba:78:93:7f:a7:3a:e4:b6:66:9a:33:d2:
b8:db:a9:e6:2d:40:9c:fe:b0:14:e3:2d:75:c5:56:25:01:7c:
01:6c:1e:01:7d:d9:1d:cb:cf:a3:8c:95:66:7e:46:25:ca:07:
49:94:8d:95:ed:d7:79:6b:32:10:a0:33:b6:0c:12:72:7b:62:
65:ed:57:67:3b:48:a1:2f:3b:2b:21:24:c7:84:3a:dd:78:ba:
d0:1b:31:60:59:d9:cd:33:08:8b:20:87:9f:97:d7:f8:25:86:
01:68:e5:bf:11:95:5c:0d:31:26:02:c8:4a:88:22:4d:a0:93:
8f:77:72:96:21:98:30:c9:95:6b:45:62:92:8c:fc:08:09:08:
ed:6f:f4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:28:43 2025 by rpki-client