Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/jOZRDN_BFHgGfDMvwJ0jkJTVBko.roa
File: jOZRDN_BFHgGfDMvwJ0jkJTVBko.roa (raw, json)
Hash identifier: v7urVrLJEvfyeck+EYvOP/ZepjN99wS4T6ZKWFITJzs=
Subject key identifier: 8C:E6:51:0C:DF:C1:14:78:06:7C:33:2F:C0:9D:23:90:94:D5:06:4A
Certificate issuer: /CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Certificate serial: 019424457F27CA2643F4645E8657AA88A772
Authority key identifier: C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/jOZRDN_BFHgGfDMvwJ0jkJTVBko.roa
Signing time: Wed 01 Jan 2025 23:48:41 +0000
ROA not before: Wed 01 Jan 2025 23:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206405
IP address blocks: 37.122.192.0/21 maxlen: 24
37.122.196.0/22 maxlen: 22
37.122.196.0/23 maxlen: 24
37.122.198.0/23 maxlen: 23
185.156.188.0/22 maxlen: 22
185.156.188.0/23 maxlen: 23
185.156.189.0/24 maxlen: 24
185.156.190.0/23 maxlen: 23
2a00:9e40::/34 maxlen: 34
2a00:9e40:1000::/36 maxlen: 36
2a00:9e40:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:7f:27:ca:26:43:f4:64:5e:86:57:aa:88:a7:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Validity
Not Before: Jan 1 23:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ce6510cdfc11478067c332fc09d239094d5064a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7f:8c:3c:69:02:8f:b7:73:b9:0d:4f:d7:3e:
2e:8f:6b:d4:d0:f8:fd:0f:90:a0:9a:07:84:4c:d3:
70:8f:e9:03:7f:47:31:fe:71:79:61:56:28:f5:96:
fb:68:ea:ee:a6:6c:aa:9e:93:86:ef:02:e3:6e:eb:
d7:2a:71:31:ae:4f:92:8b:8b:47:9c:fd:ba:44:f7:
46:e8:00:5d:f7:f8:0a:1f:97:23:c0:60:12:e1:d9:
98:17:de:1c:fe:1f:0e:92:c9:07:4e:ae:1c:ef:df:
89:f4:a2:3c:91:1c:23:eb:d8:f3:22:b4:72:0f:83:
72:7d:69:3a:5c:d9:f1:ff:f2:83:b4:71:47:d0:5a:
74:91:10:bc:47:27:93:97:ea:49:53:ec:96:c1:91:
b2:3a:b0:71:93:fe:77:9d:4e:37:4e:a8:65:e9:fc:
b0:c4:e4:34:f4:c1:48:f6:6c:97:51:59:6f:e8:16:
65:75:96:8b:d6:d4:b2:ad:57:46:98:12:ef:ea:57:
b9:78:9c:11:59:bf:1d:2e:b7:5c:31:7f:91:cf:06:
4c:81:03:2b:61:e9:40:31:aa:42:bf:ed:f2:07:9f:
93:a6:08:56:4b:5e:10:71:7d:3e:9b:8a:c0:37:fe:
ef:f0:aa:d4:1a:42:07:d6:d0:13:bc:ea:34:33:da:
c3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E6:51:0C:DF:C1:14:78:06:7C:33:2F:C0:9D:23:90:94:D5:06:4A
X509v3 Authority Key Identifier:
keyid:C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/jOZRDN_BFHgGfDMvwJ0jkJTVBko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.122.192.0/21
185.156.188.0/22
IPv6:
2a00:9e40::/34
2a00:9e40:8000::/33
Signature Algorithm: sha256WithRSAEncryption
03:f8:90:80:84:09:8b:18:27:b5:3e:87:ff:c1:e0:d2:b3:ba:
25:aa:98:4c:3a:a1:24:1f:ad:96:f0:85:0f:5f:3c:2f:2d:ca:
07:89:8f:1f:01:ab:82:b3:89:2e:cd:bc:70:c0:d7:a2:6c:50:
40:e2:7e:4b:d4:17:e6:fc:04:12:8e:08:60:b1:26:e5:7c:26:
b9:dc:90:6e:b4:4b:f4:5d:53:89:e9:af:18:67:ca:a5:9d:a2:
19:8c:77:d9:ae:f7:33:4f:cc:5f:df:ea:e4:9e:2d:48:ef:65:
0f:27:be:82:f9:7e:b7:3d:2b:06:d2:b6:25:6f:fe:af:88:b0:
4c:d5:26:39:39:31:3a:90:08:b5:eb:74:76:9b:44:03:6c:bf:
a7:9a:07:e7:84:37:1a:91:27:33:79:f9:b3:70:36:ec:79:61:
99:d2:32:d0:8e:20:bc:ad:e2:c4:42:9f:5a:7a:63:4f:3b:a6:
95:5c:e2:ce:89:c6:06:9f:dd:11:67:a9:38:65:31:d8:87:ab:
90:06:6d:8f:4e:64:25:23:29:a3:5c:6c:3e:cd:e7:6c:09:57:
d1:bb:bc:cc:43:90:d0:5a:21:83:7b:b6:70:4b:7a:1d:cb:53:
71:41:f1:05:e9:2c:df:82:e6:42:0c:5e:35:7f:0b:77:bb:8a:
c3:15:01:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:14 2025 by rpki-client