Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/4Onxw3ZyCceGdWFdrDz9GypV1To.roa
File: 4Onxw3ZyCceGdWFdrDz9GypV1To.roa (raw, json)
Hash identifier: rLXGfCwokEmOeP6DWTGHar2KAFcpyGY37FcoMJ/rm24=
Subject key identifier: E0:E9:F1:C3:76:72:09:C7:86:75:61:5D:AC:3C:FD:1B:2A:55:D5:3A
Certificate issuer: /CN=29993007c7c92df6178e7cb43183fd7f52a526d8
Certificate serial: 0194236A17CE79DDF9674F6E9A5F86216E3D
Authority key identifier: 29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/4Onxw3ZyCceGdWFdrDz9GypV1To.roa
Signing time: Wed 01 Jan 2025 19:49:02 +0000
ROA not before: Wed 01 Jan 2025 19:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202588
IP address blocks: 37.77.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:17:ce:79:dd:f9:67:4f:6e:9a:5f:86:21:6e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29993007c7c92df6178e7cb43183fd7f52a526d8
Validity
Not Before: Jan 1 19:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0e9f1c3767209c78675615dac3cfd1b2a55d53a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9b:0a:b4:81:ab:b0:1e:d8:3c:c9:96:bc:2d:
48:22:15:e9:8d:6c:24:c2:fc:3d:5b:68:3b:5d:dd:
ce:b6:a7:68:f0:3d:7e:75:2f:27:28:39:ab:02:6d:
60:20:4d:9d:72:5f:da:04:58:03:68:9b:27:e8:55:
e7:3d:86:61:c9:42:08:38:9f:7a:27:85:d8:92:6d:
8a:0b:09:f4:89:aa:59:7d:bd:c7:16:7e:f4:61:1f:
4a:cc:e2:13:3a:9a:f9:04:29:07:38:13:a3:7e:d6:
c9:cf:32:6f:31:f4:d2:d7:1d:17:9c:3a:68:ae:d0:
c1:0c:bf:aa:3f:61:6e:e8:df:b5:99:4f:a6:88:06:
62:a0:0a:e0:66:5a:bd:c3:c9:8f:91:3a:83:c6:c8:
30:9d:8e:68:17:60:55:12:9d:7a:7c:59:75:59:a7:
51:a8:b6:c3:d7:5d:ba:2e:ec:85:7c:0e:12:2c:c2:
55:b2:06:17:1c:0e:c8:92:20:6c:0c:e0:ad:f8:5b:
4c:2a:4f:e7:ae:2e:6b:01:4f:94:61:64:88:e5:30:
67:7c:56:ff:95:c5:07:ab:e1:fc:34:4e:96:9b:d5:
97:0d:cc:3b:57:43:cd:d5:24:10:aa:d5:69:68:e4:
1b:23:e5:38:49:b5:d5:a0:ac:73:c0:23:86:a8:ac:
cf:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E9:F1:C3:76:72:09:C7:86:75:61:5D:AC:3C:FD:1B:2A:55:D5:3A
X509v3 Authority Key Identifier:
keyid:29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/4Onxw3ZyCceGdWFdrDz9GypV1To.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.11.0/24
Signature Algorithm: sha256WithRSAEncryption
35:6c:e5:63:50:64:6b:30:2d:6b:2b:22:48:f4:d2:7b:43:2f:
64:17:53:b1:ba:0d:f5:a1:0c:a4:bb:22:5c:c0:40:4e:66:c2:
71:f5:bd:1c:7e:cd:56:cc:a0:10:cc:d4:b1:39:e7:7a:38:f4:
82:35:ae:5f:c9:3d:d8:c2:3b:64:99:3c:5e:7f:56:a9:fb:61:
ba:c2:70:ae:0a:e9:07:3d:16:b1:59:71:dd:f7:99:cc:2f:5c:
96:36:c0:31:a2:ee:92:3e:5f:67:41:96:3d:34:6a:cc:6c:bb:
b4:30:0b:16:4c:38:a5:ad:e0:78:51:ec:7e:95:6a:a4:ce:f8:
78:1e:cc:37:c1:d2:42:08:81:7e:70:05:f6:f2:79:2d:73:d0:
16:79:06:37:f8:d3:32:7b:de:05:21:b4:91:a0:2c:df:82:2e:
32:38:86:94:20:11:1e:c5:45:85:a8:11:0b:16:54:35:46:dc:
39:22:b9:f4:9a:3b:c9:9e:09:ea:c9:5e:fd:ce:d0:10:17:41:
26:de:5e:74:7a:66:d7:a4:c3:3e:e3:99:d1:24:d7:e2:1c:ac:
8d:e4:3b:7e:0b:04:b2:01:f6:c3:d5:4a:cd:3f:bc:18:83:a4:
eb:74:1c:18:49:7d:97:27:21:59:f9:1b:9a:30:41:00:78:23:
38:ee:e3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:48 2025 by rpki-client on console.sobornost.net