Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/Ui4T2GyLPb5V_GyLmVH9xWmqSis.roa
File: Ui4T2GyLPb5V_GyLmVH9xWmqSis.roa (raw, json)
Hash identifier: H9GrvcqwsRbsIbqHvZcnfufcVzAo6Z6JdEqaIAeGYT0=
Subject key identifier: 52:2E:13:D8:6C:8B:3D:BE:55:FC:6C:8B:99:51:FD:C5:69:AA:4A:2B
Certificate issuer: /CN=29993007c7c92df6178e7cb43183fd7f52a526d8
Certificate serial: 0194236A16DBFCC34277F9BD5CB0EAAF1D28
Authority key identifier: 29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/Ui4T2GyLPb5V_GyLmVH9xWmqSis.roa
Signing time: Wed 01 Jan 2025 19:49:02 +0000
ROA not before: Wed 01 Jan 2025 19:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42216
IP address blocks: 37.77.25.0/24 maxlen: 24
37.77.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:16:db:fc:c3:42:77:f9:bd:5c:b0:ea:af:1d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29993007c7c92df6178e7cb43183fd7f52a526d8
Validity
Not Before: Jan 1 19:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=522e13d86c8b3dbe55fc6c8b9951fdc569aa4a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f4:b6:c8:87:b9:8d:00:28:cc:40:c9:be:f0:
11:4a:b7:1c:1b:c0:7d:c8:67:c5:e2:54:44:01:cb:
4b:86:5a:fc:ff:f0:31:a4:a7:ad:48:1a:ec:2c:21:
cd:cc:90:fe:40:06:b4:dd:d4:25:0b:18:91:2e:37:
66:56:b3:a0:5a:ee:70:24:be:44:85:65:ef:ed:35:
e0:f6:94:6d:cb:04:65:98:65:35:cd:85:ac:34:7a:
b8:61:11:06:9b:95:eb:e2:55:12:91:dd:61:5d:eb:
cb:36:89:51:11:24:6e:c7:f0:87:3f:42:5e:54:1c:
23:c9:c3:a9:42:26:ec:0f:ff:f5:34:96:a6:55:ad:
e0:2b:42:12:58:b6:b5:1c:8a:f6:59:e5:ba:68:a3:
cb:8b:45:b5:8b:f2:96:16:83:3c:ea:5e:77:28:38:
6a:db:5c:ca:92:0e:0e:22:eb:d7:a3:2f:60:d5:87:
f7:8a:d0:f9:d6:76:e6:73:90:34:15:f3:ee:7d:2d:
94:9d:36:4a:d9:00:49:0b:a0:ef:c6:c4:15:e5:81:
15:65:03:68:49:e7:8a:fe:d9:dd:79:5e:7c:9e:e1:
b9:9e:27:2a:f4:89:94:2d:4a:89:6f:cb:71:2f:4d:
7a:a2:6f:a7:f6:13:ce:98:73:66:3b:b8:16:52:7e:
6c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:2E:13:D8:6C:8B:3D:BE:55:FC:6C:8B:99:51:FD:C5:69:AA:4A:2B
X509v3 Authority Key Identifier:
keyid:29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/Ui4T2GyLPb5V_GyLmVH9xWmqSis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.25.0-37.77.26.255
Signature Algorithm: sha256WithRSAEncryption
79:78:ed:60:28:4c:45:15:31:39:44:af:4c:7d:d7:d2:72:d5:
46:c6:84:78:40:c9:0e:57:3e:e8:ba:28:e1:9d:e1:b4:19:4a:
7d:49:9a:c4:d2:e9:9a:ea:46:37:99:d9:a4:ad:9d:21:81:69:
d9:fe:52:11:66:96:f8:cb:1b:12:b0:0d:65:c3:ae:f9:a9:e4:
f4:55:01:7c:a3:03:68:8d:c8:af:2d:f6:b6:5e:78:ea:a4:3a:
a9:48:64:6f:03:0d:2b:13:3c:c1:de:3f:48:3a:e3:7a:2d:ac:
4e:00:4f:99:a4:90:61:01:01:0f:10:87:7f:f2:08:68:ad:30:
5e:2a:47:aa:e3:54:1a:ac:8d:fa:75:d0:3e:39:66:3c:77:df:
27:a1:a0:71:0b:d2:52:03:49:c3:f5:b3:20:62:bb:e5:20:b8:
35:69:b5:d3:74:7d:20:c2:e8:95:82:3f:d5:28:6e:50:71:ff:
1e:25:91:3c:f4:05:31:9a:bf:32:af:7c:89:7b:50:90:6c:70:
0f:bc:35:7c:85:04:33:33:ca:a6:3a:a8:dd:88:41:00:8b:eb:
8e:d0:04:8d:1a:a2:e5:8c:c1:1c:1e:73:fd:cb:29:79:15:0c:
8a:82:d1:e9:55:1a:1b:60:f5:d2:f9:74:45:e7:f2:4d:d7:c1:
d6:8c:87:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:12:12 2025 by rpki-client on console.sobornost.net