Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/ux1IC1yxeTUgRbCsz7aKGJRUxDA.roa
File: ux1IC1yxeTUgRbCsz7aKGJRUxDA.roa (raw, json)
Hash identifier: Cbk3gKO+GYUzaeJI/vrLpgkHk9pkTZFjphWYEpQbc/Y=
Subject key identifier: BB:1D:48:0B:5C:B1:79:35:20:45:B0:AC:CF:B6:8A:18:94:54:C4:30
Certificate issuer: /CN=c1ab247c636ad389bf9f8c5074c8220230e8edcc
Certificate serial: 01941F8C8E309E1C04DC7ECEE8888E2C4462
Authority key identifier: C1:AB:24:7C:63:6A:D3:89:BF:9F:8C:50:74:C8:22:02:30:E8:ED:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/ux1IC1yxeTUgRbCsz7aKGJRUxDA.roa
Signing time: Wed 01 Jan 2025 01:48:12 +0000
ROA not before: Wed 01 Jan 2025 01:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199430
IP address blocks: 37.203.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:8e:30:9e:1c:04:dc:7e:ce:e8:88:8e:2c:44:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1ab247c636ad389bf9f8c5074c8220230e8edcc
Validity
Not Before: Jan 1 01:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb1d480b5cb179352045b0accfb68a189454c430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7d:70:45:b7:7a:c4:99:09:af:0f:0a:b8:56:
49:dd:f5:6d:79:b5:39:e4:1a:c4:76:4b:2f:45:ec:
bd:05:b4:9c:78:41:a5:47:12:b6:63:cb:10:4b:3a:
ee:aa:a6:57:aa:08:ac:ef:e6:75:2d:aa:47:d0:36:
ee:f9:fd:5d:d2:7a:5e:bc:cc:42:5e:e4:6b:8e:88:
7e:d5:1d:9f:6b:34:97:82:71:4c:f3:e6:eb:46:25:
49:78:dc:d2:e7:cd:0b:3c:f6:bd:ab:59:03:66:53:
d5:54:5b:5f:74:bd:7b:cd:6b:f7:96:31:b5:c4:f2:
ea:ff:05:0d:f2:f9:03:78:02:16:d7:31:2e:2b:f0:
33:86:71:75:2d:65:51:11:dd:99:e1:c8:cb:8d:fd:
0b:84:40:0c:27:70:e9:4c:20:5d:02:4d:51:3a:70:
a3:78:bd:ff:83:8a:89:41:f7:44:e2:86:68:53:2f:
1b:0b:77:cb:5d:a1:b0:21:16:ac:6c:7b:d2:fb:47:
52:0c:92:f4:dd:08:51:c1:36:93:57:77:04:1a:7b:
7b:a1:a6:8c:be:c5:11:d6:4f:00:c8:aa:91:33:c2:
09:a5:4b:de:3d:9b:f7:d7:f5:6f:38:92:35:b9:c2:
36:d4:9b:7e:83:57:cb:34:9e:ac:28:89:68:fe:08:
88:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1D:48:0B:5C:B1:79:35:20:45:B0:AC:CF:B6:8A:18:94:54:C4:30
X509v3 Authority Key Identifier:
keyid:C1:AB:24:7C:63:6A:D3:89:BF:9F:8C:50:74:C8:22:02:30:E8:ED:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/ux1IC1yxeTUgRbCsz7aKGJRUxDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.203.241.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:93:38:f5:bb:47:b7:4e:d1:ed:7d:0c:92:1a:87:da:1f:c6:
c3:ee:c0:2a:a6:9c:ed:9e:32:65:8b:3d:1a:d0:3a:a0:33:73:
42:bd:d4:eb:15:2c:52:a9:f3:ab:68:ff:dc:8d:54:c8:19:ba:
84:d6:74:81:27:0f:cd:1d:d1:9a:bb:ae:c4:14:ac:0f:60:21:
f5:45:5b:bc:3f:9f:ab:33:a5:41:ee:b7:df:5d:16:7f:71:c3:
40:a0:21:06:20:69:5d:9f:38:ce:19:23:ea:cf:ab:1b:d4:37:
fe:e1:7d:a3:33:bd:80:02:d9:90:ed:aa:91:c6:28:2e:67:61:
95:9a:6e:12:ae:1a:e0:51:e6:ff:44:9f:a6:45:d8:a9:ab:83:
db:e1:4d:01:f2:46:fc:ef:74:90:4d:59:7d:13:1d:a8:87:57:
7c:c0:cd:df:82:a0:b8:78:57:c8:b3:95:52:55:5a:be:be:d6:
4e:b2:75:38:c2:24:11:90:16:d4:b8:d8:29:14:05:5e:c9:fa:
84:a0:e9:07:0a:6f:49:f4:6f:87:ea:33:c0:ed:33:85:06:44:
2f:39:9c:7d:bc:2a:ee:3e:3a:18:a6:96:4e:ec:8e:1a:eb:52:
92:6e:9a:0e:96:6e:95:df:bb:c3:d2:54:59:4d:03:ac:84:a8:
db:47:6e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:01 2025 by rpki-client on console.sobornost.net