Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/ymk3s2uYAjIifXFebx0Gs2GCpZg.roa
File: ymk3s2uYAjIifXFebx0Gs2GCpZg.roa (raw, json)
Hash identifier: 1iZB8mSVVI0xWBNNoWKTn+58QXVIuSn2YESYam7CY+4=
Subject key identifier: CA:69:37:B3:6B:98:02:32:22:7D:71:5E:6F:1D:06:B3:61:82:A5:98
Certificate issuer: /CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
Certificate serial: 019420D5BAD0131777D42196CFA589492C68
Authority key identifier: 2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/ymk3s2uYAjIifXFebx0Gs2GCpZg.roa
Signing time: Wed 01 Jan 2025 07:47:45 +0000
ROA not before: Wed 01 Jan 2025 07:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209360
IP address blocks: 37.61.77.0/24 maxlen: 24
37.61.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ba:d0:13:17:77:d4:21:96:cf:a5:89:49:2c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
Validity
Not Before: Jan 1 07:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca6937b36b980232227d715e6f1d06b36182a598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7e:b3:31:51:a8:13:a2:b3:d1:cb:8f:bd:3e:
4e:3e:3d:df:9e:95:3d:74:fa:b2:28:b2:a0:20:be:
19:81:72:f6:59:20:18:ad:b9:5d:0f:d0:d0:1e:fc:
7b:a3:4a:9f:59:06:cd:af:29:cb:73:38:5f:3a:5a:
13:fb:7d:8a:76:27:0c:eb:46:9d:0e:0b:81:6b:49:
8f:67:35:e1:90:a8:ac:e6:f1:19:b6:82:25:c3:43:
73:c0:24:38:82:8d:45:7b:c4:c3:2c:fd:b2:cd:ac:
02:76:b7:a8:8c:4d:04:0a:a9:a2:f2:8f:ae:73:b3:
93:a4:ab:e4:c7:24:a2:84:bb:d5:99:18:17:42:05:
df:bc:a0:6c:b9:b7:d6:d4:5d:bf:89:29:a2:a4:30:
47:91:12:53:fb:61:60:ee:f6:c5:08:78:c5:b1:e0:
23:ab:cd:7d:61:d7:60:c5:b5:fe:0e:3e:02:56:8e:
a4:9a:34:e6:f0:67:f7:a7:8d:86:e6:95:8b:40:f0:
c6:4c:8f:f0:a6:03:96:c5:0a:a7:bd:aa:1e:ff:9a:
f2:03:ea:99:f8:59:c8:72:e3:f4:92:f4:ff:c6:f2:
a4:88:0f:8e:99:fd:b7:c3:9b:8e:8c:e2:0a:e0:8a:
c0:24:54:cb:3a:f4:cb:15:6b:1a:f1:6e:f2:54:8f:
43:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:69:37:B3:6B:98:02:32:22:7D:71:5E:6F:1D:06:B3:61:82:A5:98
X509v3 Authority Key Identifier:
keyid:2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/ymk3s2uYAjIifXFebx0Gs2GCpZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.61.77.0-37.61.78.255
Signature Algorithm: sha256WithRSAEncryption
16:fb:f7:fa:72:c1:c9:ab:97:1a:07:da:22:65:c6:b0:89:4d:
80:e1:7c:bf:b2:34:36:10:4f:ae:df:25:9b:a5:4c:be:8f:8c:
f0:20:0f:f5:b5:c3:45:fb:c1:00:05:85:a2:82:5e:27:fb:b8:
d6:96:1d:56:4f:d8:5a:8e:e1:eb:7e:f6:f2:8e:f3:09:17:28:
2b:b1:aa:a4:3a:10:8b:bc:21:c8:29:c3:81:f5:f5:14:36:70:
52:8b:cf:35:ab:a9:59:b4:78:8a:0d:9b:f0:37:24:06:c0:f4:
2e:7d:ec:ea:11:ef:87:e6:a4:b8:14:5a:9a:82:26:fb:f0:12:
6f:b1:d0:01:18:9e:4a:11:d2:b0:45:5f:fe:41:9f:68:21:49:
05:f2:20:34:82:f8:95:be:dc:4c:4b:13:1e:51:9b:3a:cc:63:
5f:6f:1e:fe:62:59:6d:cd:ab:2a:9a:0c:95:e6:f3:7d:d1:7c:
17:f5:89:49:f8:19:28:01:bb:ee:c1:9b:58:62:79:20:4c:13:
14:ad:eb:0b:b3:b6:c2:3f:4a:9e:72:04:01:dc:59:e9:00:41:
85:36:dd:35:f8:57:8d:ed:62:c2:df:33:2f:c8:0a:95:d3:ae:
bd:5e:17:cc:dc:51:32:67:63:20:0e:9c:ac:64:20:a1:39:1e:
50:64:00:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:05 2025 by rpki-client on console.sobornost.net