Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/67WjyU4KKdks9XTjrOpNlMYxMOY.roa
File: 67WjyU4KKdks9XTjrOpNlMYxMOY.roa (raw, json)
Hash identifier: M/iOJcIMSY96y4BDUaD3pXiWoL1CLO6LiS41JdOWIoU=
Subject key identifier: EB:B5:A3:C9:4E:0A:29:D9:2C:F5:74:E3:AC:EA:4D:94:C6:31:30:E6
Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612
Certificate serial: 0194221FC0A03A16EC3B57559425FC55C584
Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/67WjyU4KKdks9XTjrOpNlMYxMOY.roa
Signing time: Wed 01 Jan 2025 13:48:13 +0000
ROA not before: Wed 01 Jan 2025 13:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 37.153.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c0:a0:3a:16:ec:3b:57:55:94:25:fc:55:c5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612
Validity
Not Before: Jan 1 13:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebb5a3c94e0a29d92cf574e3acea4d94c63130e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:75:85:6f:2c:2b:d8:f1:fa:71:44:10:00:a3:
74:f8:41:52:90:56:a2:16:b5:f8:81:69:6f:d0:f8:
94:10:eb:c3:29:9c:d3:a9:f7:99:84:64:97:41:c3:
0a:ac:0b:05:84:d5:e9:c5:2b:8b:10:5b:3c:08:d6:
f3:7b:35:b8:fb:5e:d9:65:11:56:b5:47:ec:67:2b:
4e:3d:04:1f:8d:e0:90:55:3e:79:91:1c:3f:08:f5:
50:40:e7:91:dc:36:27:f4:68:6d:ea:19:71:8b:8e:
b2:17:5d:b5:f1:3c:20:c5:c7:2c:a4:5d:cd:aa:ad:
95:a4:cb:83:8c:0b:c2:eb:a0:d2:08:ec:33:92:5d:
14:44:92:2d:c8:40:7b:88:51:19:69:0a:60:ef:0a:
82:db:9f:47:9b:7a:ca:2e:0f:05:bf:1b:94:49:53:
4e:ea:1b:be:c3:2e:7c:31:4c:f9:b6:e9:9c:00:ee:
68:e9:0a:10:b1:a2:9f:b5:cb:0d:cd:da:5c:5d:8a:
41:f7:bc:20:00:c0:29:33:f7:fc:87:b3:98:58:b7:
78:2c:3a:06:b7:1e:b5:eb:bd:2f:74:48:b4:fc:d1:
ad:1a:00:ec:4a:84:f3:b5:b3:63:d2:c9:ba:bc:88:
03:1e:60:53:13:d2:33:54:7b:dc:5e:73:d1:63:7b:
9b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B5:A3:C9:4E:0A:29:D9:2C:F5:74:E3:AC:EA:4D:94:C6:31:30:E6
X509v3 Authority Key Identifier:
keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/67WjyU4KKdks9XTjrOpNlMYxMOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.157.0/24
Signature Algorithm: sha256WithRSAEncryption
34:5d:e2:dd:d7:86:93:ba:86:b3:73:64:ec:df:7a:2b:03:01:
cd:55:82:c1:eb:01:9b:b3:dd:e8:54:0e:97:0b:e8:54:d6:6b:
1c:11:75:42:1a:da:e4:36:78:a8:a2:be:bd:e4:50:ad:4a:fb:
ee:c0:b2:4d:94:4a:ee:fa:67:ae:26:50:19:2d:9c:58:76:b4:
a4:29:7a:7c:24:d5:45:e6:2f:fe:a8:ad:d0:72:65:98:8d:18:
ea:ca:cb:58:69:b6:ad:37:28:a8:2f:53:db:03:fe:58:c9:49:
d9:49:bd:50:93:d6:e8:f2:cd:ba:5d:08:a1:3c:12:41:d6:28:
18:f3:2a:f5:87:38:bc:e1:21:23:29:1a:3c:71:a5:9c:e7:80:
06:8c:3b:a7:a6:ab:7b:e6:f1:e8:24:00:97:8c:0f:10:10:f0:
09:6c:cc:eb:21:fe:63:3d:24:57:b0:46:be:c8:dc:33:cc:d1:
c2:b2:4f:76:b8:cd:50:e4:56:32:2e:1a:30:b6:86:d6:94:3f:
2f:12:58:7d:7b:6d:db:61:11:26:c3:71:b8:4d:ad:f6:90:da:
c2:3b:dc:bf:4a:19:32:1f:fa:54:bc:57:00:35:46:38:23:31:
b6:76:67:74:3b:25:da:7b:6c:ae:1b:cd:b8:f3:6f:77:06:3e:
ce:39:af:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 15:53:30 2025 by rpki-client on console.sobornost.net