Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/wTbdYlsUFkp3d9dHZust_Lw_6AQ.roa
File: wTbdYlsUFkp3d9dHZust_Lw_6AQ.roa (raw, json)
Hash identifier: OT9PLyVKPfe5qaWoveQ3/agGSLh/5l0V3Q2WNMZnLKQ=
Subject key identifier: C1:36:DD:62:5B:14:16:4A:77:77:D7:47:66:EB:2D:FC:BC:3F:E8:04
Certificate issuer: /CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
Certificate serial: 0194214432FA521E68C9ED5F661A23684B5A
Authority key identifier: 29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/wTbdYlsUFkp3d9dHZust_Lw_6AQ.roa
Signing time: Wed 01 Jan 2025 09:48:25 +0000
ROA not before: Wed 01 Jan 2025 09:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25180
IP address blocks: 37.17.184.0/24 maxlen: 24
37.17.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:32:fa:52:1e:68:c9:ed:5f:66:1a:23:68:4b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
Validity
Not Before: Jan 1 09:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c136dd625b14164a7777d74766eb2dfcbc3fe804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c3:e5:c2:e3:b6:42:d6:13:a6:5c:e4:a4:a3:
fb:c4:5e:83:12:1e:86:5d:bf:54:8c:bb:6a:e4:d9:
89:2f:76:04:53:a4:3f:d1:3e:99:8a:56:83:fa:8a:
34:3c:b7:e7:82:7b:ff:aa:61:8d:05:ca:ea:5f:56:
e7:48:d0:43:7b:ca:ff:b8:03:39:f9:62:eb:c8:99:
af:6a:50:fb:c6:26:81:fe:47:50:2f:66:a8:09:f5:
be:6e:e1:c0:eb:51:b0:a6:ea:0b:a7:ac:33:f9:24:
c5:d7:24:39:f3:22:0e:b0:af:ea:4f:63:7c:17:b9:
ac:e2:d6:31:3d:e8:1b:33:fe:9f:f9:f2:51:79:40:
63:20:a6:b8:45:33:f5:e2:96:34:15:db:a3:d8:1b:
95:92:98:95:cb:4c:97:78:1a:5d:2f:12:18:07:ef:
9e:cd:67:60:9a:e6:85:6e:b2:3b:be:0e:d6:7f:37:
d1:3d:d5:ab:23:2e:ed:a7:90:45:ba:21:99:9e:b3:
c4:32:9a:67:fb:79:74:a7:a1:6d:47:81:8f:38:9a:
a2:53:96:dc:33:44:f4:0d:30:ac:cf:f2:83:a1:41:
2f:36:d2:fb:f0:20:1b:47:36:67:04:8f:94:b6:fc:
40:74:6c:03:ff:a9:56:d7:06:ca:55:71:2a:e5:45:
c7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:36:DD:62:5B:14:16:4A:77:77:D7:47:66:EB:2D:FC:BC:3F:E8:04
X509v3 Authority Key Identifier:
keyid:29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/wTbdYlsUFkp3d9dHZust_Lw_6AQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.17.184.0/24
37.17.187.0/24
Signature Algorithm: sha256WithRSAEncryption
e1:45:0a:0c:43:15:b1:59:c7:b2:e3:a6:7f:21:a9:8b:82:ca:
c5:8f:58:2f:66:a2:d6:82:0f:5d:a0:a4:6a:a8:a5:fd:b9:80:
36:86:c3:fb:a0:c5:31:77:d0:95:e2:7f:ab:8f:ae:a8:2b:ad:
f3:7a:f1:bf:9b:2b:62:3c:0d:39:c4:14:1e:e2:7a:6b:5c:3e:
97:43:9d:e7:53:13:9c:7e:e0:e0:01:20:14:9b:f4:aa:8e:09:
27:84:6e:eb:31:a9:c9:ec:2e:1e:a2:a5:1a:0f:27:20:9c:f8:
e0:03:42:ae:e7:f5:5b:ba:5c:09:a3:d9:bb:88:91:fa:a3:fe:
d3:19:19:d5:d1:bb:cd:c4:e1:3a:d8:5a:5f:17:78:ee:b2:37:
ef:c1:49:ed:97:d3:7d:0f:fc:aa:57:e9:df:0b:b6:dd:81:d4:
11:1d:ff:c8:f0:e3:ad:4d:66:57:70:69:2a:8e:98:6b:39:d1:
b0:9e:8d:cd:fd:57:a2:db:f0:4d:89:70:a1:af:48:c2:3e:ab:
14:cf:8e:15:0a:b8:15:a9:04:9d:13:8b:46:44:d6:9a:43:5d:
ee:7c:51:ae:21:72:be:7f:47:50:09:c6:6e:1b:a4:9e:76:a6:
05:11:fb:b2:b9:2a:f9:b5:b0:03:b4:d5:5a:d8:77:ca:8b:9a:
89:23:65:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:51 2025 by rpki-client on console.sobornost.net