Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/ILDoOGOY49o8UbI2Weh06Xvkb2I.roa
File: ILDoOGOY49o8UbI2Weh06Xvkb2I.roa (raw, json)
Hash identifier: hd/dteByEzb6JQPv2AJwyiuhwN7fmV2mzKWytrryG6s=
Subject key identifier: 20:B0:E8:38:63:98:E3:DA:3C:51:B2:36:59:E8:74:E9:7B:E4:6F:62
Certificate issuer: /CN=f25fd47d836fca6f741caa3823937f4bb1f1b294
Certificate serial: 01942445087BD784A79303AB2726957678F2
Authority key identifier: F2:5F:D4:7D:83:6F:CA:6F:74:1C:AA:38:23:93:7F:4B:B1:F1:B2:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8l_UfYNvym90HKo4I5N_S7HxspQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/ILDoOGOY49o8UbI2Weh06Xvkb2I.roa
Signing time: Wed 01 Jan 2025 23:48:11 +0000
ROA not before: Wed 01 Jan 2025 23:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31027
IP address blocks: 37.25.64.0/21 maxlen: 21
37.25.64.0/23 maxlen: 23
37.25.66.0/23 maxlen: 23
37.25.68.0/22 maxlen: 22
185.29.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:08:7b:d7:84:a7:93:03:ab:27:26:95:76:78:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25fd47d836fca6f741caa3823937f4bb1f1b294
Validity
Not Before: Jan 1 23:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20b0e8386398e3da3c51b23659e874e97be46f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d7:1c:57:94:8c:c0:dc:b7:ac:63:64:82:ec:
4b:71:0d:6c:b3:96:13:af:9a:ab:1c:eb:b1:2a:bd:
39:79:ce:a2:e7:a2:cb:27:77:25:3e:79:08:19:af:
ae:e8:06:ef:d1:e8:cd:90:72:0d:ea:b2:4b:36:d1:
93:30:b3:45:5c:c7:a9:a1:2a:76:33:09:11:db:c8:
57:92:9a:05:40:47:95:d3:7a:b0:2b:7c:fc:9c:d7:
08:92:a7:95:2a:96:61:50:b9:36:3a:e2:0f:d2:ce:
77:20:e0:35:3b:b4:9e:1f:c5:ae:52:0a:60:f3:d3:
32:20:55:b1:71:46:c2:5e:c2:d7:d8:4d:e2:7b:c9:
2d:c9:ee:83:1e:d2:61:01:a9:29:a2:64:4b:59:f3:
39:fd:b1:a5:2a:6f:b6:4d:df:6e:e9:22:37:51:03:
df:e8:0d:7b:09:2a:e1:34:1e:55:1e:e2:2a:9d:5f:
11:b3:7e:7e:d0:0f:75:cf:35:46:f2:62:90:e2:80:
63:3e:cc:3c:30:7b:a8:e3:4d:f3:27:3a:84:3a:66:
77:e2:5c:cc:c6:76:85:e1:97:0c:f1:e4:11:74:56:
0d:4c:5d:6b:1d:8c:8b:e2:d2:4c:ac:c7:ed:ff:3b:
68:57:82:c2:f4:ef:8d:2b:a4:33:d7:21:43:9a:e0:
ad:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B0:E8:38:63:98:E3:DA:3C:51:B2:36:59:E8:74:E9:7B:E4:6F:62
X509v3 Authority Key Identifier:
keyid:F2:5F:D4:7D:83:6F:CA:6F:74:1C:AA:38:23:93:7F:4B:B1:F1:B2:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8l_UfYNvym90HKo4I5N_S7HxspQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/ILDoOGOY49o8UbI2Weh06Xvkb2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.25.64.0/21
185.29.168.0/22
Signature Algorithm: sha256WithRSAEncryption
17:2a:b1:68:ad:9f:74:4d:d0:6a:ee:bf:02:53:c1:6e:9f:16:
38:a0:9f:b7:d8:bf:d3:d4:78:4f:f4:9c:e3:76:2c:fb:d3:eb:
ac:5c:11:fb:f6:a5:cc:65:9a:d5:6b:35:5e:78:b6:f6:50:7b:
3b:16:27:9d:93:8c:ee:f0:5d:0c:8f:07:43:f0:ad:b9:81:ee:
fe:62:b1:fd:22:5b:67:b2:2d:5c:f6:fa:37:1e:04:f0:00:46:
3a:bc:fc:69:7f:0e:b4:34:f9:2c:5b:3e:fa:ac:dd:66:af:66:
9b:7d:1c:5d:18:41:b4:c2:6b:de:68:00:5d:6d:fe:ff:ba:b2:
11:1b:cd:0b:43:9d:d4:c6:83:e3:c1:52:84:bb:02:98:af:8b:
b4:84:54:f9:4f:4f:5c:7c:da:6f:c7:19:cc:57:c5:62:8f:56:
b5:39:e4:77:d7:ad:bb:79:df:9e:4f:06:33:d2:3c:55:9e:69:
ca:ae:35:c0:ed:35:f5:49:c0:46:5f:36:09:68:31:2b:78:48:
47:a2:ac:b7:b3:ca:68:c2:05:be:90:0c:f0:d2:b4:a3:e1:04:
a1:c8:8e:f1:4a:5a:12:d1:2f:3f:c3:25:da:01:12:83:4a:1d:
c7:05:6e:9c:46:ea:fd:c0:f8:27:be:ca:80:ce:74:e9:7f:ca:
ca:88:35:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 15:59:54 2025 by rpki-client on console.sobornost.net