Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/8J0Lc2AsJQgnkJG9_qri1EHFctE.roa
File: 8J0Lc2AsJQgnkJG9_qri1EHFctE.roa (raw, json)
Hash identifier: C4HlyCH6kbwI3fK9kG+XOoCsicg+/qe888AdIQka/S0=
Subject key identifier: F0:9D:0B:73:60:2C:25:08:27:90:91:BD:FE:AA:E2:D4:41:C5:72:D1
Certificate issuer: /CN=949ff40831ca66f996c76ea466af49476fecd1ff
Certificate serial: 01942368E37EE62155CD5F47A82B11A5CD44
Authority key identifier: 94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/8J0Lc2AsJQgnkJG9_qri1EHFctE.roa
Signing time: Wed 01 Jan 2025 19:47:43 +0000
ROA not before: Wed 01 Jan 2025 19:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35236
IP address blocks: 37.221.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:e3:7e:e6:21:55:cd:5f:47:a8:2b:11:a5:cd:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949ff40831ca66f996c76ea466af49476fecd1ff
Validity
Not Before: Jan 1 19:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f09d0b73602c2508279091bdfeaae2d441c572d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3d:d3:b1:f0:e0:53:08:f8:05:96:c4:03:4c:
76:4f:26:f1:21:c7:c2:8c:c9:d2:25:13:69:86:e1:
04:89:51:02:ca:84:e3:10:43:9b:47:b0:3e:d0:f4:
db:3c:d2:ec:42:47:e7:52:e7:eb:f5:a0:9f:9a:61:
0c:81:b7:83:3f:6c:8e:d9:10:31:a6:7f:e8:7d:6c:
01:63:de:39:8d:a5:85:f3:ca:ad:b3:d8:62:51:a5:
23:c0:79:44:b8:6b:20:70:47:ff:11:80:2e:c6:76:
e2:1f:8e:b9:86:8c:88:27:cf:04:f5:d9:78:56:5b:
32:de:c5:c5:b1:43:07:87:99:6d:3c:8c:af:3b:0a:
4b:4f:cb:d1:de:82:4a:73:36:f7:fe:d7:74:39:72:
da:0a:d5:e2:84:41:5f:5c:e5:24:45:99:ed:5d:bb:
e5:4d:90:71:18:49:11:8d:0c:5a:5d:59:02:cc:88:
35:2e:19:fa:c2:5f:e9:19:4c:9c:79:8e:81:16:3e:
08:60:b0:92:eb:8f:6f:a2:d3:6c:7b:10:2c:64:af:
d2:5e:7f:08:5d:62:f3:91:17:00:8d:5e:ec:f0:55:
b6:91:ba:3d:54:af:1c:d8:28:a7:9f:8a:f5:e2:04:
37:5a:fc:eb:1f:b8:bd:a0:6e:0d:84:90:64:79:2f:
34:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9D:0B:73:60:2C:25:08:27:90:91:BD:FE:AA:E2:D4:41:C5:72:D1
X509v3 Authority Key Identifier:
keyid:94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/8J0Lc2AsJQgnkJG9_qri1EHFctE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.117.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:36:5a:5d:5f:6c:b8:e3:96:2e:19:67:f1:42:9e:16:9e:1c:
44:32:3e:f0:b6:ad:5e:28:09:1a:34:7c:8a:f0:35:85:e9:24:
d2:d9:12:56:2e:34:88:20:de:3b:3e:1b:e8:4c:4a:30:83:ba:
ff:37:f0:cf:0c:e7:6c:45:43:98:c7:af:66:52:69:97:24:a2:
54:ed:89:11:79:fe:17:10:c9:29:21:15:49:e3:ac:35:20:27:
51:5f:d8:28:c2:05:1e:c5:89:1d:84:ac:70:8b:cc:09:3e:64:
24:59:96:f2:c9:16:d9:74:fd:95:6d:4f:c7:66:f5:12:08:5a:
56:f2:a5:22:ac:08:fd:36:7f:86:32:48:49:fd:aa:3d:2c:8c:
7e:67:c3:25:25:32:1c:09:0f:c1:55:e4:76:f6:ee:53:b2:90:
06:01:01:0f:23:45:db:67:3b:47:40:5a:a0:ba:36:f8:92:6a:
17:e6:e8:d5:3c:20:ac:88:4e:1f:65:1b:8f:e7:40:9f:e0:4a:
e0:d1:94:c6:a7:1c:f2:10:a8:c5:b1:51:78:8c:90:46:0e:d7:
4b:51:33:82:a1:96:be:b7:66:e4:98:e8:26:1f:42:89:fc:c2:
31:71:d2:70:eb:7a:ed:a7:bc:3d:36:4d:9d:6a:78:8b:4f:93:
51:03:09:91
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjaON+5iFVzV9HqCsRpc1EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OWZmNDA4MzFjYTY2Zjk5NmM3NmVhNDY2YWY0OTQ3NmZl
Y2QxZmYwHhcNMjUwMTAxMTk0NzQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDlkMGI3MzYwMmMyNTA4Mjc5MDkxYmRmZWFhZTJkNDQxYzU3MmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD3TsfDgUwj4BZbEA0x2TybxIcfC
jMnSJRNphuEEiVECyoTjEEObR7A+0PTbPNLsQkfnUufr9aCfmmEMgbeDP2yO2RAx
pn/ofWwBY945jaWF88qts9hiUaUjwHlEuGsgcEf/EYAuxnbiH465hoyIJ88E9dl4
Vlsy3sXFsUMHh5ltPIyvOwpLT8vR3oJKczb3/td0OXLaCtXihEFfXOUkRZntXbvl
TZBxGEkRjQxaXVkCzIg1Lhn6wl/pGUyceY6BFj4IYLCS649votNsexAsZK/SXn8I
XWLzkRcAjV7s8FW2kbo9VK8c2Cinn4r14gQ3WvzrH7i9oG4NhJBkeS80TwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPCdC3NgLCUIJ5CRvf6q4tRBxXLRMB8GA1UdIwQY
MBaAFJSf9Agxymb5lsdupGavSUdv7NH/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEpfMENESEtadm1XeDI2a1pxOUpSMl9zMGY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81NWQxMGQtYjQ0OC00YjQ3LWJhNTgt
MTQ3YWRjOTBjYTBmLzEvOEowTGMyQXNKUWdua0pHOV9xcmkxRUhGY3RFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS81NWQxMGQtYjQ0OC00YjQ3LWJhNTgtMTQ3YWRjOTBjYTBm
LzEvbEpfMENESEtadm1XeDI2a1pxOUpSMl9zMGY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJd11MA0G
CSqGSIb3DQEBCwUAA4IBAQCwNlpdX2y445YuGWfxQp4WnhxEMj7wtq1eKAkaNHyK
8DWF6STS2RJWLjSIIN47PhvoTEowg7r/N/DPDOdsRUOYx69mUmmXJKJU7YkRef4X
EMkpIRVJ46w1ICdRX9gowgUexYkdhKxwi8wJPmQkWZbyyRbZdP2VbU/HZvUSCFpW
8qUirAj9Nn+GMkhJ/ao9LIx+Z8MlJTIcCQ/BVeR29u5TspAGAQEPI0XbZztHQFqg
ujb4kmoX5ujVPCCsiE4fZRuP50Cf4Erg0ZTGpxzyEKjFsVF4jJBGDtdLUTOCoZa+
t2bkmOgmH0KJ/MIxcdJw63rtp7w9Nk2daniLT5NRAwmR
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:56 2025 by rpki-client on console.sobornost.net