Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/VjZoO_XNq9TUDzr2kG4vDwWvbaU.roa
File: VjZoO_XNq9TUDzr2kG4vDwWvbaU.roa (raw, json)
Hash identifier: vk9V2bJryTt5ur720els5LdMqipJhY5ilAwFIvaJkBg=
Subject key identifier: 56:36:68:3B:F5:CD:AB:D4:D4:0F:3A:F6:90:6E:2F:0F:05:AF:6D:A5
Certificate issuer: /CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
Certificate serial: 01941FFAB3D51C1A3040730F07AD7CFB6D61
Authority key identifier: 90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/VjZoO_XNq9TUDzr2kG4vDwWvbaU.roa
Signing time: Wed 01 Jan 2025 03:48:31 +0000
ROA not before: Wed 01 Jan 2025 03:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15874
IP address blocks: 37.130.0.0/18 maxlen: 24
46.174.232.0/21 maxlen: 24
185.237.56.0/22 maxlen: 24
2a0c:1680::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b3:d5:1c:1a:30:40:73:0f:07:ad:7c:fb:6d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
Validity
Not Before: Jan 1 03:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5636683bf5cdabd4d40f3af6906e2f0f05af6da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b1:57:1c:15:9d:93:75:ed:ac:49:a6:96:8a:
45:f6:12:67:29:ce:7c:18:2e:12:05:90:69:ef:b7:
0b:7d:02:a6:29:2d:30:08:f4:83:c4:52:64:41:24:
dc:2b:75:1b:cf:d6:ec:b5:f3:3c:36:8e:e9:19:38:
18:8b:f8:d4:b9:9b:d4:fb:aa:05:77:27:79:13:06:
43:fd:94:7b:9f:5c:5a:bb:02:6c:e6:44:fb:8e:d2:
25:78:ac:0b:b3:11:26:d3:4d:bb:4b:32:5c:b1:8b:
53:e1:ff:f0:4b:eb:ad:91:c6:3e:8c:1c:87:5e:e4:
67:38:cf:d1:01:fb:0c:e7:c0:13:f4:1f:e9:cc:a6:
0d:56:e2:d2:d6:21:fa:48:0b:2d:08:c5:a2:a5:7a:
54:3e:25:99:ff:f1:27:d3:87:55:7b:c6:73:35:c4:
f3:46:ca:c7:e9:41:3a:da:c3:98:7f:85:00:69:34:
b0:f2:86:60:e6:22:93:7b:05:0d:e3:bb:f3:56:47:
4f:bf:4f:f9:83:5a:9a:07:2a:33:0d:67:f7:9a:bb:
14:b7:61:9b:f9:24:0b:ff:ee:dd:a3:55:15:9e:54:
22:06:8a:f3:7f:2d:89:5c:38:0b:52:ed:be:0e:78:
6c:00:7a:d8:d0:e7:ef:91:dc:a6:92:1a:7d:76:c6:
c4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:36:68:3B:F5:CD:AB:D4:D4:0F:3A:F6:90:6E:2F:0F:05:AF:6D:A5
X509v3 Authority Key Identifier:
keyid:90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/VjZoO_XNq9TUDzr2kG4vDwWvbaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.130.0.0/18
46.174.232.0/21
185.237.56.0/22
IPv6:
2a0c:1680::/29
Signature Algorithm: sha256WithRSAEncryption
0c:82:67:1a:c9:5c:68:3c:6e:09:31:78:06:96:a3:98:9f:8f:
cc:6d:b7:d3:ef:01:1b:eb:6e:2b:93:e6:aa:8e:79:3c:b6:3f:
1b:d9:a9:6c:11:47:04:43:72:de:d0:00:f7:f1:bb:af:18:8f:
d9:c6:55:38:59:f3:d1:f2:e0:03:35:77:53:c2:59:d7:2f:fe:
bd:b0:c1:cf:fc:d8:41:8e:10:5c:03:fa:b5:26:7c:8c:35:f3:
31:3e:e8:6c:e3:de:0f:bc:d9:5a:85:bf:5b:cb:ed:b1:83:fa:
06:83:60:75:6d:ed:7c:6f:63:6a:ec:d3:e9:d4:aa:a0:f1:f1:
00:85:0d:69:ac:22:17:8f:27:94:4e:a4:b5:ff:5b:97:25:f3:
ce:7f:1e:48:0b:17:16:21:82:65:0d:15:ca:36:de:65:63:b7:
27:c7:c0:1c:c2:39:05:c9:93:36:7c:36:ef:08:45:64:a2:67:
bb:77:36:50:8d:6f:b2:8c:dc:f0:82:1c:8c:ee:17:4f:df:92:
74:74:e1:79:88:ab:83:5f:e1:e9:c7:18:0e:41:a1:c4:62:97:
92:45:58:bc:6e:86:16:ee:66:9d:96:c9:8f:63:90:ae:c8:28:
93:4b:a9:ad:76:4f:9d:af:d3:99:a7:01:6a:e5:11:8c:fa:bd:
c6:8a:d5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:13 2025 by rpki-client on console.sobornost.net