Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/02GOfZbMNICRgOj9G0mIGs2I4vI.roa
File: 02GOfZbMNICRgOj9G0mIGs2I4vI.roa (raw, json)
Hash identifier: 7F9bn3m0UkAUH0crYUw2LxUKO5iFZMnEUQvddNdyyzY=
Subject key identifier: D3:61:8E:7D:96:CC:34:80:91:80:E8:FD:1B:49:88:1A:CD:88:E2:F2
Certificate issuer: /CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
Certificate serial: 019423D7F32189C79BAA4C6030A38D3C1E4F
Authority key identifier: 61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/02GOfZbMNICRgOj9G0mIGs2I4vI.roa
Signing time: Wed 01 Jan 2025 21:49:02 +0000
ROA not before: Wed 01 Jan 2025 21:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216335
IP address blocks: 37.157.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:f3:21:89:c7:9b:aa:4c:60:30:a3:8d:3c:1e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
Validity
Not Before: Jan 1 21:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3618e7d96cc34809180e8fd1b49881acd88e2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c3:d3:6e:0a:9c:1a:27:95:89:51:d1:d3:fd:
98:78:77:ba:6e:cc:7f:55:17:fe:25:2d:3a:e2:df:
31:cc:5f:fe:63:24:81:7e:41:2b:a3:92:b4:3e:12:
e9:a3:b7:0b:f1:6f:ed:32:44:5c:57:0c:f1:4c:ea:
1d:cb:9d:3b:cf:8f:d2:8b:be:b5:07:3f:8e:e5:d5:
d0:50:1c:04:a8:ab:53:2e:27:84:cf:44:4a:9a:42:
3f:e0:29:a6:86:9d:09:a7:54:ec:96:ec:34:00:18:
bc:9e:5f:5c:cd:08:cb:41:06:1e:4c:b1:ab:d1:f0:
6d:6a:41:b6:e3:54:84:2d:86:4a:72:bf:83:ec:27:
aa:d3:26:4d:e6:5c:c5:f6:b0:55:7d:54:90:72:e8:
76:c3:61:b3:83:e5:1d:59:58:f1:ba:6d:8c:1c:a1:
ae:cd:96:c8:70:59:0c:6e:ed:bc:7d:03:f2:3e:8c:
59:18:85:5a:f1:ed:29:5a:c0:03:35:e5:64:f2:28:
88:28:d4:3e:7c:f6:49:0c:01:23:d7:db:3a:20:62:
2c:30:87:41:07:7e:91:9d:ae:5b:1b:b4:81:9e:3c:
18:74:71:88:98:aa:1a:60:41:77:47:08:73:86:69:
f7:e1:85:0e:18:d0:c6:de:dc:c2:99:ad:16:ac:b4:
58:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:61:8E:7D:96:CC:34:80:91:80:E8:FD:1B:49:88:1A:CD:88:E2:F2
X509v3 Authority Key Identifier:
keyid:61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/02GOfZbMNICRgOj9G0mIGs2I4vI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.31.0/24
Signature Algorithm: sha256WithRSAEncryption
29:8c:2d:ac:f8:f9:db:76:90:e9:10:4e:a2:91:eb:0d:1d:cd:
cf:83:51:dc:ac:36:86:83:46:d8:e9:66:ba:11:d9:19:c9:7b:
8d:be:95:46:48:74:ae:08:76:43:2f:e6:10:ce:88:e9:e9:f4:
62:eb:d9:b3:40:74:ac:75:64:4f:6e:7c:77:ce:9e:0e:39:fd:
a6:0a:b2:b8:bb:33:6e:87:13:28:e0:13:f8:cf:c3:bb:e5:0d:
0c:7d:4e:88:db:2f:3c:90:90:fa:24:2c:51:43:08:a4:3f:52:
4e:07:2e:42:01:06:79:d1:f9:82:01:77:f8:f1:d6:7d:2c:8a:
e2:4a:52:e9:37:31:e6:69:82:eb:f5:00:d5:2b:9a:35:9e:22:
5e:6a:db:29:80:21:fc:59:d7:44:83:00:3d:69:64:7d:d8:d1:
05:bb:80:e2:4d:78:47:be:f3:02:15:0e:cd:45:52:69:43:ee:
0a:09:97:ae:e0:9a:98:77:92:20:ac:ea:fa:62:cf:ef:a4:04:
c1:98:7b:76:7f:04:1e:01:90:65:e3:d2:a8:a0:e7:f5:da:76:
1b:c4:88:51:04:51:ce:d2:cb:8a:9e:08:fe:dc:12:36:d5:52:
ea:d4:ae:7b:0e:3c:dc:10:ec:1a:1b:82:12:cc:e4:4d:5b:c5:
80:77:72:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:40 2025 by rpki-client on console.sobornost.net