Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/xJHtgm2-OFN9JdMVf8BciDO1B5c.roa
File: xJHtgm2-OFN9JdMVf8BciDO1B5c.roa (raw, json)
Hash identifier: teyWoGjs54a3oOIvqgD/eJbTWRioFr7aS8TrGk8QxPM=
Subject key identifier: C4:91:ED:82:6D:BE:38:53:7D:25:D3:15:7F:C0:5C:88:33:B5:07:97
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 01958500F299C6098F0E9DD194149E79DE2C
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/xJHtgm2-OFN9JdMVf8BciDO1B5c.roa
Signing time: Tue 11 Mar 2025 11:39:46 +0000
ROA not before: Tue 11 Mar 2025 11:39:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56486
IP address blocks: 37.202.243.0/24 maxlen: 24
94.182.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:85:00:f2:99:c6:09:8f:0e:9d:d1:94:14:9e:79:de:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Mar 11 11:39:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c491ed826dbe38537d25d3157fc05c8833b50797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2f:9e:e7:e5:69:8b:43:41:0e:47:7c:6f:6e:
52:38:a2:0a:dc:2f:4f:98:b4:a4:fa:53:fa:32:8b:
6d:23:ec:db:32:d3:1b:f6:9f:88:37:95:b4:ac:0a:
8e:c8:38:91:a0:5e:d2:87:11:a8:81:52:b8:03:d9:
e9:a6:c3:08:df:61:ec:5a:78:62:23:de:d1:ae:3c:
bc:cf:c3:d2:76:c0:45:ab:a1:7f:01:e0:62:79:df:
2a:54:bc:c3:bf:19:94:7e:9b:30:44:40:02:88:21:
17:f8:0f:e5:08:4c:3b:b4:4b:f8:26:c9:69:8b:6d:
30:b4:38:38:65:87:d3:8c:98:6a:e1:39:f8:8f:e6:
10:9a:71:1e:6f:81:3e:b5:73:a5:08:4a:93:08:9e:
e1:dd:9b:4a:75:7a:03:fe:e4:d8:52:1f:7f:48:68:
ff:2f:f0:77:d9:53:e4:fc:52:1d:53:aa:eb:31:e4:
6a:78:ac:26:77:da:1d:33:59:38:76:c8:b8:cd:8f:
f6:f7:ff:41:f8:4b:0d:6f:ef:e7:74:cb:65:48:1c:
1b:21:5f:89:33:e0:f5:03:ef:3b:35:d5:7b:16:62:
29:07:2b:f8:0b:f4:02:a8:90:0d:5f:e2:cb:a2:ef:
89:d5:4f:b2:93:77:af:5e:74:8a:d1:63:6a:8b:d3:
b1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:91:ED:82:6D:BE:38:53:7D:25:D3:15:7F:C0:5C:88:33:B5:07:97
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/xJHtgm2-OFN9JdMVf8BciDO1B5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.243.0/24
94.182.30.0/24
Signature Algorithm: sha256WithRSAEncryption
12:d3:c1:97:2e:65:a5:b6:e0:8e:30:c6:57:c3:37:c1:f1:2a:
0e:a9:d9:eb:6f:fb:08:09:92:c0:28:f3:f0:be:46:e5:0a:76:
9f:94:bd:ea:11:ec:cc:91:c7:a2:c9:68:29:80:4a:22:a4:66:
3c:b6:f3:5a:bd:34:c7:26:ac:34:f6:48:9a:52:7a:d3:3d:e4:
ac:e0:db:1e:a0:6a:68:f1:47:d7:f0:78:7e:ac:a3:a0:f7:03:
6d:97:c0:47:88:90:9a:32:05:51:27:86:63:1c:ba:2c:80:9d:
b3:32:5f:3a:fe:e8:fc:68:77:9d:28:87:4b:07:1c:6f:e5:61:
d8:05:41:56:a4:f5:a6:fc:3f:f6:8d:bc:04:d0:82:5a:04:8c:
16:fc:45:a1:55:ee:ea:38:a3:f3:60:d5:d1:49:1b:5a:9b:48:
d9:e4:2d:f7:9e:31:1b:6a:3b:c1:3f:8d:2a:d5:5b:2b:43:b9:
86:cc:cb:47:62:fc:fc:82:02:2a:2b:81:f3:d8:be:a8:f0:6c:
35:ed:97:53:5d:41:5d:ee:8b:d6:c2:f1:ef:e7:ac:7a:85:2c:
30:4b:e6:d7:da:4a:21:76:f1:11:af:38:af:25:ae:de:a8:78:
d7:85:59:a7:8f:f6:0c:23:3f:bd:3a:dd:ac:67:bb:32:89:ef:
3a:02:5e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:55 2025 by rpki-client on console.sobornost.net