Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/yK6ssOWoPDeYE0W6ZxzPJC0rBHw.roa
File: yK6ssOWoPDeYE0W6ZxzPJC0rBHw.roa (raw, json)
Hash identifier: 52vkWSu+Xe46mKEs+O2A4dE8J3gg0EoPs6Jdnm/NCrA=
Subject key identifier: C8:AE:AC:B0:E5:A8:3C:37:98:13:45:BA:67:1C:CF:24:2D:2B:04:7C
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 01945FA3B3E86EFC8E5081471A5A38B5EADC
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/yK6ssOWoPDeYE0W6ZxzPJC0rBHw.roa
Signing time: Mon 13 Jan 2025 12:29:11 +0000
ROA not before: Mon 13 Jan 2025 12:29:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56486
IP address blocks: 37.202.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5f:a3:b3:e8:6e:fc:8e:50:81:47:1a:5a:38:b5:ea:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jan 13 12:29:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8aeacb0e5a83c37981345ba671ccf242d2b047c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:22:b9:40:66:43:91:e7:49:a3:f6:9a:a2:16:
f0:3a:8a:bf:93:87:a3:7c:84:80:7b:77:2d:7b:b2:
73:21:4c:2d:38:c7:ff:c1:4b:e5:18:d3:eb:2a:65:
43:5c:3d:3e:52:0f:ac:bc:b4:fa:a2:47:17:5c:d8:
c2:b9:d1:59:dd:de:e6:3d:b9:31:d2:d7:0d:c1:18:
0d:7d:84:f6:bc:de:cc:d1:75:c1:b1:09:d7:b1:bc:
10:b3:f6:61:79:65:9d:0b:58:a5:92:67:80:35:ef:
7a:f3:89:4e:8b:66:0d:3d:b8:41:09:1f:90:b5:55:
3a:d7:70:c9:d0:19:89:91:a4:ac:1c:d6:57:3a:7b:
fc:2b:e9:2f:9a:1a:a5:e4:96:f1:7d:b7:67:41:c3:
3f:17:ae:37:03:18:a6:7f:21:df:18:ec:12:5a:31:
e1:5b:0f:e4:d0:df:ce:60:6c:c3:0c:f6:ff:10:7e:
52:af:e3:20:f1:53:0e:a9:07:dd:0c:62:70:b2:90:
7e:db:a8:b9:6f:df:04:b0:6f:f3:d5:da:b9:31:86:
5b:e4:84:e6:32:22:09:f2:3b:98:27:96:b2:0f:40:
7d:e2:6f:dc:f1:22:d2:47:96:0b:a3:be:8a:6c:c1:
3d:e3:95:ae:6a:a3:e4:eb:a5:5d:26:e3:b0:32:b1:
06:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AE:AC:B0:E5:A8:3C:37:98:13:45:BA:67:1C:CF:24:2D:2B:04:7C
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/yK6ssOWoPDeYE0W6ZxzPJC0rBHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.243.0/24
Signature Algorithm: sha256WithRSAEncryption
61:53:cb:85:37:07:d3:22:18:c8:33:ec:72:63:0f:e3:94:4c:
f0:5c:25:63:59:44:85:8f:7d:29:17:2d:8b:6d:9e:01:30:19:
91:c0:37:0e:4b:7d:39:a6:ad:10:67:be:25:ed:7c:7b:f4:71:
a8:db:62:b3:ff:10:bd:1d:82:fa:09:39:3a:89:7a:ba:d6:c7:
f4:8d:64:69:e3:8c:41:77:ae:72:24:77:05:d8:97:3c:9d:f3:
fa:59:a6:ba:65:ce:9a:42:26:b0:05:42:c1:a4:bf:d4:5d:19:
b6:00:8f:28:31:d6:fe:c4:d6:a5:62:6b:85:55:9e:88:46:f4:
da:b6:cb:10:0a:9e:23:68:67:ac:dc:ad:25:e3:36:cd:29:17:
b9:42:92:bd:5e:7c:6c:e1:e4:5c:fc:a3:7c:c0:17:7b:d3:f3:
7c:82:83:5f:ac:8d:a5:d2:78:aa:ef:d5:20:38:55:0f:d5:c3:
37:1f:ee:b9:ac:8e:8a:e9:ba:d3:10:f2:2f:97:95:ce:8c:aa:
af:f5:2c:38:0e:e1:1e:8a:eb:3f:13:43:4f:66:48:f4:93:b1:
e5:ad:23:32:1d:e3:d4:bc:69:a2:90:e1:e6:49:0e:52:91:03:
94:05:66:63:7e:66:fa:a1:29:c3:66:f2:06:a7:f5:94:08:ea:
58:6b:72:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:50:24 2025 by rpki-client on console.sobornost.net