Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/1-F-lRo8Hv4MMErxkMI8nf-QWOn0.roa
File: 1-F-lRo8Hv4MMErxkMI8nf-QWOn0.roa (raw, json)
Hash identifier: 7Ak7QRZESqRwXP4kX1/tNAiv86us+4hOvNSyL+b0r48=
Subject key identifier: F8:5F:A5:46:8F:07:BF:83:0C:12:BC:64:30:8F:27:7F:E4:16:3A:7D
Certificate issuer: /CN=ba31bcf923c5f25cafbdabdfdd46e511f95df0d1
Certificate serial: 01956BBFFFD5F51982177F86E5FC8A4C69D8
Authority key identifier: BA:31:BC:F9:23:C5:F2:5C:AF:BD:AB:DF:DD:46:E5:11:F9:5D:F0:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/1-F-lRo8Hv4MMErxkMI8nf-QWOn0.roa
Signing time: Thu 06 Mar 2025 13:58:19 +0000
ROA not before: Thu 06 Mar 2025 13:58:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2026
IP address blocks: 37.35.81.0/24 maxlen: 24
37.35.82.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6b:bf:ff:d5:f5:19:82:17:7f:86:e5:fc:8a:4c:69:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba31bcf923c5f25cafbdabdfdd46e511f95df0d1
Validity
Not Before: Mar 6 13:58:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f85fa5468f07bf830c12bc64308f277fe4163a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:be:55:c1:5d:f0:83:6d:8d:dd:00:cf:43:1c:
7e:78:33:56:d6:04:cd:6e:35:5d:9a:bb:8a:3f:e6:
5e:5d:04:5c:75:e7:d0:62:4e:73:ae:a2:d1:fa:d1:
f8:15:64:1c:b0:71:4e:cf:81:0c:84:5c:3f:07:5f:
ac:d8:3a:77:46:a0:43:18:67:4d:e9:12:de:e4:7b:
a9:1b:fa:a8:05:f1:15:4a:c9:de:46:82:72:90:fb:
34:3c:c8:5b:b1:d9:d8:21:76:3d:a1:9f:7d:88:f5:
54:7e:09:0e:f6:60:96:12:e1:3c:eb:90:78:1e:62:
94:cd:c3:47:aa:b1:b1:0d:5d:2b:b1:e4:ca:88:ee:
13:a6:98:cf:57:02:d6:3c:ec:a7:f5:9c:de:44:32:
17:d4:4f:99:f1:af:b3:d9:05:1f:ed:61:ce:f4:86:
36:69:77:e2:70:23:ce:f8:9d:1a:38:a9:25:ca:74:
68:64:f9:89:87:2a:67:dd:43:b7:47:86:41:28:0d:
8b:fb:79:c0:ee:f2:7a:79:14:b5:a0:4a:fc:df:57:
df:71:35:16:19:fb:b0:c5:44:47:fc:df:5b:84:a8:
aa:62:54:96:da:1d:ac:d4:66:dc:35:22:b2:20:34:
d9:ba:6b:97:1d:1c:e8:11:6b:d4:42:8f:0a:b8:a9:
8f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:5F:A5:46:8F:07:BF:83:0C:12:BC:64:30:8F:27:7F:E4:16:3A:7D
X509v3 Authority Key Identifier:
keyid:BA:31:BC:F9:23:C5:F2:5C:AF:BD:AB:DF:DD:46:E5:11:F9:5D:F0:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/1-F-lRo8Hv4MMErxkMI8nf-QWOn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.35.81.0-37.35.83.255
Signature Algorithm: sha256WithRSAEncryption
7e:df:ad:1d:76:a2:72:ad:d5:e5:c9:91:21:cc:71:d8:01:0c:
c2:a9:06:3d:ec:8c:ca:21:7c:d0:10:da:6a:d0:2d:73:27:81:
f7:b4:1b:8d:78:db:54:86:62:46:99:b4:86:8d:4b:3c:96:03:
91:cb:57:59:55:a4:17:65:f9:03:64:63:5f:93:80:2b:7e:99:
c9:9e:0f:fe:58:87:b3:36:86:05:95:6c:1d:f5:fa:fd:0b:65:
f5:43:bf:ae:c0:4b:04:44:ac:bc:82:a3:e8:63:b2:0e:04:f3:
32:9c:33:e9:e4:b7:57:5a:41:88:63:68:46:43:8e:12:fb:39:
9c:10:22:bb:cb:b1:19:31:ec:99:3e:af:3f:a2:d8:ed:06:4d:
2b:29:05:1f:e1:9d:12:fa:a0:e7:9a:9a:99:0f:da:9e:ab:86:
e7:2e:e2:be:64:73:f9:4e:f5:0c:45:6b:8d:0d:5b:4e:f8:ff:
c4:5e:39:a1:da:54:94:ea:b1:9f:d4:95:e2:12:4d:95:9c:f3:
44:95:28:4f:48:f0:ef:e8:b7:3e:ce:ef:b4:52:a8:24:d6:70:
aa:63:29:fe:00:d9:a4:27:49:d8:6c:6e:3e:2c:63:a5:5a:d9:
a1:58:12:ce:5c:d1:a7:02:86:f5:5f:a9:ce:d9:0a:14:4f:d5:
59:60:fd:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:55 2025 by rpki-client on console.sobornost.net