Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/N_7uA0VYRqBlWqavGC9dzkbRrsE.roa
File: N_7uA0VYRqBlWqavGC9dzkbRrsE.roa (raw, json)
Hash identifier: vTWq+Ko2tcDNTw1aBqnRMKaLxiFB+kunmlZt4zJbvFM=
Subject key identifier: 37:FE:EE:03:45:58:46:A0:65:5A:A6:AF:18:2F:5D:CE:46:D1:AE:C1
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01961B6AE45BF3F84860C1DF3C23F68DF0AF
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/N_7uA0VYRqBlWqavGC9dzkbRrsE.roa
Signing time: Wed 09 Apr 2025 16:38:32 +0000
ROA not before: Wed 09 Apr 2025 16:38:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210734
IP address blocks: 82.153.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1b:6a:e4:5b:f3:f8:48:60:c1:df:3c:23:f6:8d:f0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 9 16:38:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37feee03455846a0655aa6af182f5dce46d1aec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9a:27:88:91:4f:4a:ae:4d:6a:f7:d9:db:90:
8e:4f:58:f2:90:f1:18:12:66:99:66:d8:e3:fe:fa:
0f:0f:0c:80:61:49:6a:35:05:ca:07:57:a8:49:ef:
6c:27:51:c9:63:be:e1:70:a5:a0:d3:0b:16:b7:91:
65:0f:13:dd:88:96:3b:87:8d:08:94:d1:64:14:7e:
ed:2c:6f:1d:d0:da:b1:09:da:c5:34:59:8a:e9:7b:
3f:28:4f:36:9a:79:92:51:0e:c2:fb:82:fa:21:ae:
09:1e:03:65:28:cd:ef:15:de:cc:57:f2:44:fb:a4:
d2:77:b6:cd:69:3c:1c:cb:a7:be:36:ec:12:75:d4:
9e:3e:e0:07:ce:f7:e9:0b:0f:c6:39:9a:88:a9:e9:
11:f6:39:9d:ea:d6:17:51:8a:05:dd:bf:11:20:af:
fa:91:bf:1e:5d:2e:73:31:50:87:57:62:df:e9:c1:
06:b6:cc:b3:82:bf:65:4b:56:ec:b1:19:ce:81:52:
7d:ab:c9:cf:6e:2f:20:13:9d:5d:98:ef:b7:7b:c6:
db:ed:8d:e7:95:55:22:5b:b9:8c:f5:d5:17:fb:bb:
8d:f4:b1:dc:69:7a:ee:53:67:80:04:f9:e8:d7:73:
7d:aa:e4:b2:3a:7d:66:bd:59:6b:8d:e8:93:e5:22:
54:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:FE:EE:03:45:58:46:A0:65:5A:A6:AF:18:2F:5D:CE:46:D1:AE:C1
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/N_7uA0VYRqBlWqavGC9dzkbRrsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.50.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:a7:2d:39:f4:6e:b9:9b:8c:55:5b:d6:6e:a0:dc:b9:a1:25:
8f:b6:f5:fc:95:a7:b1:b7:bb:9f:95:22:b4:7e:86:23:b6:ac:
0f:1b:cf:49:a0:c0:43:ba:f5:f1:7b:4b:ac:f0:56:bc:57:54:
4d:5e:e1:c8:05:e9:c6:63:2e:00:61:fc:8f:0b:a8:3e:ea:07:
6a:0d:f9:82:32:b5:f9:b6:1e:42:61:04:6d:44:74:ed:f9:02:
49:95:a7:dc:93:a9:63:ad:8a:b6:c7:c5:38:98:4d:93:22:17:
5e:3e:c3:b6:34:bf:9b:cd:b5:18:4e:c4:4a:a5:88:a7:67:ae:
f7:3b:ba:fe:96:a5:71:09:1b:1b:7e:c1:f8:99:74:26:53:8a:
39:a6:00:71:c0:ea:64:5e:32:b1:08:df:01:f1:e1:31:be:44:
1a:ad:91:f4:aa:60:b4:e5:51:b6:ec:c8:be:b0:3a:84:e7:71:
db:74:fc:71:52:6e:fc:83:6e:5d:fb:a7:2b:46:97:17:e7:42:
ae:59:6d:31:68:27:b0:6d:b2:49:21:31:b5:8e:4d:95:e7:ce:
8f:d3:19:7b:72:03:ed:52:94:ef:4d:fc:8f:7c:8d:56:c7:d9:
f0:24:28:e7:a0:90:1a:6a:6a:a2:22:ad:7f:b8:1c:ce:fc:fe:
e3:f0:50:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:16 2025 by rpki-client on console.sobornost.net