Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FTUFRMbvFk8ZoQyb0CgaHCUwogI.roa
File: FTUFRMbvFk8ZoQyb0CgaHCUwogI.roa (raw, json)
Hash identifier: ufs+clCuFfAwaxxZJO5xCKTx2kcRqketI4C683fAd9o=
Subject key identifier: 15:35:05:44:C6:EF:16:4F:19:A1:0C:9B:D0:28:1A:1C:25:30:A2:02
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01962F56CD5065A1D1EBE6102F5CEE993B1C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FTUFRMbvFk8ZoQyb0CgaHCUwogI.roa
Signing time: Sun 13 Apr 2025 13:28:59 +0000
ROA not before: Sun 13 Apr 2025 13:28:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 37.202.203.0/24 maxlen: 24
151.243.206.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:56:cd:50:65:a1:d1:eb:e6:10:2f:5c:ee:99:3b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 13 13:28:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15350544c6ef164f19a10c9bd0281a1c2530a202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:99:64:25:c3:b1:57:31:d1:1b:87:50:19:c7:
7a:33:9f:71:d5:ca:77:41:cd:4a:07:e8:a8:86:88:
4c:20:bb:f6:25:26:f2:d1:d6:9a:5b:39:0e:ec:bc:
a3:7e:31:10:f0:15:8b:7f:7e:b0:ad:eb:15:70:0c:
55:e2:f3:40:e5:7e:5a:c1:a4:27:90:a1:be:d3:64:
a9:d9:b4:dc:00:b9:c8:bc:ae:56:95:e3:e1:6e:a3:
fd:dc:66:68:6f:86:31:f4:e9:4a:28:4d:93:5d:ba:
61:a5:37:9f:57:cf:17:4e:3a:a0:34:d4:72:88:63:
02:43:af:39:ce:89:b2:8a:7a:eb:71:62:dc:75:a9:
08:ec:f1:8e:f0:22:ad:92:da:70:39:4d:4b:d0:8b:
6c:5c:50:e5:52:38:22:b6:8f:be:92:04:78:46:ed:
da:df:a3:3f:10:27:92:a2:a3:80:89:b6:34:fe:f7:
a6:0d:01:77:d1:c4:a1:bb:13:25:8c:f4:1f:76:bf:
be:d1:2f:f3:e9:b7:30:12:52:fe:f4:17:17:ff:98:
af:39:bd:b1:c9:bf:1f:77:fc:ae:de:73:c1:ee:5d:
1e:a0:bb:5c:e5:11:1a:e2:7e:c6:34:cf:3b:92:32:
ed:4e:f0:c2:0a:c7:35:a4:f8:eb:19:d7:aa:cd:6a:
25:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:35:05:44:C6:EF:16:4F:19:A1:0C:9B:D0:28:1A:1C:25:30:A2:02
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FTUFRMbvFk8ZoQyb0CgaHCUwogI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.203.0/24
151.243.206.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:db:47:5d:2d:56:83:95:2d:99:12:6c:eb:2c:75:54:bd:5f:
e4:64:fb:da:16:ff:88:9d:53:56:bb:76:ca:2d:18:99:58:e3:
53:85:92:82:d5:6c:fd:15:1f:ec:d2:51:32:6c:be:b1:5f:9b:
b5:d7:d7:cd:15:2c:df:11:bd:84:77:60:2b:db:fa:4d:7c:07:
b8:35:3f:3c:70:d6:2a:35:6a:9f:ca:87:c4:18:c6:a0:4b:d6:
95:64:14:6e:71:92:bd:bd:ed:d2:0c:ff:2a:da:43:e9:ff:92:
a1:ca:5a:dc:33:2e:75:01:ac:76:99:7d:77:90:7b:55:40:90:
1a:64:a6:3b:00:6f:26:7c:8a:e8:d1:9a:68:bf:34:2d:cf:5f:
a1:02:7e:9e:88:a3:ea:2c:06:79:b9:11:8f:63:99:ca:14:04:
b4:95:2f:be:fa:ae:3d:b1:d5:c3:cf:c1:57:61:99:bb:59:ae:
52:66:9c:45:bd:fb:1c:b7:78:a2:3f:74:bc:e5:26:82:25:e2:
a5:40:ab:8b:fd:b9:49:81:4f:81:ec:0e:f9:27:0f:15:9e:2c:
d5:71:76:52:e4:7a:61:70:0f:02:31:a5:01:af:70:38:21:d2:
76:31:76:81:3c:59:35:82:8b:83:c2:66:11:2f:e2:e9:c4:8e:
90:05:ce:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:23 2025 by rpki-client on console.sobornost.net