Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/shbceV9akWXaT_dcDcqJ8P-GvqQ.roa
File: shbceV9akWXaT_dcDcqJ8P-GvqQ.roa (raw, json)
Hash identifier: lUwiEBoHnXYq7IyNOycZvH/hqK3uwftKdIXtqk+b6M4=
Subject key identifier: B2:16:DC:79:5F:5A:91:65:DA:4F:F7:5C:0D:CA:89:F0:FF:86:BE:A4
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196007C537E2BB238C2A5834BEF2A0D39C2
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/shbceV9akWXaT_dcDcqJ8P-GvqQ.roa
Signing time: Fri 04 Apr 2025 11:07:49 +0000
ROA not before: Fri 04 Apr 2025 11:07:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 37.202.209.0/24 maxlen: 24
151.243.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:00:7c:53:7e:2b:b2:38:c2:a5:83:4b:ef:2a:0d:39:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 4 11:07:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b216dc795f5a9165da4ff75c0dca89f0ff86bea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ba:bd:4f:e4:fc:06:db:58:22:8d:05:8f:a1:
40:5a:1e:83:c2:b6:09:1f:c9:a5:3b:35:27:d8:55:
ac:c7:b0:c4:e3:1a:5b:dc:68:c7:07:73:3f:b9:3e:
6a:6e:3b:19:8b:02:69:3c:4c:9e:e2:3f:22:0b:02:
b1:68:c4:80:f9:78:90:80:8b:f6:63:b4:20:ae:c0:
a9:59:38:0a:b5:3d:c5:ba:91:30:d6:5e:31:41:88:
73:77:3c:bd:77:59:02:ff:6a:25:fa:70:8f:f9:16:
2d:99:ec:5f:83:3a:65:e2:25:75:39:46:93:7e:85:
35:29:ef:44:03:38:9b:bd:81:ff:1d:ed:03:8c:ab:
ad:c5:5f:f2:24:ef:64:21:2b:3f:76:62:ea:a4:fa:
12:97:16:eb:f8:d6:89:a7:50:1f:92:fe:22:8c:0b:
50:bf:54:fd:66:10:5b:b5:a9:8e:e3:08:0c:89:f3:
f9:34:9a:c0:41:4e:53:d9:c7:24:b6:6b:97:bf:0f:
85:d3:f7:d4:4f:d3:17:74:4c:6a:af:2a:21:f0:08:
24:b4:05:d5:98:f6:a8:05:a0:bf:91:8d:f8:31:7e:
9e:0c:26:05:ee:af:2e:91:01:4a:cc:28:a7:00:f1:
77:89:1f:c2:98:4c:fd:83:9b:50:4a:16:9a:06:a3:
23:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:16:DC:79:5F:5A:91:65:DA:4F:F7:5C:0D:CA:89:F0:FF:86:BE:A4
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/shbceV9akWXaT_dcDcqJ8P-GvqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.209.0/24
151.243.102.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:f7:cb:3c:24:68:76:6e:28:46:bc:5b:a2:26:0d:45:db:df:
39:38:ef:e5:dd:f7:e5:73:f6:b6:81:7b:d3:b8:0a:2d:f8:b5:
d9:70:ec:03:e8:42:75:08:87:aa:bd:ef:cc:37:22:0a:51:0a:
44:0d:cf:75:cf:21:17:e0:5c:5a:6a:f1:f2:26:fa:ef:f9:6b:
f2:ac:23:cb:b9:ce:bb:74:92:40:6a:af:de:b3:c8:58:34:38:
b2:de:75:ef:0b:4a:40:d1:0b:77:25:f1:22:9e:3f:c4:f6:13:
b3:3c:d8:bf:ff:3e:d1:45:13:46:51:36:af:fb:8e:a3:9f:b0:
cc:ff:19:fe:75:18:eb:68:23:49:db:71:1a:99:e8:c8:9c:86:
64:81:d6:64:cf:28:fb:09:43:8c:59:62:0c:da:98:35:59:c9:
2d:56:11:7c:a0:63:60:71:ec:f1:f5:25:f3:37:85:d7:57:3c:
4f:86:78:41:fa:90:47:ce:9c:25:9a:d0:25:ff:8f:d5:e1:3e:
39:ca:ea:7f:a1:6b:3b:96:63:35:2f:31:4b:d0:4f:1f:39:86:
1d:67:8d:ad:7f:ac:3b:8c:cf:7d:3b:05:9a:d4:2b:ac:ad:85:
97:1c:16:a6:05:96:53:ac:d9:96:29:3b:82:9d:5a:46:e7:f2:
6b:48:a7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:23 2025 by rpki-client on console.sobornost.net