Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/CEuXJrDVGtc7Z4aBHwivyFbJk6I.roa
File: CEuXJrDVGtc7Z4aBHwivyFbJk6I.roa (raw, json)
Hash identifier: YlEuDFYK1ghHbSy2lJ7W4OAiAQ8b74GXZr4K2Q1Nk+o=
Subject key identifier: 08:4B:97:26:B0:D5:1A:D7:3B:67:86:81:1F:08:AF:C8:56:C9:93:A2
Certificate issuer: /CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Certificate serial: 019423694F7ADFF77FF4E695A52C036E24F6
Authority key identifier: 4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/CEuXJrDVGtc7Z4aBHwivyFbJk6I.roa
Signing time: Wed 01 Jan 2025 19:48:11 +0000
ROA not before: Wed 01 Jan 2025 19:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202757
IP address blocks: 37.221.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:4f:7a:df:f7:7f:f4:e6:95:a5:2c:03:6e:24:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Validity
Not Before: Jan 1 19:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=084b9726b0d51ad73b6786811f08afc856c993a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ee:44:5c:4c:d2:21:dc:cb:14:c3:3d:22:83:
74:d5:19:d5:51:9e:e3:b8:26:af:20:aa:3e:03:ba:
58:fb:01:41:5e:7c:a6:fd:fb:58:ba:96:07:e9:e4:
9a:e9:f8:40:f6:cd:4e:cb:ed:5f:03:06:f7:71:a6:
38:74:fd:56:51:16:f5:f3:e3:01:94:00:7a:16:86:
ad:20:60:e9:dd:31:4a:a3:63:7b:c2:4d:dd:c3:51:
ed:67:f2:ed:28:01:63:98:5a:bc:7d:29:38:bf:46:
2f:24:7d:14:f0:8a:6e:4e:43:22:03:27:5b:6d:3b:
be:f8:f1:d9:ab:4e:00:d8:45:58:05:18:8d:52:7e:
aa:59:c9:54:d5:b2:43:d7:dd:f9:5d:c6:4f:e9:9f:
ad:0e:6f:c1:37:7e:76:fb:cd:82:4a:c3:47:5d:4b:
e5:9f:02:91:1c:ce:93:9e:09:18:2f:e9:d3:5b:2e:
de:a5:da:30:c1:d0:cf:69:e6:a8:ef:6e:f1:f1:30:
0a:31:8c:76:3e:c0:16:6c:0d:5b:45:f4:34:5d:c0:
12:1e:cb:f0:a3:be:d5:f2:95:1d:dd:16:86:88:28:
c7:1f:0d:70:e9:e4:35:a8:52:ed:4d:04:61:42:d0:
ee:a4:42:da:ac:55:0b:18:99:a5:53:e0:4f:2c:ca:
cd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4B:97:26:B0:D5:1A:D7:3B:67:86:81:1F:08:AF:C8:56:C9:93:A2
X509v3 Authority Key Identifier:
keyid:4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/CEuXJrDVGtc7Z4aBHwivyFbJk6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.87.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:ca:e6:8b:d0:60:a0:53:83:8d:72:98:b7:7c:08:19:12:bd:
18:70:6b:fe:a3:1b:c6:9e:72:da:2c:2d:03:f8:c3:18:44:9a:
26:91:a8:b9:1c:ec:e7:95:5d:79:1f:fa:c6:c0:02:3c:67:44:
19:fb:cc:46:5c:57:3f:40:2b:bd:f2:f3:6f:b3:37:c2:ec:3c:
72:b9:c3:f1:75:6d:a5:a1:2a:14:5c:fb:94:9f:fd:b3:bb:ab:
ee:17:cb:ed:47:a4:69:e2:6b:3c:fe:55:18:99:09:27:c6:9e:
77:6f:dd:84:9d:56:b4:6c:ba:11:e7:05:71:3e:07:f0:18:61:
01:2e:98:d2:7a:e8:ce:92:f3:e9:75:c8:40:a0:a6:e7:0e:ac:
cb:3a:23:a4:1d:8f:ca:63:5a:88:d3:82:b5:ec:12:22:bf:fd:
0f:e6:f1:cd:ac:5e:d7:ac:d7:d3:d1:00:1a:b8:5a:29:50:48:
62:a0:df:a1:a7:4b:af:20:79:6f:9a:28:47:b6:03:b0:99:52:
b2:b4:e3:01:70:b6:19:e8:c8:d5:1c:d5:04:95:6e:49:30:95:
f2:78:97:c1:36:e7:37:01:95:13:61:c6:23:e1:19:84:a4:1a:
0b:93:01:75:27:ec:89:e2:fc:54:0a:b1:64:ee:f7:3d:77:b2:
d9:26:25:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:24 2025 by rpki-client on console.sobornost.net