Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/gg0Nm_VFLsVsP3LDryKJpBrVjYE.roa
File: gg0Nm_VFLsVsP3LDryKJpBrVjYE.roa (raw, json)
Hash identifier: J2s9vww+yCryIZ+F/ye9BELNwXVuKR4ZQ85nBdO0V14=
Subject key identifier: 82:0D:0D:9B:F5:45:2E:C5:6C:3F:72:C3:AF:22:89:A4:1A:D5:8D:81
Certificate issuer: /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Certificate serial: 019427481F11CD2159224F655ADBEB6D38D5
Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/gg0Nm_VFLsVsP3LDryKJpBrVjYE.roa
Signing time: Thu 02 Jan 2025 13:50:25 +0000
ROA not before: Thu 02 Jan 2025 13:50:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50371
IP address blocks: 37.32.74.0/24 maxlen: 24
185.129.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:1f:11:cd:21:59:22:4f:65:5a:db:eb:6d:38:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Validity
Not Before: Jan 2 13:50:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=820d0d9bf5452ec56c3f72c3af2289a41ad58d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ce:aa:67:ba:96:e3:b2:37:7f:2a:18:88:3a:
b2:28:46:d9:4a:13:cf:9b:51:f3:6a:91:51:aa:1f:
f8:8b:69:03:78:51:09:0a:b8:9f:20:5e:95:5e:c4:
c0:67:85:e0:af:13:f7:d1:36:89:ce:96:7a:8c:e8:
7f:bb:83:f0:64:9b:97:db:75:3c:97:bb:8d:74:8e:
43:d1:e5:86:ad:0b:24:fc:da:31:be:a3:86:19:e7:
f6:98:df:81:65:50:ee:18:0e:3d:58:5f:0f:28:d1:
f0:c1:f9:7a:84:36:7b:06:df:f8:31:50:cf:7d:01:
d3:d2:eb:8e:5e:e5:8e:75:a3:a1:c7:08:61:4a:0e:
19:87:d4:aa:2c:cc:a8:4b:85:c6:25:b7:42:0f:d7:
09:2b:c0:f6:49:3e:f5:aa:ab:28:0a:d9:45:a3:49:
5c:5a:50:41:1b:99:fe:b3:ea:44:33:db:97:a1:a5:
e2:17:d5:0b:2a:59:5e:bb:1e:09:0f:82:c5:02:72:
5d:9d:9d:db:2e:40:1e:7e:44:8e:64:87:8f:bb:3c:
05:a8:45:47:31:44:4c:49:80:95:85:38:dc:a7:a6:
49:5f:92:31:58:80:9d:7c:a3:33:2b:a9:6c:5a:80:
61:8e:ea:a6:48:a0:ba:1e:29:3d:61:4a:ba:49:c2:
c5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0D:0D:9B:F5:45:2E:C5:6C:3F:72:C3:AF:22:89:A4:1A:D5:8D:81
X509v3 Authority Key Identifier:
keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/gg0Nm_VFLsVsP3LDryKJpBrVjYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.74.0/24
185.129.92.0/24
Signature Algorithm: sha256WithRSAEncryption
98:fd:19:e5:e9:07:b9:88:7d:02:09:d3:64:f5:42:9b:59:70:
85:8c:a5:5c:d1:83:c1:35:5c:f8:0a:7f:d7:f0:a1:1c:00:cc:
7b:e3:41:fd:38:c5:00:33:c7:60:f4:a5:29:3f:1b:2e:fd:49:
bd:7c:dc:d9:57:a4:90:c5:76:2b:a9:fa:81:bc:1f:91:bc:4b:
a6:20:5d:36:7a:d2:b1:62:be:a5:ab:ea:bb:9e:3c:99:75:62:
0b:a7:3d:1b:45:88:15:f5:57:a6:43:91:d9:6e:68:f6:a0:37:
95:e3:6e:10:5d:1a:39:66:df:4a:af:b1:f0:0b:9e:6f:a7:87:
6a:9f:bc:37:75:7c:31:80:92:94:e8:50:a8:5e:59:2a:bb:a2:
e0:8d:70:10:d4:d4:88:63:9b:b7:05:0e:8d:1c:48:21:bd:39:
97:d0:9b:79:e4:52:c0:45:dd:b5:ba:49:42:65:f3:a6:95:b6:
74:43:e0:7a:ea:e3:ee:36:e5:d1:4a:23:80:8b:af:bc:4e:ed:
9f:8a:ec:3e:22:4b:0d:5e:53:30:f0:d2:97:1a:d1:1d:12:63:
9e:fe:08:6e:48:78:ca:fb:63:2a:0d:f7:f2:4b:fb:15:34:83:
92:7f:77:0b:c7:23:88:25:d0:2e:a6:81:fc:4f:aa:d2:cc:85:
4f:ac:b0:2d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQnSB8RzSFZIk9lWtvrbTjVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZTgyYmExNzE1ZDZhZWFlNWIwMTAyNzI1ZmZlMGM4MzQ3
MzVkN2QwHhcNMjUwMTAyMTM1MDI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjBkMGQ5YmY1NDUyZWM1NmMzZjcyYzNhZjIyODlhNDFhZDU4ZDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM6qZ7qW47I3fyoYiDqyKEbZShPP
m1HzapFRqh/4i2kDeFEJCrifIF6VXsTAZ4XgrxP30TaJzpZ6jOh/u4PwZJuX23U8
l7uNdI5D0eWGrQsk/NoxvqOGGef2mN+BZVDuGA49WF8PKNHwwfl6hDZ7Bt/4MVDP
fQHT0uuOXuWOdaOhxwhhSg4Zh9SqLMyoS4XGJbdCD9cJK8D2ST71qqsoCtlFo0lc
WlBBG5n+s+pEM9uXoaXiF9ULKlleux4JD4LFAnJdnZ3bLkAefkSOZIePuzwFqEVH
MURMSYCVhTjcp6ZJX5IxWICdfKMzK6lsWoBhjuqmSKC6Hik9YUq6ScLFXwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIINDZv1RS7FbD9yw68iiaQa1Y2BMB8GA1UdIwQY
MBaAFLToK6FxXWrq5bAQJyX/4Mg0c119MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMt
YzdkMTk5MzBkNjZkLzEvZ2cwTm1fVkZMc1ZzUDNMRHJ5S0pwQnJWallFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMtYzdkMTk5MzBkNjZk
LzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJSBKAwQA
uYFcMA0GCSqGSIb3DQEBCwUAA4IBAQCY/Rnl6Qe5iH0CCdNk9UKbWXCFjKVc0YPB
NVz4Cn/X8KEcAMx740H9OMUAM8dg9KUpPxsu/Um9fNzZV6SQxXYrqfqBvB+RvEum
IF02etKxYr6lq+q7njyZdWILpz0bRYgV9VemQ5HZbmj2oDeV424QXRo5Zt9Kr7Hw
C55vp4dqn7w3dXwxgJKU6FCoXlkqu6LgjXAQ1NSIY5u3BQ6NHEghvTmX0Jt55FLA
Rd21uklCZfOmlbZ0Q+B66uPuNuXRSiOAi6+8Tu2fiuw+IksNXlMw8NKXGtEdEmOe
/ghuSHjK+2MqDffyS/sVNIOSf3cLxyOIJdAupoH8T6rSzIVPrLAt
-----END CERTIFICATE-----
Generated at Thu Jan 23 19:15:57 2025 by rpki-client on console.sobornost.net