Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/a7WXMgAx0WN70jOmPA_ZHtAqrZ8.roa
File: a7WXMgAx0WN70jOmPA_ZHtAqrZ8.roa (raw, json)
Hash identifier: S6bbeU5Csf/O2Nyy+w5nuCt2wnvpiGasWshn5o3uk0c=
Subject key identifier: 6B:B5:97:32:00:31:D1:63:7B:D2:33:A6:3C:0F:D9:1E:D0:2A:AD:9F
Certificate issuer: /CN=532414492bb2cfa408ff573aa068fcf9a5e778ee
Certificate serial: 0194258EFF342CF9AE4AEF207950C29654FC
Authority key identifier: 53:24:14:49:2B:B2:CF:A4:08:FF:57:3A:A0:68:FC:F9:A5:E7:78:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UyQUSSuyz6QI_1c6oGj8-aXneO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/a7WXMgAx0WN70jOmPA_ZHtAqrZ8.roa
Signing time: Thu 02 Jan 2025 05:48:35 +0000
ROA not before: Thu 02 Jan 2025 05:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24971
IP address blocks: 37.140.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:ff:34:2c:f9:ae:4a:ef:20:79:50:c2:96:54:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=532414492bb2cfa408ff573aa068fcf9a5e778ee
Validity
Not Before: Jan 2 05:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6bb597320031d1637bd233a63c0fd91ed02aad9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:64:98:32:4d:a3:62:32:aa:5a:15:44:07:a3:
72:7e:b9:90:29:65:b9:f2:6a:7d:72:35:ff:81:fa:
0c:97:2f:15:69:47:c8:c6:13:eb:89:73:9c:82:bc:
6d:95:95:71:89:90:c7:15:99:98:df:62:93:d1:ae:
7e:36:4f:12:70:67:e3:b1:77:06:18:68:ed:90:80:
7b:f0:c8:a9:58:08:a9:f8:ad:78:04:45:12:cc:d1:
89:6a:eb:57:7d:9b:dd:df:70:4c:b1:91:db:ed:bd:
d1:97:a6:72:a4:19:9e:29:84:b5:1f:f4:16:44:bd:
26:53:3f:6f:4b:0c:91:e7:06:45:ba:ec:cc:ca:24:
3e:2d:43:01:90:a6:3a:12:65:5f:43:79:84:78:ee:
c5:d5:d9:42:23:15:68:3d:ff:6d:15:8a:9a:ff:56:
35:22:70:6e:69:7b:43:6f:b8:cd:2e:19:f5:d3:20:
75:59:02:70:fb:50:cf:1d:1d:bf:de:55:f8:2b:a4:
02:f5:00:b6:4f:f0:8d:4d:63:1e:a1:de:d0:89:2e:
93:8d:41:18:99:75:f0:52:8c:5f:95:00:06:a3:cb:
2a:d7:60:40:b9:56:ba:5c:21:04:c3:f8:c4:9c:f7:
55:17:de:04:07:36:66:8a:86:19:bc:6d:1f:92:5a:
0f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B5:97:32:00:31:D1:63:7B:D2:33:A6:3C:0F:D9:1E:D0:2A:AD:9F
X509v3 Authority Key Identifier:
keyid:53:24:14:49:2B:B2:CF:A4:08:FF:57:3A:A0:68:FC:F9:A5:E7:78:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyQUSSuyz6QI_1c6oGj8-aXneO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/a7WXMgAx0WN70jOmPA_ZHtAqrZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.220.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:04:d5:98:2c:44:1d:dd:65:30:84:a4:37:10:0b:d3:98:db:
f8:6b:d5:16:7d:5e:07:7f:b3:8c:78:6a:a5:4c:7f:c2:39:a1:
a8:aa:b6:95:8a:eb:63:bb:c2:80:38:32:dc:6b:70:ed:d1:a7:
8a:db:e0:f4:5d:0b:24:a1:fb:20:bb:d7:6c:f9:63:6e:50:f1:
03:d7:92:59:e3:2e:ca:29:3e:d4:d1:f2:0f:16:f8:86:e8:2d:
16:ec:d2:bd:57:10:46:48:56:6b:83:f7:70:58:df:38:4c:a4:
1a:f9:7f:fa:a3:ec:ed:14:ea:7b:9b:3e:9c:b9:3d:d8:fb:2a:
94:af:b4:d0:93:0e:73:da:c9:f8:90:3f:34:46:0c:35:92:49:
f5:ef:0d:b2:e0:0d:60:84:0f:5d:5d:27:68:20:06:ea:df:6a:
9c:13:1f:d8:ab:57:28:d5:91:85:b0:df:d2:26:5e:ef:7f:34:
02:19:90:e8:57:a6:42:6b:77:20:c0:41:27:db:61:16:66:52:
12:48:bf:d9:64:af:4c:14:bb:3c:24:19:8f:4a:fd:06:3d:ea:
6a:47:c8:a4:75:fb:16:5f:cf:a8:32:d5:18:76:cf:d2:90:cf:
c3:37:ed:91:86:f2:62:40:2c:8a:7c:f6:06:56:57:60:44:61:
c4:4c:b6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:29 2025 by rpki-client on console.sobornost.net