Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/IMyen03Z3kYW501dGBJKRvVCnYU.roa
File: IMyen03Z3kYW501dGBJKRvVCnYU.roa (raw, json)
Hash identifier: iucT9aE10m3DuQgfsaO8fZMDF0JO/83+1ytDh6dNspg=
Subject key identifier: 20:CC:9E:9F:4D:D9:DE:46:16:E7:4D:5D:18:12:4A:46:F5:42:9D:85
Certificate issuer: /CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b
Certificate serial: 019427B37EB520CEE874AC16C4D6C795B10D
Authority key identifier: 4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/IMyen03Z3kYW501dGBJKRvVCnYU.roa
Signing time: Thu 02 Jan 2025 15:47:42 +0000
ROA not before: Thu 02 Jan 2025 15:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51440
IP address blocks: 37.122.158.0/23 maxlen: 23
37.122.158.0/24 maxlen: 24
37.122.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:7e:b5:20:ce:e8:74:ac:16:c4:d6:c7:95:b1:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b
Validity
Not Before: Jan 2 15:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20cc9e9f4dd9de4616e74d5d18124a46f5429d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ff:9b:7f:cd:5b:fb:44:7b:38:44:5b:5f:92:
d7:5d:76:58:11:c5:71:bd:ac:49:3b:dd:51:51:1d:
94:f9:ff:07:76:f3:ec:12:e4:a9:3e:6f:d3:b1:05:
6f:4b:50:2f:6f:a8:19:eb:0f:f9:db:4f:c2:b6:4a:
b1:c2:28:8d:c8:eb:82:a9:64:e7:1b:49:08:c8:97:
cd:93:77:ab:be:3b:3f:36:38:93:01:da:ed:1d:d0:
e1:71:b5:b7:e8:bf:be:d8:af:3f:fb:c1:fc:84:a2:
8c:70:99:25:49:d5:a8:af:33:9a:60:58:f4:66:e7:
b6:08:c1:67:fe:a1:32:af:47:c4:c2:11:e7:0c:00:
b2:e1:9c:d8:ff:20:6c:42:e2:4b:3a:18:0e:21:85:
62:e3:a8:e1:11:fb:3b:fd:05:e1:3f:d0:69:45:3d:
83:df:cf:36:73:16:db:2b:9c:08:cf:13:6d:c4:d7:
a2:cb:88:b1:ee:a6:62:a2:ba:9e:1e:c7:8c:24:27:
9a:26:97:52:de:b7:2b:ab:7e:92:90:47:35:bc:c7:
e5:0e:12:98:8c:69:71:be:0d:e3:24:d2:cb:07:01:
49:ff:73:75:56:c7:85:b1:19:8b:2f:88:f4:d4:ef:
5b:c8:ea:3d:e2:cb:c8:35:5f:5e:ce:98:d8:e1:ee:
86:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CC:9E:9F:4D:D9:DE:46:16:E7:4D:5D:18:12:4A:46:F5:42:9D:85
X509v3 Authority Key Identifier:
keyid:4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/IMyen03Z3kYW501dGBJKRvVCnYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.122.158.0/23
Signature Algorithm: sha256WithRSAEncryption
82:d4:42:f6:3f:af:0a:5e:e5:b0:b8:79:22:2b:ed:1c:d3:6e:
2a:ca:1f:dc:69:60:c0:f0:0f:0a:0e:f3:1b:84:ba:70:28:14:
5c:90:5e:99:44:9c:3b:47:2a:7e:2b:7b:f7:25:06:14:25:85:
8d:d9:72:10:57:dc:38:24:b1:12:e2:0a:b1:6c:80:fd:e4:1f:
62:5d:00:b5:26:01:4e:ac:0b:54:c0:04:fc:36:1d:1b:88:92:
47:c3:5e:f6:60:5e:0a:95:85:23:76:19:9e:dd:a4:1f:1d:6f:
0e:b1:18:b0:c2:cc:68:ea:09:15:19:9e:01:15:fc:87:e8:44:
d0:89:f1:31:72:74:7f:e5:b9:ee:0f:ac:9b:fe:b5:ef:0c:94:
b1:49:ff:23:cf:aa:37:31:e1:92:78:b7:37:09:43:81:eb:92:
7f:5e:a3:90:d0:69:70:94:68:c9:fd:8f:73:7b:72:09:c4:52:
81:35:3e:cd:62:92:e0:79:40:a2:4a:5f:0f:96:32:4d:b1:22:
24:5d:cc:b9:7c:cd:4d:64:8b:dc:f6:ec:d4:21:7c:0c:d2:6f:
ab:8c:52:1c:c3:3a:6d:be:47:40:8d:00:6f:c6:0c:ac:a9:a5:
e4:6d:6b:83:e8:2b:b6:fe:9f:75:21:6c:5b:dc:15:10:aa:2f:
a0:9f:17:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:54 2025 by rpki-client on console.sobornost.net