Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/f_wGHHPcfp4gWwowZYMDfcJ1Mog.roa
File: f_wGHHPcfp4gWwowZYMDfcJ1Mog.roa (raw, json)
Hash identifier: An25AbmP3oyWt72GnalaU42kIKjPDFrI7RZhZqfvEO8=
Subject key identifier: 7F:FC:06:1C:73:DC:7E:9E:20:5B:0A:30:65:83:03:7D:C2:75:32:88
Certificate issuer: /CN=a2e9bbb2dc361f148b51a75080d8e0b4f78a1f82
Certificate serial: 0194274809B9B3255C899E3074CA73743AE9
Authority key identifier: A2:E9:BB:B2:DC:36:1F:14:8B:51:A7:50:80:D8:E0:B4:F7:8A:1F:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/f_wGHHPcfp4gWwowZYMDfcJ1Mog.roa
Signing time: Thu 02 Jan 2025 13:50:20 +0000
ROA not before: Thu 02 Jan 2025 13:50:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35834
IP address blocks: 87.237.32.0/23 maxlen: 23
87.237.32.0/24 maxlen: 24
87.237.33.0/24 maxlen: 24
87.237.34.0/23 maxlen: 23
87.237.34.0/24 maxlen: 24
87.237.36.0/24 maxlen: 24
87.237.38.0/23 maxlen: 23
87.237.38.0/24 maxlen: 24
87.237.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:09:b9:b3:25:5c:89:9e:30:74:ca:73:74:3a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e9bbb2dc361f148b51a75080d8e0b4f78a1f82
Validity
Not Before: Jan 2 13:50:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ffc061c73dc7e9e205b0a306583037dc2753288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:af:83:69:e6:6f:d5:c3:59:93:47:63:6d:c3:
d7:2b:eb:af:80:3d:15:05:f7:84:6b:63:a2:01:e9:
0c:11:a9:31:71:a3:6e:3d:aa:c0:59:62:88:da:3e:
59:42:28:9b:7b:e1:61:07:bd:97:f5:a0:9f:59:ae:
71:58:d9:c6:3c:2d:2e:e0:ca:7a:03:90:80:1a:db:
bd:9f:05:0b:26:e6:de:69:49:83:89:9a:c8:bf:5a:
2d:52:12:bf:4c:d7:95:94:a6:f2:40:2a:5e:07:63:
9b:02:d3:cb:e6:75:15:66:58:c4:9b:08:53:98:3b:
ef:86:60:a0:04:44:c9:ca:bc:e4:44:6a:2e:2e:5f:
1b:11:61:14:23:4a:c5:00:c7:3f:8a:96:c5:95:df:
60:f2:5a:aa:10:89:49:a1:7d:5d:96:ef:69:c6:84:
4e:86:33:f7:1a:7c:05:37:79:b0:c2:68:3f:4e:08:
e5:0f:73:a4:65:28:29:4e:f0:98:95:ea:94:a2:fa:
6b:b2:b9:97:fe:dd:a4:44:c4:68:25:21:f9:99:12:
66:8a:de:1e:59:46:07:80:1b:a2:4f:e4:6a:69:6a:
b3:96:11:f5:ab:61:6e:7a:72:42:de:86:a2:6b:63:
84:82:77:27:29:a1:eb:55:77:a7:6e:5e:40:31:66:
17:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FC:06:1C:73:DC:7E:9E:20:5B:0A:30:65:83:03:7D:C2:75:32:88
X509v3 Authority Key Identifier:
keyid:A2:E9:BB:B2:DC:36:1F:14:8B:51:A7:50:80:D8:E0:B4:F7:8A:1F:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/f_wGHHPcfp4gWwowZYMDfcJ1Mog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.32.0-87.237.36.255
87.237.38.0/23
Signature Algorithm: sha256WithRSAEncryption
48:a8:cd:60:61:e3:56:d8:de:a2:d9:17:f3:b8:49:5a:50:fd:
bd:52:33:1f:b7:60:27:f8:d7:b8:8a:3b:19:d0:97:1d:dc:41:
bb:1f:3d:88:1c:5a:f8:37:22:f4:e3:6b:bf:09:7b:02:d6:bb:
f3:0f:3c:99:0a:fd:84:e8:f2:2f:09:32:ca:e4:95:0d:7e:9c:
fb:0c:4f:04:a9:69:f4:ca:98:52:8a:ca:93:93:02:fe:b4:16:
11:a1:ed:b8:14:d1:5b:e5:48:9f:d8:b3:b4:9a:6e:a6:7e:9d:
b9:16:5f:f9:31:2a:b6:3b:0b:5a:f0:5a:93:ba:e2:e4:5a:05:
1c:a9:8c:68:4b:d1:6c:7a:84:89:c7:5a:1b:0e:6c:eb:31:22:
33:1a:7c:2c:c0:02:54:b8:8e:ee:a6:0c:7e:0f:9c:2a:9b:f5:
4b:f0:9f:68:ca:47:a7:39:d3:a9:c6:c9:09:5a:f9:e7:52:54:
1a:14:5f:a2:1b:a9:66:88:3d:3b:37:4b:5c:0c:b3:e9:15:62:
9e:66:05:d5:2c:98:83:a9:ce:61:b2:a7:55:ec:7d:fe:63:2f:
3f:ff:ec:5b:85:4d:37:84:e0:32:e5:b2:ca:10:0a:79:3e:1d:
36:5a:74:e2:b5:7b:24:94:4b:c4:5c:25:5f:a9:0d:0f:9e:78:
2f:ae:15:2a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:02 2025 by rpki-client on console.sobornost.net