Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/c6ZD9P3H30o78749ZEWyxOqABSU.roa
File: c6ZD9P3H30o78749ZEWyxOqABSU.roa (raw, json)
Hash identifier: cprASPGCBwZQZqsXiJOC/24dbl0p4JtT0bpDH9Sk/a4=
Subject key identifier: 73:A6:43:F4:FD:C7:DF:4A:3B:F3:BE:3D:64:45:B2:C4:EA:80:05:25
Certificate issuer: /CN=29db7ca4eee1e453d26fab99c8201adf894612be
Certificate serial: 019428265B3789C08592F869C55C7D0CDAD5
Authority key identifier: 29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/c6ZD9P3H30o78749ZEWyxOqABSU.roa
Signing time: Thu 02 Jan 2025 17:53:09 +0000
ROA not before: Thu 02 Jan 2025 17:53:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207339
IP address blocks: 37.123.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:5b:37:89:c0:85:92:f8:69:c5:5c:7d:0c:da:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29db7ca4eee1e453d26fab99c8201adf894612be
Validity
Not Before: Jan 2 17:53:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73a643f4fdc7df4a3bf3be3d6445b2c4ea800525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4a:49:ac:e4:2b:82:10:d8:67:b4:82:cf:59:
02:59:6b:a1:4a:8a:d9:63:2c:29:4f:9b:e2:2f:bd:
59:82:c2:a0:a0:58:ec:c1:9c:3c:8a:19:35:d3:be:
81:ee:84:51:6a:57:69:30:5a:dc:dd:63:af:0f:e9:
1d:30:11:62:a2:22:20:fc:4d:ba:b9:e2:90:fa:02:
d2:f9:d7:47:d5:39:2c:92:9e:ff:2b:c7:f3:8f:9c:
2a:2c:00:10:92:d0:26:97:6b:29:a3:87:4c:ab:f5:
64:03:58:b2:8f:66:c0:32:c3:4f:4b:72:67:7c:85:
13:66:9f:10:ad:27:53:dd:7b:3c:30:3c:1f:0d:43:
61:04:c1:86:0f:40:33:ad:c3:aa:29:28:af:93:a2:
d1:8e:4a:ed:bb:80:32:d6:a8:b8:35:8e:74:f7:97:
f0:c3:4d:d1:b6:0b:15:ed:f1:85:50:4f:91:f7:f4:
88:13:60:94:83:f4:e1:83:84:24:d7:96:cc:cb:b0:
8d:13:23:e6:a5:e4:5f:de:4d:81:4f:82:67:4d:d5:
f6:ab:d9:fa:b8:b0:7b:8d:16:96:9f:de:f9:f4:a4:
59:e1:29:91:bb:a2:43:1f:90:8b:63:0d:e8:e9:45:
5b:4c:e4:60:79:0c:0b:6a:5f:86:54:cd:a6:e7:b5:
2b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A6:43:F4:FD:C7:DF:4A:3B:F3:BE:3D:64:45:B2:C4:EA:80:05:25
X509v3 Authority Key Identifier:
keyid:29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/c6ZD9P3H30o78749ZEWyxOqABSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.123.254.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:2d:4e:6d:e6:19:76:47:b4:cb:1a:db:10:33:f7:08:e8:4c:
05:d4:0a:f0:9d:46:2e:bb:f7:c1:71:95:b2:78:13:e1:e8:8d:
9f:49:b4:f7:c0:eb:f8:e5:39:f0:95:28:f4:c5:eb:a3:b4:9d:
eb:6c:30:2c:57:08:52:ec:98:fb:9f:f6:06:c5:80:18:59:f3:
b5:0d:40:aa:18:a3:fe:42:92:b2:13:46:65:61:11:73:ce:30:
e6:e6:27:94:26:f7:af:25:33:63:39:bd:bd:81:2a:4f:08:43:
c2:02:ce:08:b7:bd:85:16:51:b7:b9:f9:bc:1b:7e:e3:d5:10:
fd:bc:d8:2e:f5:e7:fe:d1:c5:e3:af:df:55:02:c3:4d:57:e2:
a1:1a:b2:52:c3:68:34:ed:d3:a1:1e:05:81:14:3e:fb:6e:66:
96:3a:eb:92:80:3d:c7:50:a7:ca:d3:94:5e:aa:60:56:99:35:
0e:29:fa:24:18:4d:f0:dc:6e:ce:ee:8f:36:f3:27:d1:df:38:
d0:11:91:6f:c6:6e:0e:1e:f6:30:13:de:db:11:12:76:c3:45:
e0:62:2c:2e:f2:69:7e:57:36:41:35:7b:1e:97:2c:f9:99:e1:
79:8a:bd:f6:2d:ab:36:34:43:4a:af:a1:77:17:de:73:1f:cc:
7e:39:e0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:26 2025 by rpki-client on console.sobornost.net