Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/ZheJClH79M-pTRLGEsquKEEr6pM.roa
File: ZheJClH79M-pTRLGEsquKEEr6pM.roa (raw, json)
Hash identifier: eeP+fsrVhAPz7GiAy+y57uO8gQvXWPRMB7ruMgXE6Js=
Subject key identifier: 66:17:89:0A:51:FB:F4:CF:A9:4D:12:C6:12:CA:AE:28:41:2B:EA:93
Certificate issuer: /CN=398881e06383fd2c36e9f245c4bfa1301d15a537
Certificate serial: 019425213B833CF1F589FB0D7EB43C1F6511
Authority key identifier: 39:88:81:E0:63:83:FD:2C:36:E9:F2:45:C4:BF:A1:30:1D:15:A5:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/ZheJClH79M-pTRLGEsquKEEr6pM.roa
Signing time: Thu 02 Jan 2025 03:48:42 +0000
ROA not before: Thu 02 Jan 2025 03:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57642
IP address blocks: 37.25.56.0/21 maxlen: 21
37.25.56.0/24 maxlen: 24
193.228.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:3b:83:3c:f1:f5:89:fb:0d:7e:b4:3c:1f:65:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=398881e06383fd2c36e9f245c4bfa1301d15a537
Validity
Not Before: Jan 2 03:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6617890a51fbf4cfa94d12c612caae28412bea93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c7:50:d5:0d:32:30:0d:f9:7f:c1:e0:2f:62:
14:e8:16:84:1a:9c:e6:e3:95:66:2d:b1:f4:0a:71:
f6:54:f3:a3:bc:ca:c5:2f:ef:9f:93:25:7d:52:b3:
1e:83:d6:be:c4:2a:f9:7b:f3:33:f9:a2:36:ea:e6:
11:89:6e:f0:38:ce:83:18:df:97:ac:4a:e4:2b:e2:
05:b5:e5:98:2a:35:d8:91:a0:37:b3:be:50:ba:ed:
20:d0:0e:98:c5:4e:a3:40:30:0e:41:d0:07:45:2c:
5a:15:87:49:ff:29:65:cf:39:f6:30:7d:61:0f:c7:
42:49:71:5a:9b:be:b4:a9:a1:a8:73:37:16:31:87:
bd:cc:d3:d9:ac:1c:52:7a:a9:fc:b4:4a:6f:b2:68:
48:18:09:da:a6:36:e1:6a:7e:c6:e6:c5:28:5c:07:
9c:bc:51:55:84:e6:10:45:56:c8:f6:85:f4:48:03:
d4:6f:c8:a0:b3:13:6a:bc:db:b6:89:8e:ef:1c:93:
7c:e6:47:df:0c:05:c9:4c:93:f7:0c:49:0a:68:8f:
36:91:c5:7f:8a:42:c8:66:8f:89:da:2b:af:13:05:
fd:24:18:5c:6e:1c:f4:ff:6b:77:69:24:be:ee:61:
99:0a:22:12:03:39:ec:cb:38:3e:77:05:35:69:bf:
5d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:17:89:0A:51:FB:F4:CF:A9:4D:12:C6:12:CA:AE:28:41:2B:EA:93
X509v3 Authority Key Identifier:
keyid:39:88:81:E0:63:83:FD:2C:36:E9:F2:45:C4:BF:A1:30:1D:15:A5:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/ZheJClH79M-pTRLGEsquKEEr6pM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.25.56.0/21
193.228.156.0/24
Signature Algorithm: sha256WithRSAEncryption
50:d4:8b:e1:01:e1:15:07:f6:69:1c:c4:7a:bd:b5:23:23:ca:
52:93:fa:56:c6:76:80:b1:c6:21:0c:71:38:a7:70:54:99:c4:
d0:83:47:8f:cd:f9:bd:96:1a:d0:b3:76:cd:4d:88:26:c2:12:
e3:31:0d:55:85:4c:f2:45:a3:4f:de:52:90:b4:db:63:af:1f:
d9:04:98:6b:d7:e0:7b:e0:d9:05:7b:48:36:e7:06:98:2b:ca:
de:e8:83:cd:e9:2b:71:c5:25:e4:65:41:0a:67:cc:b8:f0:4d:
e8:89:6e:a2:83:59:9c:5b:2a:c4:20:83:38:36:b4:ce:09:bf:
aa:13:30:90:4e:49:56:d8:f7:fc:7f:9b:73:dc:31:24:55:92:
b7:20:bd:4e:91:c9:ff:43:fa:ac:cc:0e:e5:2e:92:1a:f0:42:
cf:a0:94:5a:5a:f9:63:d1:3b:81:52:30:6c:b5:af:9a:bf:ed:
26:20:7f:b6:7e:a1:1f:c0:c6:7d:49:9f:ac:55:48:ef:40:40:
1e:69:6c:f8:d2:7d:fb:9d:ff:03:d5:9e:24:fa:d9:d7:45:95:
57:a8:a1:db:e8:33:00:df:97:1b:4b:a4:52:83:9f:cb:a6:c9:
bf:7b:37:ba:bb:2e:5d:14:2c:89:d8:0e:46:c0:59:2e:90:89:
17:0c:33:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:29 2025 by rpki-client on console.sobornost.net