Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/fkt0k7xGZr7xPzs_ROD74bwXerU.roa
File: fkt0k7xGZr7xPzs_ROD74bwXerU.roa (raw, json)
Hash identifier: ULOdEt3VdfcvW7gsCxZ+iNOypPoRvVALloBYfPcdh1o=
Subject key identifier: 7E:4B:74:93:BC:46:66:BE:F1:3F:3B:3F:44:E0:FB:E1:BC:17:7A:B5
Certificate issuer: /CN=6596f0dc165b7cd209022b2964834c45e74d212c
Certificate serial: 019423D6EFE4C43ED9545D4F13C2F9869B1C
Authority key identifier: 65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/fkt0k7xGZr7xPzs_ROD74bwXerU.roa
Signing time: Wed 01 Jan 2025 21:47:56 +0000
ROA not before: Wed 01 Jan 2025 21:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203895
IP address blocks: 37.152.165.0/24 maxlen: 24
37.152.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ef:e4:c4:3e:d9:54:5d:4f:13:c2:f9:86:9b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6596f0dc165b7cd209022b2964834c45e74d212c
Validity
Not Before: Jan 1 21:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e4b7493bc4666bef13f3b3f44e0fbe1bc177ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5d:c4:bc:54:3b:b4:7a:94:2a:79:25:70:61:
9d:35:d3:5c:65:1e:73:43:c1:e7:20:99:9b:53:14:
b8:9e:11:30:b7:a4:39:c5:ed:34:4e:f2:a1:6e:22:
29:02:08:85:fe:ad:e2:a3:18:21:13:c0:e5:32:c1:
41:50:b5:6d:72:cb:83:f8:46:67:88:87:bb:52:32:
f5:c7:77:b6:60:b9:7c:be:ec:33:84:57:45:21:cb:
54:0d:0d:d5:45:38:15:74:1d:26:54:f8:fe:02:55:
08:d7:7a:dc:c7:e5:ab:e6:18:75:2e:20:32:b7:f3:
46:09:0c:6e:4c:c7:b7:ea:09:7a:06:dc:46:10:f2:
28:e7:35:3f:fa:79:42:94:d3:d1:90:a1:95:60:ac:
37:5b:21:71:fc:b3:b0:4a:4d:89:73:84:8a:14:6d:
30:20:b5:e9:23:4a:34:3f:e1:01:14:ef:9a:41:91:
33:2e:d2:43:99:23:5c:82:ad:39:17:7b:66:1b:d3:
94:82:df:82:71:b4:24:de:bb:ab:47:ab:32:ef:e6:
f7:fd:1d:32:2e:d6:3d:b7:7f:98:b4:54:6b:30:d6:
a9:b2:f2:a6:61:29:7c:75:cf:1a:9b:76:cd:29:df:
46:2d:a5:bc:27:37:8f:6a:5c:ad:8c:7b:28:48:e7:
73:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4B:74:93:BC:46:66:BE:F1:3F:3B:3F:44:E0:FB:E1:BC:17:7A:B5
X509v3 Authority Key Identifier:
keyid:65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/fkt0k7xGZr7xPzs_ROD74bwXerU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.152.165.0-37.152.166.255
Signature Algorithm: sha256WithRSAEncryption
01:be:33:18:b3:2f:6a:f8:d7:a2:63:0e:4c:62:b3:ca:88:27:
67:29:60:c9:6a:68:e6:d2:b3:f8:ee:84:8b:4b:b3:c8:f8:0b:
6e:50:77:9e:2e:64:f8:d7:73:2e:e6:ed:1b:93:0c:e6:9a:24:
74:04:22:11:db:fe:fa:50:f4:10:8f:7d:4b:77:e7:aa:34:6c:
fc:8f:6a:da:8c:d9:a8:84:5e:a5:fd:8d:0f:4a:e5:ad:93:38:
15:aa:ac:fc:2c:76:f1:7c:cf:8b:2f:51:4a:58:ce:51:3b:f4:
10:94:55:08:5f:a5:63:8c:79:05:86:d9:f7:da:b7:05:c7:23:
e2:0b:f8:02:97:5d:aa:ba:8f:c1:b1:3f:d2:23:9b:15:66:12:
4d:cd:2b:c5:5b:99:27:3c:f2:66:44:14:e1:a7:07:c0:f9:dd:
ad:be:25:46:37:17:0a:09:cf:ff:a6:f5:e8:89:b7:ef:a8:c1:
ce:a6:50:05:dd:ba:05:34:2c:c0:32:a3:58:6b:00:b4:c1:f2:
b5:cb:5c:ef:70:ce:b4:74:4e:c1:f1:71:7e:35:2d:57:d5:e6:
93:8b:fd:7e:9a:8c:52:06:49:58:44:61:9b:9a:2b:9c:fe:6d:
dc:32:fd:35:7a:26:d7:12:c2:c3:8e:df:04:9e:af:58:b4:5f:
dc:9d:d6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:31 2025 by rpki-client on console.sobornost.net