Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/6GeHFP0Ketbu87d7DRO9ZAnKiT0.roa
File: 6GeHFP0Ketbu87d7DRO9ZAnKiT0.roa (raw, json)
Hash identifier: Q3eJR3BSlZ4JFHQreAzZwVy1P41pR11wDqAIlfL2GPo=
Subject key identifier: E8:67:87:14:FD:0A:7A:D6:EE:F3:B7:7B:0D:13:BD:64:09:CA:89:3D
Certificate issuer: /CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Certificate serial: 01958CC585C9AEA16E88D297C8EB4DC222D2
Authority key identifier: 3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/6GeHFP0Ketbu87d7DRO9ZAnKiT0.roa
Signing time: Wed 12 Mar 2025 23:51:49 +0000
ROA not before: Wed 12 Mar 2025 23:51:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47191
IP address blocks: 37.77.80.0/21 maxlen: 24
103.143.178.0/23 maxlen: 24
195.246.194.0/24 maxlen: 24
216.180.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:c5:85:c9:ae:a1:6e:88:d2:97:c8:eb:4d:c2:22:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Validity
Not Before: Mar 12 23:51:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8678714fd0a7ad6eef3b77b0d13bd6409ca893d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:19:d9:40:79:73:a2:86:ae:ec:0b:41:30:06:
fb:6f:09:2d:81:1e:d9:3a:44:4f:92:28:5b:0e:6b:
f6:30:f7:fd:6c:f4:83:66:92:8a:2b:a7:ef:20:ec:
84:a9:93:45:31:6d:d2:21:c0:96:3c:f0:97:5a:62:
11:81:e7:e0:0b:02:23:24:31:3a:09:b0:77:6d:65:
15:86:04:8d:a6:cb:32:df:8c:2e:f4:87:4d:5b:1b:
2b:d8:b9:1d:0e:93:0f:4d:f7:d6:da:b6:fc:26:f3:
da:fe:cd:89:62:ec:13:d5:5f:12:a9:f6:1d:d4:84:
39:10:da:14:23:f1:a6:c6:1a:6e:54:cc:41:3f:d1:
00:94:3d:4b:45:17:43:7a:61:5e:fc:ad:6e:9a:43:
26:25:e3:1e:37:0e:be:e4:af:fb:b3:c6:e7:c4:a9:
7c:72:ae:c7:79:ba:7b:4f:f1:fc:17:50:05:46:12:
42:2b:c4:d9:0d:7b:46:34:25:f7:f5:aa:e6:64:55:
13:cc:25:25:ef:fd:41:d2:e5:78:ef:94:c6:f1:5f:
92:93:5f:8e:20:c3:95:a4:0c:1f:f7:f1:7b:b6:aa:
d6:65:f1:13:07:63:08:a6:da:9f:49:04:a0:fc:55:
ae:32:62:4f:1b:80:20:62:07:35:81:14:b1:de:75:
86:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:67:87:14:FD:0A:7A:D6:EE:F3:B7:7B:0D:13:BD:64:09:CA:89:3D
X509v3 Authority Key Identifier:
keyid:3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/6GeHFP0Ketbu87d7DRO9ZAnKiT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.80.0/21
103.143.178.0/23
195.246.194.0/24
216.180.224.0/20
Signature Algorithm: sha256WithRSAEncryption
62:ee:d6:45:57:fa:b0:39:bd:4e:a6:81:6d:aa:20:e4:3b:d1:
ab:5a:9f:06:c4:ce:42:27:cf:dc:f3:d2:32:68:61:86:96:f0:
51:8d:b7:ba:ca:f7:97:44:e8:58:ac:f0:78:f2:ca:aa:32:75:
93:b7:6d:85:d7:0c:e1:1c:e9:10:f1:66:f5:b0:2e:df:36:f4:
78:99:57:4b:93:b3:23:2b:7c:81:19:c6:12:f7:9c:8c:43:63:
63:be:b5:ee:35:c4:4b:f2:ec:39:8d:35:69:f9:15:28:61:ba:
c6:8e:e8:3d:46:fc:fc:e1:c3:2f:84:88:73:7c:c5:7a:0a:ff:
24:db:0c:7c:d0:be:cc:59:81:b9:ee:e4:9a:b3:92:f2:cc:00:
b3:53:38:70:8d:e0:da:67:de:a9:b3:80:a4:bf:a1:a1:f0:5c:
b4:73:88:3d:c8:f6:1a:d8:0e:cc:33:85:f8:c9:04:1d:92:48:
cb:07:86:c4:c7:da:39:51:61:ec:41:ce:66:5e:78:26:2c:21:
01:1e:b4:4e:7d:58:eb:f3:e8:72:a6:78:37:3d:80:2d:6d:c0:
bd:b8:96:44:72:7a:72:e5:77:76:b6:26:f1:b4:a1:b6:e7:23:
19:02:ff:ea:d9:5f:b9:d4:db:0f:c7:16:a0:0e:95:7b:0f:0c:
3a:c6:a2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:34 2025 by rpki-client on console.sobornost.net