Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/8w-emkXV3mI78HaDrtYjSaJ4uvs.roa
File: 8w-emkXV3mI78HaDrtYjSaJ4uvs.roa (raw, json)
Hash identifier: UguZNtdmoMKuTfuNCkr9dLxX2oEt7raXUr+3iy0x1NM=
Subject key identifier: F3:0F:9E:9A:45:D5:DE:62:3B:F0:76:83:AE:D6:23:49:A2:78:BA:FB
Certificate issuer: /CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Certificate serial: 019421B1CA6E083D13AA6814403BA4F0289C
Authority key identifier: 3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/8w-emkXV3mI78HaDrtYjSaJ4uvs.roa
Signing time: Wed 01 Jan 2025 11:48:07 +0000
ROA not before: Wed 01 Jan 2025 11:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47191
IP address blocks: 37.77.80.0/21 maxlen: 24
216.180.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ca:6e:08:3d:13:aa:68:14:40:3b:a4:f0:28:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Validity
Not Before: Jan 1 11:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f30f9e9a45d5de623bf07683aed62349a278bafb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f8:30:f0:9c:ad:17:2f:38:85:67:da:18:48:
b7:db:34:10:40:52:7d:f9:a6:89:1f:6b:a6:21:d0:
41:21:e2:a4:09:0f:e1:69:22:d9:da:ba:df:ab:71:
85:99:01:7c:5f:77:ff:59:cb:cc:1a:98:4e:d9:23:
c8:93:ae:3c:e6:da:92:05:62:f2:24:f0:b8:8b:bd:
9d:a7:f9:b4:8f:bd:96:6d:a2:fb:d9:cd:14:22:14:
d7:64:da:4f:f6:ac:df:9f:c9:f4:ef:28:34:f6:cb:
fb:c0:4c:b0:68:fd:d0:be:77:25:62:5e:24:d8:a7:
a2:37:a4:9d:62:d5:67:9f:83:a5:46:7d:ec:8d:0b:
d3:0d:5b:d3:00:8f:5e:ea:06:b3:e2:64:28:93:a2:
6a:c6:31:44:ba:6b:4b:49:cf:f1:48:9e:00:24:40:
48:3f:a7:15:11:02:d4:38:1c:1b:3a:8c:43:3d:25:
25:9a:15:9a:61:83:0a:94:42:06:24:23:49:37:fe:
24:0e:f6:4a:a6:26:5f:cd:51:7a:90:90:1f:24:1b:
aa:cb:39:53:8d:0d:60:59:a6:b9:cb:7d:25:92:39:
07:c8:c8:f9:d3:80:00:5d:5f:92:28:30:77:fc:6c:
42:c4:90:cb:82:65:20:12:0f:53:0b:d0:1b:c3:d6:
e7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0F:9E:9A:45:D5:DE:62:3B:F0:76:83:AE:D6:23:49:A2:78:BA:FB
X509v3 Authority Key Identifier:
keyid:3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/8w-emkXV3mI78HaDrtYjSaJ4uvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.80.0/21
216.180.224.0/20
Signature Algorithm: sha256WithRSAEncryption
72:8b:8f:cc:4f:57:4d:fc:f6:d9:37:69:8e:2e:ae:3b:c7:0d:
71:4d:12:c2:27:4b:c9:e2:bf:e5:d4:ca:7b:26:6b:5d:0b:48:
0c:f9:67:21:3c:8e:00:f8:83:ca:4b:da:10:c7:1c:c6:3a:12:
ef:3f:85:6e:87:b4:00:c3:5e:90:63:31:0a:a4:d3:dd:e7:3b:
aa:ad:a1:a0:fa:ec:ec:26:73:56:67:c0:32:b4:ba:f9:25:ee:
70:69:29:2f:06:63:79:57:39:5f:c3:e1:71:8c:f3:ef:c1:50:
fc:ab:a1:57:35:b8:32:42:93:5f:c3:5a:19:37:f5:0d:74:51:
5b:03:2c:e5:7b:d2:7a:e4:30:73:46:9a:d4:25:ec:6b:68:69:
ec:6a:40:84:14:33:53:9c:53:f9:f4:08:bd:3a:61:51:9d:6b:
52:fd:4a:c0:c2:c0:a5:0a:cc:58:f7:ca:cc:25:e5:78:0f:42:
01:b8:4f:75:d9:a2:d3:de:c9:c7:f4:a3:3b:7e:8f:0e:4c:24:
a7:32:4b:e4:78:53:08:92:0d:84:1f:d8:16:cd:19:34:1e:89:
7d:f3:ef:72:2f:2f:41:f5:ae:8c:24:10:a3:cd:76:fc:90:90:
76:4a:69:4c:0c:86:59:2b:39:52:ba:1b:fd:3f:60:67:43:12:
ed:43:0d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:17:00 2025 by rpki-client on console.sobornost.net