Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/X8OWy_CudyYOwEZJyz8iEHhHQsw.roa
File: X8OWy_CudyYOwEZJyz8iEHhHQsw.roa (raw, json)
Hash identifier: iEIWS88ZnTp53mvoQ1MLrckBofmSI+Ddk/R1LQUc7Y8=
Subject key identifier: 5F:C3:96:CB:F0:AE:77:26:0E:C0:46:49:CB:3F:22:10:78:47:42:CC
Certificate issuer: /CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Certificate serial: 01949B1F98277C8665EF2A8EC679B10ACB26
Authority key identifier: 3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/X8OWy_CudyYOwEZJyz8iEHhHQsw.roa
Signing time: Sat 25 Jan 2025 01:42:06 +0000
ROA not before: Sat 25 Jan 2025 01:42:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40065
IP address blocks: 37.77.80.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:9b:1f:98:27:7c:86:65:ef:2a:8e:c6:79:b1:0a:cb:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Validity
Not Before: Jan 25 01:42:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5fc396cbf0ae77260ec04649cb3f2210784742cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1c:8a:0f:d3:e5:9b:88:8d:7a:8b:11:22:f5:
30:23:5d:80:07:dc:2a:d2:04:5c:46:8f:b0:bc:db:
71:1a:3f:59:68:52:7a:6d:95:06:e9:69:13:e8:47:
78:e3:c4:26:a4:99:c3:92:48:c9:25:5d:1a:9e:74:
a3:ba:26:4a:00:14:ce:1d:17:e0:2a:7f:08:f4:1e:
b5:c5:87:03:4d:34:3e:8b:3f:58:7b:47:80:5b:00:
f3:8c:2a:67:d5:df:39:64:cb:2d:fa:9f:64:69:05:
a8:c5:7c:85:f9:eb:b8:0c:77:9b:f2:92:f2:a7:d8:
50:df:89:0d:97:8d:57:c5:0e:57:2f:a0:3b:12:b8:
ab:2c:3d:11:13:0c:a3:2a:5b:12:83:8a:d8:55:1d:
da:95:1e:68:c6:92:bd:32:a8:77:b0:aa:66:89:c7:
05:27:6d:b6:77:d7:f6:07:45:0d:8c:d7:86:6f:88:
ae:0d:b8:b3:d0:0c:84:f3:13:65:96:48:c3:07:33:
ba:b2:f9:65:e3:fe:32:cf:75:b6:bb:51:e5:5f:9f:
80:54:3f:ef:2d:42:e8:34:48:5c:63:8c:59:da:3a:
22:1c:5f:91:56:45:75:8d:03:ac:b1:44:f1:b3:18:
4a:8b:97:9f:76:c0:a5:85:48:64:50:3f:03:14:ff:
76:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C3:96:CB:F0:AE:77:26:0E:C0:46:49:CB:3F:22:10:78:47:42:CC
X509v3 Authority Key Identifier:
keyid:3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/X8OWy_CudyYOwEZJyz8iEHhHQsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.80.0/21
Signature Algorithm: sha256WithRSAEncryption
09:82:4c:cd:cd:21:10:a3:f7:b6:b1:1c:c7:9d:6c:3e:6e:a2:
de:5c:d0:3a:c2:a7:0e:b6:41:29:14:35:e8:6f:b6:5c:b1:77:
3b:84:26:90:11:cb:6c:ae:ca:59:a2:03:50:9f:8f:89:98:e4:
e6:60:b8:0b:74:46:2e:e0:e1:52:0a:d2:55:0f:33:ba:ab:48:
32:a2:99:76:d6:8c:57:94:38:f1:39:ee:ac:dd:8e:64:ef:fd:
c6:52:23:ef:81:50:25:da:a5:e5:d7:c8:26:d7:8c:99:c0:fc:
54:ad:57:69:6f:59:0e:ba:bc:3c:37:a1:9c:04:e9:c9:fb:54:
3a:be:8c:b9:49:e7:1b:9f:4c:46:bc:27:7a:e0:8b:42:7a:e2:
ba:8e:22:fb:1f:5a:55:02:83:2b:7d:e1:eb:33:3a:a5:23:12:
3f:e3:20:d1:6d:bb:33:8e:ff:1a:22:63:9c:9f:c6:98:9f:10:
b4:02:a8:45:af:bb:a9:0a:0d:0f:bc:74:68:45:48:b1:2b:7d:
dd:f1:7b:18:63:db:07:28:61:8e:4e:37:a9:b2:23:69:b0:ff:
26:89:95:57:4c:5f:2c:f4:1a:77:0c:86:42:10:8f:af:62:67:
f2:f5:b6:33:9e:38:b6:5d:d5:e9:7e:48:1f:f1:f5:f1:2b:8a:
e3:bd:f4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:56:05 2025 by rpki-client on console.sobornost.net