Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/tn_vrQK51-NueltWWK4io_XKP_k.roa
File: tn_vrQK51-NueltWWK4io_XKP_k.roa (raw, json)
Hash identifier: jZNMiezHmdC9me949EKUUa90BbUQQ2rzpbvfgap2ijA=
Subject key identifier: B6:7F:EF:AD:02:B9:D7:E3:6E:7A:5B:56:58:AE:22:A3:F5:CA:3F:F9
Certificate issuer: /CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Certificate serial: 01953DD8071F809D61467FCB7D7B112A26FB
Authority key identifier: 3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/tn_vrQK51-NueltWWK4io_XKP_k.roa
Signing time: Tue 25 Feb 2025 16:02:02 +0000
ROA not before: Tue 25 Feb 2025 16:02:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47191
IP address blocks: 37.77.80.0/21 maxlen: 24
195.246.194.0/24 maxlen: 24
216.180.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3d:d8:07:1f:80:9d:61:46:7f:cb:7d:7b:11:2a:26:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Validity
Not Before: Feb 25 16:02:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b67fefad02b9d7e36e7a5b5658ae22a3f5ca3ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:0c:5f:02:21:c2:b5:12:f6:7f:4d:b8:a5:ee:
da:18:7f:ab:db:7f:f1:18:cd:9a:53:c0:5b:0d:97:
17:14:ab:79:9e:a6:13:dd:49:dc:dc:9b:a1:86:fa:
5a:cc:11:06:57:7f:96:cc:1a:da:74:99:1f:03:39:
f4:c2:64:55:84:28:8e:36:b2:fb:59:46:0d:76:af:
1e:6e:32:68:e9:58:cd:5e:de:53:4e:65:9f:04:06:
ad:8f:32:c0:29:38:bb:7b:c6:f9:ff:2e:9f:69:e2:
31:f1:fd:f3:5e:7f:f8:da:33:cf:ff:e8:cf:50:57:
fe:28:2c:19:dc:38:f2:c8:a2:7a:59:e6:9e:dc:d4:
27:a1:0b:75:0e:b5:3e:9c:c3:ca:3a:fc:e4:ec:94:
e7:bb:f2:f8:dd:f6:e9:01:78:17:33:b9:95:ec:54:
87:d8:30:51:4b:58:11:4a:54:d8:2b:89:5e:56:2c:
26:13:6a:01:01:0b:e9:14:88:26:d2:5f:5e:78:c2:
9b:a4:b3:74:7a:aa:f9:b5:01:83:a4:50:12:19:ea:
c4:a1:2b:0a:c4:b7:16:bd:c1:d0:d2:59:a3:2c:0e:
d2:d9:69:cc:cd:66:01:56:ac:5d:46:98:40:51:c8:
db:91:1b:7c:13:e3:f6:12:d3:7a:ff:f4:03:da:2c:
8a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7F:EF:AD:02:B9:D7:E3:6E:7A:5B:56:58:AE:22:A3:F5:CA:3F:F9
X509v3 Authority Key Identifier:
keyid:3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/tn_vrQK51-NueltWWK4io_XKP_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.80.0/21
195.246.194.0/24
216.180.224.0/20
Signature Algorithm: sha256WithRSAEncryption
39:59:8d:a1:e0:b5:9b:f8:6a:f8:61:49:d0:30:e9:dc:ca:38:
7b:48:93:d1:20:8f:6d:1b:98:24:0c:77:1b:29:68:bd:3f:c3:
2b:54:3d:71:99:c0:41:c7:e7:ae:a5:90:b7:ff:75:96:45:29:
8b:de:c4:1f:71:a9:7d:f3:e9:da:b8:12:ea:31:79:d1:6e:f8:
7c:a2:6d:1a:69:68:ab:9c:11:e9:4d:3c:84:1f:f5:52:33:44:
4b:64:66:0b:cf:af:c7:f0:3e:eb:2f:97:58:f2:4a:48:8c:9f:
f8:3c:ce:b1:53:82:60:4c:9b:4c:99:cf:33:b7:9d:d2:90:7b:
8f:b9:30:65:81:45:da:04:20:34:c3:3b:0a:df:e6:61:f6:1a:
34:63:73:2f:12:74:bc:66:b3:7c:22:44:3b:1c:e9:79:2f:4b:
a7:0d:3d:97:8b:4c:46:5c:a5:59:f4:2f:1d:3c:81:89:f8:31:
68:f7:f5:79:8a:5a:a1:d1:12:47:3d:03:38:27:fc:a0:f5:a5:
28:53:28:db:35:9f:6d:ef:ac:c0:78:35:14:06:87:a0:46:e1:
13:fe:24:e0:b2:89:6b:cf:79:b6:54:7f:68:17:35:22:f2:24:
e1:e5:63:39:e6:62:2a:68:85:37:b1:06:f4:36:c5:4d:02:c2:
e6:a2:0f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:56:05 2025 by rpki-client on console.sobornost.net