Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/J1sR_X7OX5sAAqL6nR2mRajFZCc.roa
File: J1sR_X7OX5sAAqL6nR2mRajFZCc.roa (raw, json)
Hash identifier: JEROqpt8+G0T5t0g0HCpE0svxugQA9UuID00O94SMT0=
Subject key identifier: 27:5B:11:FD:7E:CE:5F:9B:00:02:A2:FA:9D:1D:A6:45:A8:C5:64:27
Certificate issuer: /CN=2f1bd749074f6f977265a1d06c3b1d93b1d358cd
Certificate serial: 019427B627CD3B9BD4B988577FE10712E41A
Authority key identifier: 2F:1B:D7:49:07:4F:6F:97:72:65:A1:D0:6C:3B:1D:93:B1:D3:58:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/J1sR_X7OX5sAAqL6nR2mRajFZCc.roa
Signing time: Thu 02 Jan 2025 15:50:36 +0000
ROA not before: Thu 02 Jan 2025 15:50:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13231
IP address blocks: 37.9.252.0/23 maxlen: 23
37.9.252.0/24 maxlen: 24
37.9.253.0/24 maxlen: 24
37.9.254.0/23 maxlen: 23
37.9.254.0/24 maxlen: 24
37.9.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:27:cd:3b:9b:d4:b9:88:57:7f:e1:07:12:e4:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f1bd749074f6f977265a1d06c3b1d93b1d358cd
Validity
Not Before: Jan 2 15:50:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=275b11fd7ece5f9b0002a2fa9d1da645a8c56427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:99:97:c7:2e:ba:c3:d6:da:02:21:67:1f:d5:
3b:e4:a4:99:a1:d7:17:3e:e1:a6:4d:85:5c:ad:65:
f7:04:6e:5d:c6:8b:13:28:ab:b3:be:bb:d1:b7:a6:
2b:67:c8:46:4c:86:51:a9:4d:76:7a:56:36:03:5b:
95:2f:8d:33:21:0e:41:b9:30:f5:60:a5:bc:30:46:
97:f4:1d:94:77:c7:fa:f5:57:7e:5e:6c:31:61:f6:
f3:b5:01:23:23:39:d5:c4:11:e4:e3:59:67:30:ab:
a4:f5:02:72:64:a2:c9:d0:d6:58:9b:f3:f2:d8:40:
bc:f4:93:c9:ff:9d:30:aa:42:41:a5:aa:5d:03:30:
bd:5a:f6:06:74:98:f0:3d:36:61:b4:4c:be:a4:8f:
e3:73:e1:4e:89:e6:71:4c:78:09:f8:46:b4:93:f6:
05:af:d3:d6:9f:92:6b:25:57:d3:be:a5:4d:9f:fb:
8b:f6:b4:82:b1:14:70:9d:62:5f:98:52:e7:2b:a0:
8b:ff:46:3d:ca:c6:6b:6e:0a:cb:17:26:f3:a9:46:
87:ba:d3:7f:f3:2a:da:1a:7f:90:e3:bf:18:90:5d:
7a:bb:23:ac:f5:89:39:45:e1:bc:4d:08:97:66:df:
b7:ad:f3:d7:20:2a:a9:49:7d:d3:a6:2b:dc:3a:35:
fd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5B:11:FD:7E:CE:5F:9B:00:02:A2:FA:9D:1D:A6:45:A8:C5:64:27
X509v3 Authority Key Identifier:
keyid:2F:1B:D7:49:07:4F:6F:97:72:65:A1:D0:6C:3B:1D:93:B1:D3:58:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/J1sR_X7OX5sAAqL6nR2mRajFZCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.9.252.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:a1:26:88:15:28:5d:97:84:68:4d:77:93:56:c0:d5:cd:67:
c2:2f:f6:e9:b0:61:0b:25:2d:67:e6:b2:02:ea:97:0e:ff:76:
fd:59:8a:2c:95:fd:11:56:c4:e8:62:0a:d8:ad:07:83:7d:02:
f6:be:fb:51:17:79:29:e6:58:8c:78:8a:c8:0b:41:ce:a6:09:
39:2c:d2:43:72:37:9d:f9:6c:2e:d0:2f:bc:c6:01:ba:c7:c4:
c1:15:67:dd:25:eb:dc:37:27:dd:e2:27:7d:08:9e:62:36:83:
b2:6b:11:69:74:5a:2f:2a:f5:91:fa:ce:12:97:9f:b5:2c:e3:
48:71:91:e3:eb:1e:b1:68:7b:68:57:82:78:0a:29:dd:b9:f5:
cd:57:3d:ac:3e:8a:f9:90:ee:33:0b:3f:32:da:c5:ea:b9:92:
75:bb:d7:33:c0:cd:47:21:9c:b4:fb:b2:c7:8d:fc:a7:2c:0d:
f6:7b:61:d5:57:10:fb:10:c8:f6:7d:04:1f:0c:6b:6f:83:79:
e9:05:3a:b5:75:88:eb:bc:38:f0:a2:61:9b:5b:a4:66:28:0f:
b5:94:28:ed:b0:85:ad:48:2d:0e:03:7c:88:07:f6:82:4a:0e:
e5:23:a6:7d:ff:52:89:c6:0e:78:14:35:2c:21:a1:cb:12:ec:
db:d6:ea:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:42 2025 by rpki-client on console.sobornost.net