Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/36PcBEuS0YaFeejxK9Rr2Qkonyg.roa
File: 36PcBEuS0YaFeejxK9Rr2Qkonyg.roa (raw, json)
Hash identifier: crvn7STBSQ8hyIYObc7IEiRjwRLGGVAHLgb6Zwn91c8=
Subject key identifier: DF:A3:DC:04:4B:92:D1:86:85:79:E8:F1:2B:D4:6B:D9:09:28:9F:28
Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748
Certificate serial: 019422FAF11ECDF925DFED4226927648D826
Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/36PcBEuS0YaFeejxK9Rr2Qkonyg.roa
Signing time: Wed 01 Jan 2025 17:47:38 +0000
ROA not before: Wed 01 Jan 2025 17:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51238
IP address blocks: 109.236.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:f1:1e:cd:f9:25:df:ed:42:26:92:76:48:d8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748
Validity
Not Before: Jan 1 17:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfa3dc044b92d1868579e8f12bd46bd909289f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:70:83:73:62:05:17:95:27:20:34:81:07:a4:
71:e2:75:85:2f:77:66:66:0e:81:f5:45:42:96:ac:
06:90:6f:f0:3e:26:cd:73:49:ae:8a:40:ea:df:f8:
5f:ff:79:63:b7:8e:e9:5a:ec:83:11:46:52:00:3e:
12:34:fe:55:79:a5:db:8b:35:75:2e:38:00:45:2a:
09:fb:33:60:65:24:2d:88:ac:ae:ef:0d:dc:f7:ab:
9f:81:e9:8b:64:2d:ed:65:91:fe:99:c8:dd:04:fc:
76:54:40:1f:00:8f:c1:09:d0:9a:cb:41:1a:d3:7d:
dc:93:8e:9c:f4:4e:12:92:60:69:27:50:73:87:62:
fa:ad:09:4a:83:98:bf:32:7a:c5:00:f3:98:4f:06:
8b:a5:37:df:61:07:3c:30:49:36:9a:60:09:6d:71:
a6:e3:7f:8d:76:03:a5:fa:b0:cd:b2:a9:fa:c8:44:
bf:91:da:8d:10:8b:54:c8:c0:01:5c:88:c0:89:1a:
39:78:73:14:70:20:b7:d6:f4:2c:c9:09:0b:0e:84:
f2:4e:10:69:90:84:a5:0a:45:8c:5d:da:77:fa:dd:
79:96:fa:22:ae:06:c6:13:8d:d7:ea:c2:37:d3:3a:
dd:d6:68:96:b0:19:49:3d:76:db:fb:00:49:a4:25:
5d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A3:DC:04:4B:92:D1:86:85:79:E8:F1:2B:D4:6B:D9:09:28:9F:28
X509v3 Authority Key Identifier:
keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/36PcBEuS0YaFeejxK9Rr2Qkonyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.250.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:19:5b:3f:e4:87:bc:11:b0:c8:55:dd:07:14:20:2d:4c:96:
5f:84:5c:62:38:da:3a:83:92:c2:58:57:73:23:bf:eb:e0:5d:
16:9e:5d:eb:0f:ac:a8:59:ab:02:6c:bb:07:99:64:a1:03:bd:
12:5f:c0:26:cd:2b:d2:ab:a5:a7:49:1e:eb:4f:9d:2a:a8:e3:
ba:0c:42:0c:86:f8:f6:18:e6:cb:2c:97:ec:e1:2f:66:3c:48:
38:70:a9:fd:98:6c:b9:ae:af:0c:dd:e9:0e:df:eb:3b:de:67:
c3:93:1f:8b:2e:84:94:ba:e2:71:5f:4b:86:0f:fc:48:81:64:
ba:39:c6:13:2e:ab:78:a0:ea:25:cc:65:92:1b:4d:07:90:73:
5c:66:9b:d0:55:43:46:92:8c:13:1d:a5:3a:f8:2a:bb:2f:18:
bd:f0:0f:1d:d6:79:fc:28:a4:e6:a7:c9:16:b3:9a:f2:c1:2b:
5c:38:ab:64:e9:f5:4c:1d:98:0e:0e:c4:41:6a:91:c8:ff:6a:
5f:1d:92:6f:80:5c:cc:f2:60:15:cd:5e:ce:64:bb:51:1d:f4:
f2:8a:b1:bb:8a:65:9e:83:5c:98:74:ed:64:9f:6a:31:d6:02:
bb:7a:47:e7:f1:39:b2:41:95:66:63:14:88:14:02:cd:81:d7:
4c:7a:4d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:43 2025 by rpki-client on console.sobornost.net