Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/jEJLoTRCi4k3NEVL7X3pLoKEmFE.roa
File: jEJLoTRCi4k3NEVL7X3pLoKEmFE.roa (raw, json)
Hash identifier: Lc1enY7HbrV71Kk7B0ntI6Fug2DvBrGWJwGE9EwyfTM=
Subject key identifier: 8C:42:4B:A1:34:42:8B:89:37:34:45:4B:ED:7D:E9:2E:82:84:98:51
Certificate issuer: /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial: 0194DAF4D8A650246852AB117A1D9D07170E
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/jEJLoTRCi4k3NEVL7X3pLoKEmFE.roa
Signing time: Thu 06 Feb 2025 11:11:06 +0000
ROA not before: Thu 06 Feb 2025 11:11:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206663
IP address blocks: 37.203.54.0/24 maxlen: 24
37.203.55.0/24 maxlen: 24
185.94.46.0/24 maxlen: 24
185.94.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:da:f4:d8:a6:50:24:68:52:ab:11:7a:1d:9d:07:17:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
Validity
Not Before: Feb 6 11:11:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c424ba134428b893734454bed7de92e82849851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2e:6c:a4:a5:92:1d:f5:26:87:86:50:c5:8e:
d7:3f:9d:05:ee:9a:d1:a3:db:1b:70:4b:8e:6f:b1:
9b:89:a0:61:4f:b7:5d:29:9a:a7:d4:c5:2b:ee:0b:
69:b4:5b:f7:81:91:0b:e8:3c:2e:91:9a:a7:5f:b7:
ed:94:1f:aa:e3:da:2a:c5:7a:1a:dc:97:5b:03:2c:
63:24:fc:eb:8a:48:65:d9:b4:80:0e:b6:30:d4:12:
d4:a7:f1:c5:fd:0b:04:48:e7:79:a9:b3:42:30:80:
b5:8c:28:7c:58:de:8c:ea:e3:0f:de:19:df:2d:67:
6a:bb:48:87:dd:a3:e8:55:16:06:2a:62:59:f9:e8:
f9:03:e2:f8:c2:e6:e8:02:fa:f4:82:08:a8:a0:4b:
ef:a0:d5:63:25:43:0d:55:72:d5:3b:81:7f:cc:a4:
77:42:3c:ff:7c:f2:39:94:4b:7d:5c:48:cd:7d:fd:
1e:1e:45:f0:a0:18:34:15:83:ed:29:0c:49:0a:d5:
37:7c:e2:79:c3:55:1a:62:e6:28:e2:59:5c:7c:73:
05:3e:cd:40:d0:ed:46:67:30:ce:51:e6:a0:f4:98:
21:bd:85:1d:33:fd:65:84:73:88:99:45:8f:fe:3e:
0f:a6:6a:1c:61:6e:82:a1:2b:7c:5c:a4:2c:c1:b0:
86:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:42:4B:A1:34:42:8B:89:37:34:45:4B:ED:7D:E9:2E:82:84:98:51
X509v3 Authority Key Identifier:
keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/jEJLoTRCi4k3NEVL7X3pLoKEmFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.203.54.0/23
185.94.46.0/23
Signature Algorithm: sha256WithRSAEncryption
50:21:ab:ea:7d:82:05:f8:bc:9a:d9:88:33:e2:3c:c3:e6:df:
3b:1e:b1:fa:d0:73:fd:f0:2e:e4:82:15:6a:ed:32:ed:1f:a2:
cf:eb:dd:1a:2d:0b:82:52:32:98:e9:88:d3:89:b9:ba:d9:f3:
5f:06:14:bc:6e:d9:a1:6a:c8:90:3d:a1:95:0a:d7:4f:c1:d2:
ed:e2:44:74:56:4b:38:b9:f2:d9:1d:8a:f5:00:64:c6:bb:4e:
b2:6a:ba:c7:ad:66:3f:07:d0:1f:72:3b:04:f3:f4:14:2c:27:
ce:69:7d:8a:02:c5:cd:da:a2:12:5b:9a:c1:d5:51:b5:10:bc:
f9:da:fb:d8:46:12:9a:0f:03:d1:00:44:93:7c:91:9a:a4:cf:
ae:3f:5f:ab:7b:3f:97:d8:9c:90:cf:95:bb:49:42:6a:a3:ad:
43:db:fb:d4:09:92:19:87:27:a6:60:a6:60:5f:92:57:db:61:
ec:72:c2:73:d6:56:e6:c9:f0:1c:41:2a:0a:6f:11:05:b4:c4:
88:9b:92:9e:a3:77:4b:82:12:af:d7:e0:81:4b:b8:f9:ec:b9:
71:23:8c:3d:68:e7:bb:fb:ad:11:5e:ec:24:47:f0:18:5d:20:
ec:60:bd:ea:b1:22:eb:13:fd:d5:03:a1:7b:01:26:b5:91:da:
74:78:5d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:47 2025 by rpki-client on console.sobornost.net