Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/TG0C9piKaVRjDBAoOKXP984iuIo.roa
File: TG0C9piKaVRjDBAoOKXP984iuIo.roa (raw, json)
Hash identifier: EaPKdJGvcjOx3gx7VBDHr9Ib+3e6fswqULU49tGRtHE=
Subject key identifier: 4C:6D:02:F6:98:8A:69:54:63:0C:10:28:38:A5:CF:F7:CE:22:B8:8A
Certificate issuer: /CN=2ac78fd517a75f77f3f4fd229ac5e6732560c6e1
Certificate serial: 019422203F211E5E78B6F7DC277EF1842204
Authority key identifier: 2A:C7:8F:D5:17:A7:5F:77:F3:F4:FD:22:9A:C5:E6:73:25:60:C6:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/TG0C9piKaVRjDBAoOKXP984iuIo.roa
Signing time: Wed 01 Jan 2025 13:48:46 +0000
ROA not before: Wed 01 Jan 2025 13:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43779
IP address blocks: 37.235.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:3f:21:1e:5e:78:b6:f7:dc:27:7e:f1:84:22:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac78fd517a75f77f3f4fd229ac5e6732560c6e1
Validity
Not Before: Jan 1 13:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c6d02f6988a6954630c102838a5cff7ce22b88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:19:84:ee:22:03:9b:2e:a6:e9:23:7d:80:1c:
50:46:06:a2:1f:11:f3:84:15:3c:e3:62:09:6a:0e:
ed:c0:4e:2e:ea:12:93:ad:ac:59:d6:db:35:ec:3c:
f1:6f:4e:78:ea:1a:9f:26:78:0d:21:35:7c:eb:48:
f5:61:3e:ab:a4:32:b6:12:1e:12:32:84:44:4d:a6:
43:6d:8c:1d:b1:68:23:b5:fa:12:3f:41:ed:82:f8:
91:f5:c9:3a:57:d6:0b:eb:c6:44:35:67:6a:aa:45:
6d:c2:81:62:7f:1d:f4:97:e1:78:50:50:3e:31:d1:
48:ff:a9:7f:64:66:1b:7c:b4:df:8b:c3:45:f9:1d:
8f:4d:7f:62:c2:63:5d:29:7b:32:72:50:10:e2:a5:
64:82:30:98:36:91:b6:56:af:08:6a:80:3e:e6:d5:
2f:d3:c7:41:5e:81:06:f7:76:9f:cd:a0:d5:93:22:
cd:37:64:4f:39:0e:de:f5:c7:e6:ef:c1:d6:e4:9b:
d1:b4:ce:e3:b5:fa:d8:d7:fe:e6:98:a2:b3:72:27:
c6:a4:0f:ce:d3:32:6d:55:c6:8d:be:00:96:eb:f3:
a8:a1:e9:f5:a2:85:ba:6c:48:d6:7a:39:ba:8f:7e:
ab:cd:d7:32:58:67:bf:e0:ae:83:92:da:31:61:d5:
10:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6D:02:F6:98:8A:69:54:63:0C:10:28:38:A5:CF:F7:CE:22:B8:8A
X509v3 Authority Key Identifier:
keyid:2A:C7:8F:D5:17:A7:5F:77:F3:F4:FD:22:9A:C5:E6:73:25:60:C6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/TG0C9piKaVRjDBAoOKXP984iuIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.78.0/24
Signature Algorithm: sha256WithRSAEncryption
13:f0:fa:45:eb:e4:62:b4:37:72:9a:11:73:37:29:04:21:ac:
67:7a:93:43:71:27:3d:7c:57:b1:7d:ba:73:7a:93:bb:28:c4:
64:e9:59:11:e8:cb:d4:0d:05:9e:1c:e7:8e:cf:50:73:2d:7e:
c1:c2:99:13:e8:e4:90:21:a4:e2:2c:ed:d1:7d:25:ad:f7:1c:
c7:3d:cb:83:4a:ce:15:9e:f8:61:6a:f9:d2:35:48:f3:03:eb:
11:df:6d:bf:55:49:e8:1b:bd:27:6a:2c:d3:5b:b6:4d:5e:60:
c7:f5:54:38:d6:5b:83:73:78:d8:4f:36:a8:fc:2d:0b:99:15:
46:52:9c:72:67:ef:e7:b2:29:fc:b4:c7:23:9b:3d:57:ec:72:
fe:4e:f6:48:b1:6d:a1:86:d0:ed:a8:86:57:29:96:ff:d8:82:
ba:68:dc:65:b6:e7:49:16:03:82:71:6b:6b:75:d8:09:c1:9d:
24:a8:dd:94:29:98:5b:94:ef:22:98:5e:83:d0:e9:0c:0e:25:
99:71:cc:c5:02:3b:71:1f:d0:87:39:dc:3a:e9:e7:3d:4f:18:
f5:95:84:88:07:28:67:cf:66:d2:d8:0b:02:e6:84:fc:bb:c8:
b1:76:20:26:0d:9c:0c:3b:3d:2b:da:6a:c7:fb:4a:ec:d3:a2:
5a:52:9a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:06 2025 by rpki-client on console.sobornost.net