Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/s8bNiZs48be9t19z01LNTipy8g4.roa
File: s8bNiZs48be9t19z01LNTipy8g4.roa (raw, json)
Hash identifier: SndmatMLanb8u9c8oQHKQqIIdSyhU5Z2188I0ZKGSJk=
Subject key identifier: B3:C6:CD:89:9B:38:F1:B7:BD:B7:5F:73:D3:52:CD:4E:2A:72:F2:0E
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C8A9772DCF310D74A4D36D5706599
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/s8bNiZs48be9t19z01LNTipy8g4.roa
Signing time: Thu 02 Jan 2025 09:50:35 +0000
ROA not before: Thu 02 Jan 2025 09:50:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206835
IP address blocks: 37.79.227.0/24 maxlen: 24
37.79.228.0/24 maxlen: 24
37.79.229.0/24 maxlen: 24
37.79.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:8a:97:72:dc:f3:10:d7:4a:4d:36:d5:70:65:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3c6cd899b38f1b7bdb75f73d352cd4e2a72f20e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a2:d7:70:1f:61:64:e6:5f:de:2b:f2:ab:9b:
e8:b2:fe:e5:22:93:33:df:84:9f:92:e3:5b:71:70:
85:e6:93:73:9d:c7:2a:d7:f0:d5:fa:6a:8c:ee:45:
af:78:6c:4a:21:bb:72:af:c1:a6:25:1b:59:e7:f4:
29:0e:f6:69:65:c5:bf:2f:21:ab:7b:47:2c:39:eb:
17:80:a9:51:d9:2d:21:27:d0:bf:fd:dc:46:3b:73:
f4:94:82:eb:42:64:71:b5:79:30:b6:88:20:40:a9:
59:e1:2d:44:0f:5a:db:2c:fe:b0:17:5c:ee:44:20:
e3:6a:86:3d:a7:df:bc:d4:3e:9f:97:ff:9b:0d:7d:
5d:8b:1f:7f:a4:8b:22:be:2f:6c:5a:ce:43:f8:4c:
53:55:89:5a:25:c9:f9:d8:16:48:02:8b:f0:16:a0:
ca:65:ba:7b:21:c9:94:1d:6f:f6:9e:39:80:af:79:
e9:08:ba:ec:3e:c8:cd:54:3c:9a:16:e0:ce:84:e2:
66:55:95:d5:32:66:1e:7f:b8:04:ca:ad:de:ca:14:
be:5b:d1:b3:5f:e2:6a:ba:c7:9f:0c:a3:fc:bf:52:
56:56:58:29:cf:42:7c:4a:85:d7:b0:f3:80:c2:95:
45:26:bc:5c:eb:20:5f:1d:9c:c7:6d:07:e0:de:0b:
b7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C6:CD:89:9B:38:F1:B7:BD:B7:5F:73:D3:52:CD:4E:2A:72:F2:0E
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/s8bNiZs48be9t19z01LNTipy8g4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.79.227.0-37.79.230.255
Signature Algorithm: sha256WithRSAEncryption
32:99:fe:ad:19:75:96:33:b8:f8:45:37:43:ec:ee:fa:07:f7:
45:d0:52:6e:0d:6b:72:04:3d:89:f5:82:78:13:83:51:88:b0:
28:02:b8:2f:f7:12:fb:c6:77:c1:10:db:8a:8d:2a:5b:51:fe:
32:43:59:1d:35:aa:65:a7:0f:40:42:3e:18:30:42:58:47:43:
47:20:c6:7f:c2:75:79:be:0d:e0:d8:0d:d6:43:30:95:58:60:
f2:4e:54:f5:bf:08:6e:74:a2:3d:a9:80:9a:4a:0b:20:72:6e:
ae:cb:94:ef:4b:12:6f:1d:f8:71:a2:4c:19:08:63:96:65:d8:
be:dc:e5:40:a8:51:e9:82:99:73:67:24:46:27:05:01:26:62:
d3:19:33:9a:c4:38:be:e2:b5:5f:95:94:0e:e8:f2:3d:f6:cd:
43:cb:ab:9f:b9:fb:c5:f3:ff:30:03:e3:35:f4:fa:20:f7:a8:
dc:27:04:33:ac:0c:af:c6:f1:10:d3:06:ef:82:6b:7b:84:34:
7b:05:07:93:14:b6:16:e2:64:be:6f:30:d9:33:df:86:75:42:
5b:36:5f:58:9b:6f:86:b3:f8:48:4e:60:ec:68:90:cb:65:70:
1e:42:85:8a:6f:40:65:f5:cc:7a:b9:f7:ba:01:de:b6:35:17:
38:5c:8b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:07 2025 by rpki-client on console.sobornost.net