Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/LW1Zgrl1AuIyZ0TANdiYAQPsFO8.roa
File: LW1Zgrl1AuIyZ0TANdiYAQPsFO8.roa (raw, json)
Hash identifier: iVwkY5LDsevudRi+8E7VOO5CLE3gq0iP/zCPwp/ST70=
Subject key identifier: 2D:6D:59:82:B9:75:02:E2:32:67:44:C0:35:D8:98:01:03:EC:14:EF
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019424B3002994333074F3D05748F37A63D8
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/LW1Zgrl1AuIyZ0TANdiYAQPsFO8.roa
Signing time: Thu 02 Jan 2025 01:48:18 +0000
ROA not before: Thu 02 Jan 2025 01:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210817
IP address blocks: 37.148.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:00:29:94:33:30:74:f3:d0:57:48:f3:7a:63:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 01:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d6d5982b97502e2326744c035d8980103ec14ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e1:a8:7d:8d:70:a2:e1:b4:20:a9:b3:27:a5:
42:09:58:15:08:ee:a4:85:56:ac:d9:6f:cf:4f:fa:
07:32:c5:a4:3d:56:d2:94:c2:c0:75:cc:50:e9:13:
3f:5c:f4:e6:46:93:b6:c4:82:fc:b9:28:22:aa:73:
01:06:5e:91:21:fa:8a:d9:05:03:27:62:f9:50:68:
fb:2b:4d:59:e9:79:b7:86:f8:4c:90:9a:d6:be:f9:
6d:bd:40:06:72:51:39:e0:27:a1:89:72:b3:71:4d:
e8:b2:70:96:71:06:9e:e8:ff:64:0b:99:a5:02:50:
62:c9:02:02:8d:19:e0:3c:70:3b:be:37:d8:6d:cf:
95:9f:f9:02:b8:df:61:39:5f:1f:f6:da:af:ee:22:
d8:08:95:2e:d2:8a:d2:ba:36:51:ca:6f:af:3a:ae:
6b:66:a6:c7:b0:84:37:46:df:b3:1f:54:d5:e7:cf:
f5:67:b0:de:7f:35:80:9d:44:34:e5:7b:77:14:71:
fd:d1:8c:6f:6a:55:d5:86:2f:41:f5:62:26:fa:7e:
f0:39:44:aa:da:c6:57:60:16:0e:8a:cf:f8:7a:91:
93:be:91:8a:05:22:7d:5d:af:50:4a:82:e1:8a:45:
77:fc:15:06:1a:52:25:5b:d2:06:4b:8c:53:e2:ac:
cf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6D:59:82:B9:75:02:E2:32:67:44:C0:35:D8:98:01:03:EC:14:EF
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/LW1Zgrl1AuIyZ0TANdiYAQPsFO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.172.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:58:41:df:d1:c7:d9:f5:68:81:da:f7:32:12:f8:99:cc:b0:
0c:ea:ce:e6:33:a3:12:18:0b:f8:16:34:ed:a0:8a:29:8f:b0:
f1:e1:34:96:9f:7c:fa:a6:88:6e:fa:e7:77:77:e6:44:a8:f9:
9b:be:48:e7:2a:a5:c5:c8:b3:26:da:e0:5f:c5:de:3d:6a:e8:
8d:10:83:2c:c7:29:a2:e1:fb:a3:76:7e:52:0f:81:67:96:82:
37:e4:17:1f:aa:d8:0a:40:ca:b3:be:4e:ac:48:8e:0f:aa:b0:
47:94:50:36:74:2f:de:cb:2e:41:0e:e9:37:d8:b4:98:14:3e:
ff:74:c0:cc:be:61:52:ed:fc:75:0c:cc:aa:3c:bc:39:c6:60:
9e:bf:27:5b:58:03:2e:de:e0:e1:ff:47:70:2b:8b:ea:c7:4c:
95:3a:fc:5f:19:c2:fa:76:13:a3:77:7c:c8:3a:a9:b7:96:f4:
a4:50:94:09:3c:ec:4f:88:17:a0:8f:8c:d2:bc:31:7c:04:f4:
3b:ee:7e:d0:0c:48:5d:11:46:7a:0e:00:69:39:a8:23:0e:f6:
c3:66:05:32:71:e4:e5:18:88:f5:b8:9a:e8:d4:66:fa:23:a2:
07:03:9e:25:f0:18:17:15:36:b4:aa:f0:f9:cd:40:40:dc:98:
02:db:37:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:11 2025 by rpki-client