Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/69jsCPkwXK1lmTxeQTyCID9PpjA.roa
File: 69jsCPkwXK1lmTxeQTyCID9PpjA.roa (raw, json)
Hash identifier: h/Q47E5oO3l5JxeekNZr7l4rqZH5SyA0969VUEHNB8w=
Subject key identifier: EB:D8:EC:08:F9:30:5C:AD:65:99:3C:5E:41:3C:82:20:3F:4F:A6:30
Certificate issuer: /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Certificate serial: 019427482214CAF8557BE0BD57017ACC1B0D
Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/69jsCPkwXK1lmTxeQTyCID9PpjA.roa
Signing time: Thu 02 Jan 2025 13:50:26 +0000
ROA not before: Thu 02 Jan 2025 13:50:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214990
IP address blocks: 37.32.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:22:14:ca:f8:55:7b:e0:bd:57:01:7a:cc:1b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Validity
Not Before: Jan 2 13:50:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebd8ec08f9305cad65993c5e413c82203f4fa630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:36:87:da:c5:85:14:48:a9:ac:02:63:f5:0b:
75:1d:ed:d2:26:1b:6a:29:de:4f:73:3c:6e:c6:bb:
35:16:5d:40:14:34:26:38:41:cf:c4:2e:51:eb:58:
47:52:28:3d:25:39:88:0b:23:01:b5:ed:87:7a:cd:
55:e6:db:20:7d:7e:ae:30:f6:67:00:74:f8:3a:72:
7b:31:65:f8:91:e7:6d:bd:5e:22:99:6e:ed:07:64:
44:2a:2e:aa:cd:13:fe:49:5b:1d:75:22:11:e5:86:
0e:ff:12:36:02:f7:5b:11:6f:e0:a9:79:90:c6:84:
4a:0f:c6:dc:ed:48:ee:d3:1b:17:c0:f4:63:cb:22:
34:cb:e4:8b:ab:92:6b:85:0d:3f:e2:91:fc:ec:74:
2e:2f:87:cc:57:11:0b:72:3a:f0:c0:b6:19:7e:ef:
52:63:2c:79:46:65:ec:32:81:f1:2c:c9:a0:fb:d4:
e4:42:55:61:9b:ba:62:ec:93:75:c4:8c:e9:f2:e8:
d8:f3:72:55:07:b1:b3:ba:ac:b8:16:14:60:62:bd:
c8:1f:cb:05:50:59:a0:3b:b7:81:a3:40:82:47:38:
7b:f3:a3:7f:19:a0:11:42:1a:48:3b:e3:71:1c:59:
dc:8b:1f:dc:6b:a3:a1:b1:8d:13:32:44:e2:94:cf:
6a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D8:EC:08:F9:30:5C:AD:65:99:3C:5E:41:3C:82:20:3F:4F:A6:30
X509v3 Authority Key Identifier:
keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/69jsCPkwXK1lmTxeQTyCID9PpjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.71.0/24
Signature Algorithm: sha256WithRSAEncryption
93:48:8b:72:ce:61:e7:6f:19:0a:00:e3:94:1c:88:00:8e:3f:
7b:dc:82:8b:aa:ef:56:39:fc:1e:24:93:aa:35:e3:b5:28:64:
36:69:78:7b:cd:95:63:3d:92:02:fb:20:44:30:a4:14:08:34:
9f:28:b2:ed:8f:2b:76:e1:1b:2a:f0:94:e0:58:24:10:eb:ba:
29:65:04:b3:f9:40:eb:3e:00:00:3f:e9:bf:dc:6e:af:2d:fd:
f0:45:80:77:d8:de:54:fc:53:03:c1:3f:29:4b:b3:2b:3b:48:
b5:34:c0:89:91:b5:f5:8b:ba:e9:f9:2c:80:d3:f9:5b:32:63:
37:f6:ef:f6:1d:2a:c0:2c:51:6e:84:e3:88:53:03:93:d1:21:
d3:e4:be:9d:22:cc:38:7c:5a:bf:97:77:f1:31:9a:19:23:39:
ff:f6:37:9c:53:45:1e:d2:08:7c:e5:7d:85:62:6a:21:24:37:
72:28:c3:62:11:a4:ef:33:6c:9f:ee:3e:af:c9:bf:93:31:50:
9d:df:b6:70:d1:44:60:ee:82:d7:07:b0:a6:70:8c:d2:9d:f0:
77:74:98:2b:ce:5a:e1:b6:7c:ef:fa:1a:25:72:35:6f:6a:9b:
d5:ad:37:75:f2:ed:56:73:ce:35:88:13:05:5b:38:6f:9f:57:
ff:4b:a8:9d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSCIUyvhVe+C9VwF6zBsNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZTgyYmExNzE1ZDZhZWFlNWIwMTAyNzI1ZmZlMGM4MzQ3
MzVkN2QwHhcNMjUwMTAyMTM1MDI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmQ4ZWMwOGY5MzA1Y2FkNjU5OTNjNWU0MTNjODIyMDNmNGZhNjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujaH2sWFFEiprAJj9Qt1He3SJhtq
Kd5Pczxuxrs1Fl1AFDQmOEHPxC5R61hHUig9JTmICyMBte2Hes1V5tsgfX6uMPZn
AHT4OnJ7MWX4kedtvV4imW7tB2REKi6qzRP+SVsddSIR5YYO/xI2AvdbEW/gqXmQ
xoRKD8bc7Uju0xsXwPRjyyI0y+SLq5JrhQ0/4pH87HQuL4fMVxELcjrwwLYZfu9S
Yyx5RmXsMoHxLMmg+9TkQlVhm7pi7JN1xIzp8ujY83JVB7Gzuqy4FhRgYr3IH8sF
UFmgO7eBo0CCRzh786N/GaARQhpIO+NxHFncix/ca6OhsY0TMkTilM9q9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOvY7Aj5MFytZZk8XkE8giA/T6YwMB8GA1UdIwQY
MBaAFLToK6FxXWrq5bAQJyX/4Mg0c119MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMt
YzdkMTk5MzBkNjZkLzEvNjlqc0NQa3dYSzFsbVR4ZVFUeUNJRDlQcGpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMtYzdkMTk5MzBkNjZk
LzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJSBHMA0G
CSqGSIb3DQEBCwUAA4IBAQCTSItyzmHnbxkKAOOUHIgAjj973IKLqu9WOfweJJOq
NeO1KGQ2aXh7zZVjPZIC+yBEMKQUCDSfKLLtjyt24Rsq8JTgWCQQ67opZQSz+UDr
PgAAP+m/3G6vLf3wRYB32N5U/FMDwT8pS7MrO0i1NMCJkbX1i7rp+SyA0/lbMmM3
9u/2HSrALFFuhOOIUwOT0SHT5L6dIsw4fFq/l3fxMZoZIzn/9jecU0Ue0gh85X2F
YmohJDdyKMNiEaTvM2yf7j6vyb+TMVCd37Zw0URg7oLXB7CmcIzSnfB3dJgrzlrh
tnzv+holcjVvapvVrTd18u1Wc841iBMFWzhvn1f/S6id
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:12:47 2025 by rpki-client