Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/DnwRMwBmJzqGVSY9VahPH_kYu8Y.roa
File: DnwRMwBmJzqGVSY9VahPH_kYu8Y.roa (raw, json)
Hash identifier: ILOshVNQTHSQA/AU2fXZQpEbr13COQJuZvH/yImCqVw=
Subject key identifier: 0E:7C:11:33:00:66:27:3A:86:55:26:3D:55:A8:4F:1F:F9:18:BB:C6
Certificate issuer: /CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Certificate serial: 019421B1E4B45D73FC8B9914D406F6EDD915
Authority key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/DnwRMwBmJzqGVSY9VahPH_kYu8Y.roa
Signing time: Wed 01 Jan 2025 11:48:14 +0000
ROA not before: Wed 01 Jan 2025 11:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209829
IP address blocks: 37.218.241.0/24 maxlen: 24
37.218.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:e4:b4:5d:73:fc:8b:99:14:d4:06:f6:ed:d9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Validity
Not Before: Jan 1 11:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e7c11330066273a8655263d55a84f1ff918bbc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c8:48:21:e6:f6:28:17:2f:9f:84:04:74:61:
f2:bc:36:a8:e7:b0:38:c6:58:1b:85:60:0f:36:fb:
01:03:c4:57:f6:b6:88:c5:d8:08:2f:da:e5:3f:85:
06:ba:d3:a2:d5:4c:85:62:5c:bb:f3:41:0c:59:82:
ad:33:61:40:19:1b:75:35:ad:81:c8:ae:2b:d8:5a:
e4:e0:ee:7e:70:c3:4c:89:e2:03:90:9b:40:d0:a4:
1b:46:ce:80:91:c7:4e:0b:1b:9b:7e:92:eb:c1:d4:
28:8b:22:4e:83:bc:0b:a7:00:11:d6:2b:0d:c9:8e:
cd:c6:da:79:73:ee:67:1e:1e:bf:b7:7f:a1:1f:53:
c2:a7:8a:71:d0:52:61:25:f6:1e:b0:d0:ba:9d:33:
6a:73:13:a0:ce:5d:23:81:e5:8d:81:8e:77:1f:3b:
03:9c:11:1e:22:8e:16:c1:5d:37:70:16:4b:c8:2d:
4f:a5:f3:b1:4c:d6:9f:6f:9d:db:04:dd:65:47:6a:
56:8b:1c:57:c9:67:fd:a2:be:ec:b6:81:79:4f:41:
3b:b9:14:d8:36:d2:9e:29:df:ad:16:c3:5d:91:99:
99:a0:8e:04:f7:50:72:2f:be:b6:86:81:7d:15:e0:
ab:07:de:85:21:bc:68:16:be:9b:67:34:13:d3:ad:
2e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7C:11:33:00:66:27:3A:86:55:26:3D:55:A8:4F:1F:F9:18:BB:C6
X509v3 Authority Key Identifier:
keyid:DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/DnwRMwBmJzqGVSY9VahPH_kYu8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.218.241.0/24
37.218.244.0/24
Signature Algorithm: sha256WithRSAEncryption
43:1d:88:f2:b2:6c:08:fe:de:15:e4:d5:d1:7d:9b:27:f1:77:
a2:24:6d:a3:2b:2e:18:23:45:98:42:b7:f6:55:ab:70:71:12:
f1:b1:f0:d7:7b:bd:b7:38:63:bc:c1:ea:59:eb:63:b7:4b:32:
be:6f:46:c7:84:d6:62:c8:59:3c:0c:4f:3c:56:62:dc:d3:cb:
82:82:2b:a1:93:d1:1d:49:d5:23:c2:c3:3e:db:43:d1:9e:76:
88:89:b5:08:56:33:83:25:b6:71:00:96:ea:f7:98:a3:39:82:
4f:42:8f:02:73:c1:f7:c1:ab:1a:db:7a:e7:94:0f:27:7d:30:
40:1c:a0:40:f9:72:2d:e6:27:1c:c2:03:e1:e8:f5:19:64:da:
6b:a8:28:52:9a:c9:54:8a:0a:d0:34:62:a7:f4:e3:ce:c9:4b:
ef:e3:37:d9:0b:ac:e6:fc:5a:d4:f9:4f:81:0b:bf:29:26:99:
e8:92:ac:29:fa:12:72:6f:3e:fe:95:b3:9e:e9:55:0f:54:87:
2e:a9:2a:aa:7d:cb:e5:87:59:66:5b:88:f5:3a:cb:c6:9f:7c:
43:2c:21:42:98:5e:bf:ab:68:ea:4f:cf:fe:63:60:18:b9:66:
d5:23:7e:33:42:77:23:d6:44:45:36:69:ff:b9:a7:47:a4:3f:
9a:93:06:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 00:08:46 2025 by rpki-client