Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/eb1cd5-c871-4d4f-ac3f-4b599d08ed1c/1/BxSIpWN_2zDsR54Br3K-ysL-qoA.roa
File: BxSIpWN_2zDsR54Br3K-ysL-qoA.roa (raw, json)
Hash identifier: 632lbG1dhlJzJ7C8ecqoAvcqJEfxvtgJfBQc+RyUn4I=
Subject key identifier: 07:14:88:A5:63:7F:DB:30:EC:47:9E:01:AF:72:BE:CA:C2:FE:AA:80
Certificate issuer: /CN=cafd3133df47ce2bb07c472fbe6bb4e9178c6233
Certificate serial: D787F3
Authority key identifier: CA:FD:31:33:DF:47:CE:2B:B0:7C:47:2F:BE:6B:B4:E9:17:8C:62:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yv0xM99HziuwfEcvvmu06ReMYjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/eb1cd5-c871-4d4f-ac3f-4b599d08ed1c/1/BxSIpWN_2zDsR54Br3K-ysL-qoA.roa
Signing time: Sat 01 Jan 2022 11:56:39 +0000
ROA not before: Sat 01 Jan 2022 11:56:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 37.72.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14125043 (0xd787f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cafd3133df47ce2bb07c472fbe6bb4e9178c6233
Validity
Not Before: Jan 1 11:56:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=071488a5637fdb30ec479e01af72becac2feaa80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:52:0d:7b:b6:fa:9e:f4:94:52:9c:5e:0f:08:
84:76:16:e9:d1:7e:18:92:e1:35:78:ac:16:fe:06:
95:ff:43:47:46:fb:f6:15:4d:0e:2e:d9:6e:0d:41:
0e:3f:2b:01:6e:0c:94:cc:5d:cb:dd:34:e5:5d:4a:
39:54:dd:70:03:49:53:0e:61:db:28:6e:e0:3c:ad:
65:2c:79:97:55:51:33:a1:bd:ed:32:a8:74:e6:a5:
90:02:01:4e:ac:cb:ec:30:33:c6:10:47:d7:85:48:
2f:6e:95:de:62:41:29:ec:d0:16:c0:e4:31:7b:51:
e8:31:73:84:b8:fe:2e:af:09:07:ec:d1:74:0d:eb:
67:6c:82:8c:a6:53:6d:51:79:3d:ab:1d:cf:e0:37:
e3:93:2a:8c:28:72:f2:ab:62:f7:f1:89:99:d7:d7:
95:26:5e:de:fb:46:c1:3c:91:88:ab:bd:c8:cf:49:
04:23:82:c5:2b:1d:11:15:7c:f5:88:2b:c2:3b:47:
12:1e:f6:47:9f:29:a6:54:71:31:d7:07:97:f7:53:
1a:15:69:18:bb:b1:af:4f:b7:2f:cd:27:49:cf:3a:
26:0f:26:c5:04:a3:91:11:03:f2:8b:b5:02:eb:a9:
9d:40:ff:9b:37:bd:ac:a7:92:5d:00:73:ce:20:57:
0c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:14:88:A5:63:7F:DB:30:EC:47:9E:01:AF:72:BE:CA:C2:FE:AA:80
X509v3 Authority Key Identifier:
keyid:CA:FD:31:33:DF:47:CE:2B:B0:7C:47:2F:BE:6B:B4:E9:17:8C:62:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yv0xM99HziuwfEcvvmu06ReMYjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/eb1cd5-c871-4d4f-ac3f-4b599d08ed1c/1/BxSIpWN_2zDsR54Br3K-ysL-qoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/eb1cd5-c871-4d4f-ac3f-4b599d08ed1c/1/yv0xM99HziuwfEcvvmu06ReMYjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.133.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:cf:af:b3:59:59:88:b5:d3:fe:9a:c5:81:45:37:b3:17:77:
7d:2a:19:3e:a6:e5:53:8b:1c:2e:72:35:fa:d6:a3:07:1e:71:
93:1b:f5:be:f2:03:1f:1f:68:d5:bd:8c:d2:e3:b2:2c:b5:8a:
17:b1:72:ab:0f:d9:70:45:cf:51:88:c9:76:33:00:6f:44:83:
7f:a3:6d:27:77:79:27:f4:64:71:02:b9:71:b2:51:db:09:f2:
b6:94:bd:cd:67:b3:e4:52:57:be:93:14:d5:7c:d5:51:a0:3e:
25:3d:1f:89:70:63:f8:c4:51:d3:77:49:92:66:a0:67:a3:de:
af:0f:7e:29:96:3a:2c:7c:b9:eb:7c:b0:7a:78:04:52:fb:02:
53:fa:da:2f:97:fe:8d:39:74:a3:48:af:41:d5:90:48:59:41:
ac:91:88:b6:16:17:36:0b:51:9a:bb:29:55:e3:03:55:c3:47:
0b:ca:8c:46:74:70:2c:47:f6:10:9d:e9:d3:e4:39:47:11:1f:
29:68:7d:b4:2a:3a:cd:6a:c7:8a:0d:a7:34:cb:92:dd:bb:28:
6f:96:66:5f:e5:78:c3:d7:3e:9e:c0:35:e2:6e:55:21:7d:f7:
02:3d:c8:4c:35:31:77:da:18:3b:f7:31:52:7f:cf:21:4c:a1:
d3:f8:8c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:29:02 2025 by rpki-client