Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/eb1cd5-c871-4d4f-ac3f-4b599d08ed1c/1/_bm5Gy3dEEAthXbSAvn_aHRUscE.roa
File: _bm5Gy3dEEAthXbSAvn_aHRUscE.roa (raw, json)
Hash identifier: R4qp2ZWsMTzxX8Rn6SbuGmKI1qSaHFEejeYsc6gPKNg=
Subject key identifier: FD:B9:B9:1B:2D:DD:10:40:2D:85:76:D2:02:F9:FF:68:74:54:B1:C1
Certificate issuer: /CN=cafd3133df47ce2bb07c472fbe6bb4e9178c6233
Certificate serial: D62782
Authority key identifier: CA:FD:31:33:DF:47:CE:2B:B0:7C:47:2F:BE:6B:B4:E9:17:8C:62:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yv0xM99HziuwfEcvvmu06ReMYjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/eb1cd5-c871-4d4f-ac3f-4b599d08ed1c/1/_bm5Gy3dEEAthXbSAvn_aHRUscE.roa
Signing time: Sat 01 Jan 2022 11:56:38 +0000
ROA not before: Sat 01 Jan 2022 11:56:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 37.72.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14034818 (0xd62782)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cafd3133df47ce2bb07c472fbe6bb4e9178c6233
Validity
Not Before: Jan 1 11:56:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fdb9b91b2ddd10402d8576d202f9ff687454b1c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fa:46:f1:2b:0e:9a:87:30:e0:2d:30:92:ef:
47:e3:1c:18:bc:69:26:2d:74:66:cc:f9:f7:61:40:
84:02:5e:63:06:c2:b9:e4:65:f5:7c:08:2c:78:cc:
e8:b4:bd:a5:24:ea:f0:66:31:6d:96:fa:24:69:8d:
bb:f8:be:07:31:73:30:0c:ee:3e:72:a7:2e:b4:08:
b7:7b:fc:56:3a:66:c2:03:c4:43:f4:64:d4:74:ce:
07:cd:dd:f6:ec:8f:65:8b:d4:a8:f8:b8:11:4b:b4:
1d:df:c5:3d:7e:6d:f4:77:09:32:44:08:31:58:f9:
ef:46:ec:ce:5b:e3:ac:27:f4:40:13:7e:2e:fd:d4:
25:46:d0:14:39:0b:13:3c:45:f4:2b:53:e4:0d:be:
c8:fa:1d:cc:c2:5b:2e:f1:24:80:25:d4:eb:a5:f4:
26:76:bd:2b:97:36:e0:19:5c:38:00:b7:95:6e:2c:
cd:8e:26:7f:12:91:ed:fb:9f:c5:70:e2:2f:df:eb:
7a:73:c3:d8:5a:45:e6:a3:e5:4b:f7:ed:0d:47:1b:
1c:37:a0:4e:d4:d5:46:00:70:7f:01:8e:e2:42:ba:
3f:69:f7:c3:62:b6:84:85:bf:d0:be:26:80:28:5e:
d6:26:51:69:57:6a:41:ff:6b:d7:9f:59:a3:26:ea:
cf:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B9:B9:1B:2D:DD:10:40:2D:85:76:D2:02:F9:FF:68:74:54:B1:C1
X509v3 Authority Key Identifier:
keyid:CA:FD:31:33:DF:47:CE:2B:B0:7C:47:2F:BE:6B:B4:E9:17:8C:62:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yv0xM99HziuwfEcvvmu06ReMYjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/eb1cd5-c871-4d4f-ac3f-4b599d08ed1c/1/_bm5Gy3dEEAthXbSAvn_aHRUscE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/eb1cd5-c871-4d4f-ac3f-4b599d08ed1c/1/yv0xM99HziuwfEcvvmu06ReMYjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.133.0/24
Signature Algorithm: sha256WithRSAEncryption
29:96:1a:bd:75:16:f2:b7:5d:62:9a:6f:82:19:b9:78:38:58:
9d:ba:f1:43:28:c4:2a:5d:b8:3c:8a:75:07:05:84:98:2d:33:
5b:04:02:a8:16:81:a8:7c:7d:1e:08:3c:36:f8:24:54:ed:1e:
4c:56:ad:28:0a:c2:f5:06:8f:4b:de:06:d9:53:f5:8e:f2:b3:
d4:90:de:d7:3e:61:2a:ad:68:5c:ef:53:35:d9:94:af:94:f6:
43:4d:98:83:c4:1e:a3:34:72:d0:76:9c:91:dd:6c:59:d5:99:
ed:14:67:c5:a6:20:df:cd:a2:cf:68:8d:fb:49:e7:6e:3d:3e:
15:b7:d1:d3:14:71:6c:9c:3f:ee:d9:51:c3:17:59:14:e0:b3:
80:c0:30:70:3f:d5:e0:d8:bd:84:e4:3f:c4:a2:92:98:65:84:
20:f0:9c:dd:81:3a:5b:ed:29:8b:04:c7:d7:c2:5b:81:1b:86:
e3:f3:d9:8b:4a:a2:a3:0e:a3:0e:b2:48:99:10:ea:50:f2:11:
a9:76:ae:a1:c8:8f:f3:c8:af:8f:b1:e5:8c:5a:97:c8:ca:d2:
5a:c2:03:fb:a2:38:76:43:b9:fa:9f:2c:2e:b1:b0:a2:6f:69:
e5:42:d1:36:15:c8:83:f0:1c:0b:df:df:02:f3:94:7e:e3:68:
95:d7:d5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:12:02 2025 by rpki-client