Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/K96_AOWKgkKZdHJ9ane8UdRb5Sw.roa
File: K96_AOWKgkKZdHJ9ane8UdRb5Sw.roa (raw, json)
Hash identifier: zREZvoItfcA93n89RVfS/RVFz4iZrqtpBKPkhtfCKUk=
Subject key identifier: 2B:DE:BF:00:E5:8A:82:42:99:74:72:7D:6A:77:BC:51:D4:5B:E5:2C
Certificate issuer: /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial: 018A4FC376DE7B70C973497927FE0FBD00F5
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/K96_AOWKgkKZdHJ9ane8UdRb5Sw.roa
Signing time: Fri 01 Sep 2023 08:02:04 +0000
ROA not before: Fri 01 Sep 2023 08:02:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8220
IP address blocks: 37.1.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4f:c3:76:de:7b:70:c9:73:49:79:27:fe:0f:bd:00:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Validity
Not Before: Sep 1 08:02:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2bdebf00e58a82429974727d6a77bc51d45be52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0b:f6:eb:5a:76:82:8a:10:3b:2a:96:2e:a6:
10:7c:75:3d:12:00:6c:0c:48:53:af:35:15:9b:28:
a2:83:ee:d0:25:e4:66:9e:a0:05:c5:41:4c:6d:e1:
c7:ea:38:ab:0b:3a:f8:df:67:fd:d5:9a:36:c1:06:
21:d7:26:f0:a6:ef:63:18:ab:17:f9:2f:b5:ce:ec:
df:88:04:de:8a:5d:2d:cb:73:ab:1a:44:32:44:58:
36:3d:92:f0:a5:2e:ce:e8:e0:c1:91:80:aa:e5:29:
48:31:af:d0:5d:92:50:8d:9f:55:48:59:4b:21:cf:
5b:a4:47:38:88:81:dc:70:1c:8b:54:7a:7e:5b:01:
98:11:36:52:59:e6:44:b7:e5:39:9c:cc:98:19:61:
04:35:cb:7a:87:ef:b1:4d:f6:b4:5a:49:7c:90:37:
2e:fa:4e:3f:5c:19:fe:b8:83:5b:9e:b3:e5:e3:08:
c9:e1:c4:78:29:41:49:2d:e5:03:a4:03:a0:30:01:
d5:5d:d7:b9:77:c7:e0:d5:b4:ca:7c:c4:9a:37:98:
38:e4:60:e0:78:75:30:7a:74:ea:82:5d:5e:73:8e:
23:ac:f0:4c:fc:bb:e6:b2:f2:d6:6a:38:e9:97:ae:
44:81:59:30:64:a2:de:9c:79:e3:cc:66:30:8c:1f:
2a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DE:BF:00:E5:8A:82:42:99:74:72:7D:6A:77:BC:51:D4:5B:E5:2C
X509v3 Authority Key Identifier:
keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/K96_AOWKgkKZdHJ9ane8UdRb5Sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.224.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:42:b0:6f:ae:59:83:5f:56:bf:90:02:b2:00:e6:e9:18:00:
41:5a:53:25:f3:0a:a2:64:cc:97:7f:1b:ce:68:d4:99:36:d0:
6e:9c:2e:92:aa:7b:4c:77:04:28:8d:56:7f:f7:77:62:aa:17:
fa:2a:1a:73:42:00:fa:6b:62:c0:aa:60:e3:04:a0:d4:9a:18:
ab:51:b5:b0:3b:63:6d:6f:92:8f:8a:ec:8c:ee:18:11:fc:d8:
68:06:fa:4c:05:78:69:bf:66:e7:13:98:c2:51:22:05:73:9f:
ae:1a:57:8e:4a:46:59:41:9f:67:13:6e:47:5b:30:fb:ff:a6:
7a:77:31:c4:b3:6f:c4:d0:b3:11:32:54:d7:4b:fb:cf:c3:08:
ba:88:87:15:2c:14:17:50:8e:47:e3:e4:96:c8:d2:b9:17:6f:
01:ab:bf:57:37:7f:40:12:35:26:bb:19:09:1a:9d:05:29:a9:
c1:e5:91:70:fc:78:d0:61:41:5d:17:62:67:c5:45:89:10:1c:
0b:32:c7:5a:4a:06:d3:3f:fa:13:c1:6a:dd:d7:99:4b:78:7c:
aa:ac:d9:a7:ef:37:6e:c0:67:81:c4:2e:34:79:18:5f:1a:ea:
5a:aa:15:13:65:f5:1c:b1:c5:f8:f4:4c:de:94:58:17:b8:c9:
b7:ac:89:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:58 2025 by rpki-client