Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/R5yOg35Urn9iSsbI5w5DBwXIm-g.roa
File: R5yOg35Urn9iSsbI5w5DBwXIm-g.roa (raw, json)
Hash identifier: mkj5iikf4vyeFq7V2264v/IrzZIBghhzXI/0N4FwjAQ=
Subject key identifier: 47:9C:8E:83:7E:54:AE:7F:62:4A:C6:C8:E7:0E:43:07:05:C8:9B:E8
Certificate issuer: /CN=e85b83c87c4a3d8315025379f72987520bb5d046
Certificate serial: 0185711E53BDC16CB942BEE39719DDA37274
Authority key identifier: E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/R5yOg35Urn9iSsbI5w5DBwXIm-g.roa
Signing time: Mon 02 Jan 2023 06:14:51 +0000
ROA not before: Mon 02 Jan 2023 06:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204427
IP address blocks: 37.148.171.0/24 maxlen: 24
37.148.169.0/24 maxlen: 24
37.148.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:53:bd:c1:6c:b9:42:be:e3:97:19:dd:a3:72:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e85b83c87c4a3d8315025379f72987520bb5d046
Validity
Not Before: Jan 2 06:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=479c8e837e54ae7f624ac6c8e70e430705c89be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:39:55:ab:4f:c1:76:34:3c:04:64:b7:04:df:
26:01:bb:e6:a0:6c:69:74:98:1c:1f:05:88:ac:65:
05:3f:c7:e8:ac:e2:87:56:e1:2a:27:55:12:82:72:
e0:0b:a2:56:8d:90:7e:b0:c3:4b:37:d2:78:23:f7:
ee:84:82:d3:03:38:4f:83:6a:43:19:69:b9:f2:41:
af:af:3e:b6:87:84:0c:d8:79:db:06:c6:6d:9a:7a:
e5:8f:0e:79:48:67:be:fa:b5:e6:47:22:0f:3f:5d:
65:e8:10:42:b8:31:af:a9:e0:cc:20:7a:d0:3b:f1:
62:bd:61:41:f6:07:bc:26:9f:72:46:00:80:73:09:
52:ee:fa:77:36:51:87:c8:d7:54:2e:cc:e2:ab:e1:
90:5e:59:42:c9:1d:d4:f8:b6:ad:4f:43:fc:e4:0e:
42:38:50:d6:91:8d:c9:af:4d:d2:f5:05:88:90:b1:
f3:d4:ca:da:ad:18:58:2b:c7:e7:ed:0a:ea:97:db:
49:aa:05:fa:c7:3a:8f:36:de:3f:78:cc:95:be:46:
2a:01:27:8c:ec:77:3a:6e:04:1e:dd:f3:ef:7d:22:
cb:7d:08:78:af:60:2b:a4:d6:0e:bc:86:8b:0e:62:
0d:27:20:33:c7:58:0a:c0:7e:54:84:1a:01:b6:65:
fc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9C:8E:83:7E:54:AE:7F:62:4A:C6:C8:E7:0E:43:07:05:C8:9B:E8
X509v3 Authority Key Identifier:
keyid:E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/R5yOg35Urn9iSsbI5w5DBwXIm-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/6FuDyHxKPYMVAlN59ymHUgu10EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.169.0-37.148.171.255
Signature Algorithm: sha256WithRSAEncryption
14:07:f2:1f:ee:45:b0:6c:ed:e4:e9:0b:b8:48:ff:29:45:49:
e7:18:79:93:9c:92:6e:96:1c:b6:36:3a:aa:9a:8a:43:c2:62:
ae:a5:11:ce:55:8d:d2:fa:6c:18:98:15:29:fd:75:19:3e:3b:
01:f7:dd:5e:a9:95:9f:f4:c8:5e:e1:73:1f:ee:44:f4:5d:66:
05:6c:33:d8:11:06:ab:6d:91:79:d6:6f:f4:52:25:c7:d2:a7:
df:06:25:90:8e:10:3e:fa:1a:47:31:5e:c0:a7:8c:73:84:e5:
63:eb:d3:b3:28:12:f6:aa:ee:4d:f0:bf:50:f6:9b:70:3a:fd:
ba:47:7a:e5:ef:64:4a:81:d0:7b:29:4c:73:cd:d5:d8:5e:a8:
bd:50:94:10:dc:8e:5e:57:f6:f7:70:ee:65:09:4a:a0:c6:8d:
4f:98:e0:35:9c:57:8b:92:6d:97:63:2f:e9:0b:a5:9f:d2:69:
ff:20:b6:79:a3:a4:c7:b2:ff:83:6c:be:4c:a5:3a:96:7d:88:
69:a2:83:de:c5:f5:a6:bd:6d:b6:21:b7:60:64:e0:30:38:52:
51:88:cb:74:2e:bb:a7:3b:25:d4:da:42:07:e7:3e:4b:71:de:
ff:6b:50:fe:44:56:94:ed:dc:b3:84:dc:c9:bc:7b:7b:2c:bb:
f9:c5:01:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:28:08 2025 by rpki-client