Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/6w2llJPr5u5R0U0gFJBhkfjASt8.roa
File: 6w2llJPr5u5R0U0gFJBhkfjASt8.roa (raw, json)
Hash identifier: Et1DM1KW1gT7dKyxGFfIxs38O3+sH74ZansUhbBdzew=
Subject key identifier: EB:0D:A5:94:93:EB:E6:EE:51:D1:4D:20:14:90:61:91:F8:C0:4A:DF
Certificate issuer: /CN=29993007c7c92df6178e7cb43183fd7f52a526d8
Certificate serial: 0194A7BE7CD7E08B8682F0513654B682439C
Authority key identifier: 29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/6w2llJPr5u5R0U0gFJBhkfjASt8.roa
Signing time: Mon 27 Jan 2025 12:31:06 +0000
ROA not before: Mon 27 Jan 2025 12:31:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42216
IP address blocks: 37.77.25.0/24 maxlen: 24
37.77.26.0/24 maxlen: 24
37.77.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a7:be:7c:d7:e0:8b:86:82:f0:51:36:54:b6:82:43:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29993007c7c92df6178e7cb43183fd7f52a526d8
Validity
Not Before: Jan 27 12:31:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb0da59493ebe6ee51d14d2014906191f8c04adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6e:77:8c:e1:99:29:24:ad:24:28:eb:6a:4a:
12:87:3a:b7:df:68:9f:38:71:0e:76:67:8a:84:34:
e1:99:78:ea:5e:8f:0c:c3:6d:a1:05:56:72:03:91:
22:4c:8d:1a:a6:f4:88:89:82:a0:c0:f5:e5:81:2f:
ba:5d:e3:2a:ab:1f:71:9f:37:ae:b3:da:54:4e:3c:
47:d9:22:d2:13:a1:e6:28:b6:9b:80:25:1a:7c:05:
a8:5b:36:9d:bb:32:47:ad:18:fd:2f:2b:0e:99:f2:
c9:a8:52:49:4f:06:24:b3:d9:49:7a:a0:b2:0c:75:
0e:52:0f:c2:c4:24:c0:bb:70:e2:e3:b8:18:77:22:
71:26:7d:31:07:11:36:92:c6:70:3d:46:db:a9:9d:
30:a7:57:7d:6f:9a:d5:0b:55:49:6d:b9:17:a7:ee:
d5:56:3b:d5:0a:d5:76:ad:7d:51:99:15:af:1e:5f:
0d:b3:16:b2:7b:51:af:12:b4:cb:6c:76:ba:ff:83:
07:24:9a:e6:5a:ba:a4:a6:24:b9:1f:42:6d:1d:f4:
6c:e5:d5:e0:ad:71:22:69:11:09:87:60:84:0e:44:
31:9a:3e:c5:7d:05:22:c7:3d:c4:80:66:0c:ab:6b:
10:42:87:9a:ad:e2:f3:dc:8f:57:9e:6d:15:1a:59:
3a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0D:A5:94:93:EB:E6:EE:51:D1:4D:20:14:90:61:91:F8:C0:4A:DF
X509v3 Authority Key Identifier:
keyid:29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/6w2llJPr5u5R0U0gFJBhkfjASt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.25.0-37.77.27.255
Signature Algorithm: sha256WithRSAEncryption
72:37:39:e4:54:82:10:e6:fb:be:56:65:7e:fb:d0:6a:cc:b8:
08:63:25:e4:2e:2a:7e:39:54:4a:53:f9:26:7d:2d:86:98:67:
92:8e:59:ae:e3:6c:f1:8a:a8:bc:71:f1:e4:15:c6:3c:dd:40:
20:db:50:02:f4:d1:e7:b0:08:5d:83:06:af:21:ab:79:1b:27:
ed:06:e6:0d:d5:8f:3c:8e:b0:bb:df:6c:b0:67:f4:ff:da:e4:
b1:6a:9c:3b:25:ae:5a:02:d5:d4:d2:01:aa:42:3e:01:d8:1b:
90:9f:1d:63:aa:09:04:1b:f9:a1:79:83:1a:e2:81:37:ce:b0:
66:31:f4:18:26:b2:c7:33:a5:74:35:08:f6:cf:4d:72:96:a4:
f6:e3:97:e6:e8:57:c9:0c:64:83:af:f8:65:a4:6e:eb:17:84:
5f:13:21:c1:61:87:1b:3e:0c:4b:ba:30:e0:3c:5a:a4:5a:cb:
82:fa:7a:ae:89:e8:c7:1b:f6:5d:e6:3e:ba:14:3c:4c:a2:1a:
2f:53:f9:12:1f:b6:80:e5:02:2b:00:15:fc:67:a2:f2:01:7b:
6c:c4:a7:82:18:99:67:3f:6e:87:b4:6a:4a:77:bf:71:fa:cb:
a8:aa:27:4a:86:65:0c:ee:c6:67:f7:f4:90:95:ed:50:39:7a:
8a:15:3e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:49:34 2025 by rpki-client