Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/De0WCETpJfbN-_KAZM7Z5RJy8Ss.roa
File: De0WCETpJfbN-_KAZM7Z5RJy8Ss.roa (raw, json)
Hash identifier: Kcw5neScj8y714DABjN4V/ktwunea0zBp9yHTOn8VeE=
Subject key identifier: 0D:ED:16:08:44:E9:25:F6:CD:FB:F2:80:64:CE:D9:E5:12:72:F1:2B
Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Certificate serial: 01944BC7E4F2F49CC2E67C74CAB5070A104E
Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/De0WCETpJfbN-_KAZM7Z5RJy8Ss.roa
Signing time: Thu 09 Jan 2025 15:56:18 +0000
ROA not before: Thu 09 Jan 2025 15:56:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 37.153.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4b:c7:e4:f2:f4:9c:c2:e6:7c:74:ca:b5:07:0a:10:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Validity
Not Before: Jan 9 15:56:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ded160844e925f6cdfbf28064ced9e51272f12b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d1:be:63:05:61:84:18:d2:c5:31:10:d1:78:
8a:43:a1:94:5c:17:dd:b4:88:e9:2f:de:6d:61:d8:
47:10:9f:fa:e2:26:ad:8d:8b:68:35:bb:bb:2c:29:
67:23:17:1d:28:18:37:b2:f4:e7:c2:20:a0:fc:69:
ba:0d:42:d4:a5:59:4b:7c:f5:2c:2a:b5:de:2a:9b:
5b:b2:53:fc:69:26:bc:12:a0:39:00:24:83:2f:db:
32:23:a9:20:7c:d0:d4:c8:57:0a:18:74:49:77:4a:
2b:00:44:83:ae:b6:27:65:ce:9f:3b:e9:70:84:e9:
fc:66:c8:fc:b7:52:d9:1d:6d:53:1d:78:3e:c2:af:
1f:54:4e:cc:84:5e:86:e2:62:d5:88:83:d6:a0:cb:
3c:8b:1b:7c:b3:5a:4f:aa:54:44:29:35:2f:4b:7e:
48:55:2f:c5:67:5c:0e:55:03:a7:64:8b:50:fc:3a:
25:fa:ec:9d:88:6b:ce:98:68:a2:5c:70:16:1a:32:
b6:8e:c7:9e:35:34:ad:fb:17:71:f4:10:cd:72:c2:
8e:e4:85:50:45:27:2c:7d:60:d9:65:71:a5:06:76:
88:9e:a3:54:fa:8b:53:60:68:84:4d:83:b3:a1:c7:
83:60:c8:99:3a:dd:74:1a:10:99:2c:6f:42:47:1c:
1f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:ED:16:08:44:E9:25:F6:CD:FB:F2:80:64:CE:D9:E5:12:72:F1:2B
X509v3 Authority Key Identifier:
keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/De0WCETpJfbN-_KAZM7Z5RJy8Ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.171.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:1c:9b:99:a5:b2:e9:85:5e:b8:df:df:bf:76:86:ff:b6:c3:
0e:40:a6:e2:e8:23:b6:25:59:40:4c:3d:12:21:d1:b6:48:8b:
54:78:b1:17:0a:13:52:6b:7c:7d:f1:72:87:c9:ee:1b:fb:29:
a2:29:31:1a:ea:b1:64:24:55:15:1d:62:32:85:96:63:31:0c:
80:5e:1b:fa:a9:e0:ea:3f:34:ed:8c:60:cb:bb:7c:6d:7b:7e:
90:9c:5f:63:ec:4f:ac:d3:c8:9d:0e:d0:8c:67:03:94:c8:81:
7b:d5:1c:73:af:25:58:12:1e:e3:9c:e7:d0:c9:20:65:4d:19:
bd:6e:24:4a:b8:75:e6:3e:01:99:da:3c:62:a0:2f:43:17:76:
48:1f:da:fe:95:cf:2d:1a:bc:df:25:8c:c6:86:b8:00:26:1a:
cd:e7:08:c7:e4:e6:13:a1:ea:86:c4:92:f3:d7:78:08:14:93:
27:d4:91:5c:9e:73:70:da:b2:f0:e9:6e:b9:3c:b6:f4:65:fd:
72:38:14:a6:81:75:04:74:e0:c4:8f:5c:2f:23:77:37:48:c3:
a5:ec:73:36:c9:89:c1:cc:88:0c:45:69:3e:51:63:8d:5a:f3:
48:c2:2f:ac:17:dc:76:bc:71:20:d6:f2:5d:e4:75:f7:38:1a:
ea:34:0f:4d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZRLx+Ty9JzC5nx0yrUHChBOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMzhlYzI0MmE0M2U5YzlkNGNlYjI1ZGM5MGU1NDUzMzcz
ZDNmNDYwHhcNMjUwMTA5MTU1NjE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGVkMTYwODQ0ZTkyNWY2Y2RmYmYyODA2NGNlZDllNTEyNzJmMTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNG+YwVhhBjSxTEQ0XiKQ6GUXBfd
tIjpL95tYdhHEJ/64iatjYtoNbu7LClnIxcdKBg3svTnwiCg/Gm6DULUpVlLfPUs
KrXeKptbslP8aSa8EqA5ACSDL9syI6kgfNDUyFcKGHRJd0orAESDrrYnZc6fO+lw
hOn8Zsj8t1LZHW1THXg+wq8fVE7MhF6G4mLViIPWoMs8ixt8s1pPqlREKTUvS35I
VS/FZ1wOVQOnZItQ/Dol+uydiGvOmGiiXHAWGjK2jseeNTSt+xdx9BDNcsKO5IVQ
RScsfWDZZXGlBnaInqNU+otTYGiETYOzoceDYMiZOt10GhCZLG9CRxwfnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA3tFghE6SX2zfvygGTO2eUScvErMB8GA1UdIwQY
MBaAFOE47CQqQ+nJ1M6yXckOVFM3PT9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgt
Njc4NWNkNDU2ODcxLzEvRGUwV0NFVHBKZmJOLV9LQVpNN1o1Ukp5OFNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgtNjc4NWNkNDU2ODcx
LzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJZmrMA0G
CSqGSIb3DQEBCwUAA4IBAQBqHJuZpbLphV6439+/dob/tsMOQKbi6CO2JVlATD0S
IdG2SItUeLEXChNSa3x98XKHye4b+ymiKTEa6rFkJFUVHWIyhZZjMQyAXhv6qeDq
PzTtjGDLu3xte36QnF9j7E+s08idDtCMZwOUyIF71RxzryVYEh7jnOfQySBlTRm9
biRKuHXmPgGZ2jxioC9DF3ZIH9r+lc8tGrzfJYzGhrgAJhrN5wjH5OYToeqGxJLz
13gIFJMn1JFcnnNw2rLw6W65PLb0Zf1yOBSmgXUEdODEj1wvI3c3SMOl7HM2yYnB
zIgMRWk+UWONWvNIwi+sF9x2vHEg1vJd5HX3OBrqNA9N
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:38:51 2025 by rpki-client