Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/fjY_g_wwgFPVt57q0tJYGzzoSDw.roa
File: fjY_g_wwgFPVt57q0tJYGzzoSDw.roa (raw, json)
Hash identifier: qq4Ldl54/taiWut/8vwq9PH71gezdeLMf1VMPmsHUe8=
Subject key identifier: 7E:36:3F:83:FC:30:80:53:D5:B7:9E:EA:D2:D2:58:1B:3C:E8:48:3C
Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Certificate serial: 01941FFA9D5F0A80B96417142A6ED991D29C
Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/fjY_g_wwgFPVt57q0tJYGzzoSDw.roa
Signing time: Wed 01 Jan 2025 03:48:25 +0000
ROA not before: Wed 01 Jan 2025 03:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205544
IP address blocks: 37.44.216.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9d:5f:0a:80:b9:64:17:14:2a:6e:d9:91:d2:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Validity
Not Before: Jan 1 03:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e363f83fc308053d5b79eead2d2581b3ce8483c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:88:f9:d9:af:86:e5:1f:fd:02:8c:96:8f:8d:
5b:1a:56:84:42:53:08:a3:1b:08:4a:94:87:6a:23:
8c:1e:4e:a1:ad:fb:51:5c:f1:28:9b:b1:1a:c0:59:
ca:b6:95:0e:bd:d8:92:79:c0:7a:67:1f:2b:e9:bd:
5b:52:3d:63:5e:42:e4:71:1b:11:b9:8f:ab:bc:3d:
4f:8f:9c:c8:c5:c7:c6:6c:05:74:37:a0:d4:d5:94:
d9:09:38:49:e6:a1:df:8a:6b:6d:f2:5d:df:10:5b:
7d:6c:94:ff:2e:bb:83:33:74:02:3d:16:2d:ca:c2:
fc:40:31:2d:a7:4f:63:a8:8a:81:9f:2e:1b:0e:62:
10:67:46:09:fc:6b:57:6a:2a:ab:8b:5f:04:15:89:
ef:78:02:a4:55:c0:9c:3c:62:5e:6d:0a:e3:13:6b:
f6:67:f1:c5:71:80:38:97:06:46:13:8d:77:2a:03:
af:d1:11:73:86:63:67:87:f2:94:e6:8d:78:ca:65:
51:f1:e9:e2:d8:62:5d:d6:fa:f2:04:07:34:94:b0:
70:ee:c8:84:4f:6c:6e:c6:bb:d3:03:83:3c:c9:ec:
2f:52:1d:47:a9:6d:5c:63:a6:00:4a:8f:5c:33:9c:
a1:45:a3:3f:8f:fd:c3:c8:dd:be:18:13:7a:f0:fb:
19:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:36:3F:83:FC:30:80:53:D5:B7:9E:EA:D2:D2:58:1B:3C:E8:48:3C
X509v3 Authority Key Identifier:
keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/fjY_g_wwgFPVt57q0tJYGzzoSDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.216.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:08:f0:ba:37:71:68:a4:b0:82:a7:84:2b:2c:8b:84:f5:f1:
48:af:f1:c1:30:ef:81:eb:59:d4:45:6f:ae:d9:8d:48:31:76:
ac:c6:b0:0e:c4:c1:e1:7d:91:06:cf:77:e8:bd:df:11:db:9e:
76:3a:b7:ea:e2:fe:47:29:71:54:1b:1f:cc:ed:10:7a:14:8f:
ae:04:7a:49:ac:85:27:c9:eb:55:c0:1c:05:35:8f:e7:a3:24:
0c:d6:aa:ad:9d:99:43:43:d1:9d:2f:35:cf:9b:15:1e:db:f9:
28:ff:47:f4:e8:84:db:a0:c4:5c:a1:f8:2a:b4:43:61:88:ee:
ca:83:9b:fa:d9:8f:59:65:93:8c:50:10:4c:0d:ab:e1:c0:25:
66:37:44:ee:3a:6d:74:f5:b0:f0:16:33:4e:15:f5:d3:82:8b:
00:cb:35:ac:90:9b:ad:68:5c:02:e9:ca:dd:14:a3:08:61:2d:
45:6d:64:b0:88:31:d1:f7:f9:19:65:d1:96:09:e4:0e:11:52:
73:5e:d7:d3:a2:07:6a:f1:39:2f:c2:4d:3f:f4:69:cb:5d:8d:
ce:f9:c4:91:d7:3b:c5:46:21:9e:e2:9c:0c:84:f2:f2:d6:d6:
34:7b:96:24:fe:4e:51:aa:44:77:cc:a1:19:95:55:3a:7d:81:
b6:65:19:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:03 2025 by rpki-client