Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/3IEe0NhFbzo_Ee23Tq2Gyi4bHNo.roa
File: 3IEe0NhFbzo_Ee23Tq2Gyi4bHNo.roa (raw, json)
Hash identifier: aP71wI7z6WOiD4/gyWek3QeamLb/9xrDZ866UjNjzWA=
Subject key identifier: DC:81:1E:D0:D8:45:6F:3A:3F:11:ED:B7:4E:AD:86:CA:2E:1B:1C:DA
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019427B5B2A7612A5974450410F3C1F6E1AE
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/3IEe0NhFbzo_Ee23Tq2Gyi4bHNo.roa
Signing time: Thu 02 Jan 2025 15:50:06 +0000
ROA not before: Thu 02 Jan 2025 15:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205454
IP address blocks: 37.139.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:b2:a7:61:2a:59:74:45:04:10:f3:c1:f6:e1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 15:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc811ed0d8456f3a3f11edb74ead86ca2e1b1cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d5:4a:57:29:20:a6:33:3c:97:a2:f7:49:e2:
97:9f:d0:42:a7:59:c0:7b:75:9b:61:c8:49:76:31:
92:89:5d:77:dd:b8:ca:c0:e1:93:ac:f7:37:89:47:
2b:8c:2e:66:2c:d4:e6:d9:e7:35:1f:40:9d:96:64:
7d:39:51:e6:64:dc:e4:7b:09:d4:38:c3:8b:9c:b9:
55:0c:38:60:48:fe:30:ab:31:83:b4:34:27:c3:0d:
92:e2:62:67:66:be:c0:a4:6c:a8:0c:ff:29:32:ff:
dd:27:13:08:05:60:cd:c2:d4:d8:a2:57:35:45:28:
b6:6b:7f:df:3b:77:b2:d1:78:ef:7c:b7:84:cd:f0:
c7:8a:0e:ea:81:6c:ed:16:37:ff:9c:b3:df:25:d4:
88:c3:29:65:33:93:4b:ff:8a:73:ec:bf:e2:22:2e:
5f:5e:b0:b4:b9:8c:78:6d:3f:df:f0:00:5b:45:ad:
d3:c5:72:3a:b1:87:bf:8c:39:9d:09:2a:11:3b:86:
00:b0:15:84:ad:ed:f8:6a:1f:98:b5:c3:b5:ce:ac:
b4:c1:02:59:58:c0:32:ee:c1:1e:3a:38:3f:72:08:
94:a7:41:92:9d:dc:8e:63:7a:25:16:e2:0e:80:df:
0e:9f:f5:24:a8:0e:5a:78:24:72:49:cd:1d:f8:68:
dc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:81:1E:D0:D8:45:6F:3A:3F:11:ED:B7:4E:AD:86:CA:2E:1B:1C:DA
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/3IEe0NhFbzo_Ee23Tq2Gyi4bHNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.50.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:62:97:f9:13:26:4b:5e:19:80:de:15:44:bb:ab:c5:56:a9:
92:7a:87:c2:62:2c:d9:84:04:6e:b5:36:20:f5:19:1a:06:f0:
5a:3d:3c:75:45:31:56:41:f8:0d:2a:05:20:81:2b:2d:03:38:
0f:7a:75:5b:e1:47:a6:9d:e2:93:97:5a:f8:62:79:15:fb:67:
ff:60:27:ca:b6:3d:e9:25:de:44:5b:b7:86:0d:43:d1:84:6e:
7e:30:cc:97:57:69:71:fe:6c:dd:c9:2e:16:0c:da:0d:de:ad:
09:f6:84:c5:03:12:38:21:49:75:e8:51:d0:d2:43:80:36:48:
2a:65:a8:30:10:7e:c7:a0:29:c0:4b:a4:84:7e:bb:bf:22:b0:
e0:ba:3d:9c:8c:af:71:86:fa:2d:a1:1f:1c:24:27:b3:50:87:
67:5a:9b:8e:46:43:0e:e7:82:b7:85:4c:5e:2a:d0:fe:1b:fb:
2f:f3:8f:40:26:f2:e9:a6:e0:d2:ec:ec:d3:6c:ef:74:28:f1:
56:3d:94:b6:8f:c3:25:57:99:fa:6e:c3:86:b0:cf:47:2e:1a:
99:fb:f2:e5:25:46:ad:e8:91:5c:73:2a:d6:4b:b6:c7:b8:05:
f3:c5:9e:9b:05:89:8c:53:f9:6c:c6:9c:31:11:aa:c1:7c:69:
36:1e:d9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:16:20 2025 by rpki-client