Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/DB6rarxO5PVFM7ASWu_vFRZCT3U.roa
File: DB6rarxO5PVFM7ASWu_vFRZCT3U.roa (raw, json)
Hash identifier: jIPp7cp88bFzRhDp7ETaFJ5M3tM+UraJ/sQFT337XAo=
Subject key identifier: 0C:1E:AB:6A:BC:4E:E4:F5:45:33:B0:12:5A:EF:EF:15:16:42:4F:75
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019427B5AEC693A26F30FA900EE3EF215179
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/DB6rarxO5PVFM7ASWu_vFRZCT3U.roa
Signing time: Thu 02 Jan 2025 15:50:05 +0000
ROA not before: Thu 02 Jan 2025 15:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199790
IP address blocks: 37.139.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:ae:c6:93:a2:6f:30:fa:90:0e:e3:ef:21:51:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 15:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c1eab6abc4ee4f54533b0125aefef1516424f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:38:72:6c:43:fe:2e:15:9a:23:25:7f:08:d7:
63:5d:c3:70:6f:0b:4a:63:58:cd:9f:81:28:e7:84:
b2:e2:32:d2:46:10:f1:e4:f0:18:37:20:da:d4:60:
21:4e:8c:fa:52:79:25:5c:c3:89:4a:85:78:cd:cb:
23:1d:d1:03:90:0d:15:9c:b0:78:2d:12:0d:e0:2f:
c6:4a:56:d2:68:90:0e:1e:29:ab:85:c4:50:29:bb:
59:68:6d:54:10:97:3b:5e:31:12:dd:a0:c6:48:df:
e4:70:7a:7c:ee:e0:32:ed:ab:7a:14:b2:93:3b:5c:
bf:b0:66:9f:6c:d7:82:44:b1:c0:b7:ef:db:0e:40:
dc:ff:56:32:55:bc:6f:72:15:10:aa:b5:ec:72:af:
3c:1f:9c:4d:e5:f0:76:2c:fc:e2:cd:8d:08:2f:30:
f5:3e:1a:de:eb:cc:bc:0d:91:45:52:a7:59:f6:2b:
22:0b:16:c7:90:41:c5:14:ba:7c:d8:0e:fb:39:6e:
f8:5b:c1:50:a8:0c:ae:eb:d7:db:53:96:d3:e5:0c:
35:67:01:dc:42:10:6c:46:cc:bf:6f:30:29:63:a7:
41:2f:df:09:1a:fb:7c:56:9b:1e:53:cf:d1:6f:c8:
d9:36:b0:db:34:8b:e2:b5:fc:28:8d:1c:cf:6f:87:
a3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1E:AB:6A:BC:4E:E4:F5:45:33:B0:12:5A:EF:EF:15:16:42:4F:75
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/DB6rarxO5PVFM7ASWu_vFRZCT3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.38.0/24
Signature Algorithm: sha256WithRSAEncryption
12:64:74:2c:69:fc:91:29:31:59:4a:9b:75:e3:06:82:1c:18:
8a:53:f0:c2:12:ff:9f:62:ba:ac:09:34:40:99:94:a3:8b:cc:
41:b8:9c:ff:f7:e2:01:16:ec:7c:75:86:5a:a8:9c:14:d7:04:
dc:ae:5b:2b:f1:9a:8a:9b:62:58:e4:82:5b:57:f1:81:8a:75:
cf:13:cc:85:03:43:de:c1:2d:0b:02:c6:2c:e9:5a:52:97:c3:
c2:ca:f4:94:01:95:aa:b4:21:c6:ff:ad:fa:20:1e:55:07:b6:
78:aa:8f:e2:6d:79:91:96:bd:f9:a9:7e:d6:64:28:0d:47:40:
3e:bd:85:2c:62:0b:69:ba:4a:b3:e5:1d:71:8d:b8:4a:fa:7e:
29:41:83:8c:2c:58:cc:99:d7:bc:c8:de:41:be:fe:1c:48:68:
98:c1:57:2e:77:ad:d0:e8:3f:a7:65:1e:35:7f:b3:5c:b4:ee:
59:cb:85:59:dd:88:5e:72:97:2d:f9:e7:bb:2a:2e:70:5a:05:
8e:54:90:7b:ae:65:b4:cb:f4:7f:8b:ae:e0:30:a4:21:e2:96:
70:4d:d0:b1:22:75:7b:35:62:e6:a7:54:02:55:e7:8c:68:d6:
de:8a:70:f4:1a:3e:b4:b6:86:ea:04:97:bd:c5:dd:63:9b:00:
fc:1b:a9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:30 2025 by rpki-client