Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Guq9_227AF1QLHmuAmDO5vj7wwo.roa
File: Guq9_227AF1QLHmuAmDO5vj7wwo.roa (raw, json)
Hash identifier: Ki7NyY4BWI+QiSQOTuOMa/oHIOb179Ppyv2zVHjh1Mo=
Subject key identifier: 1A:EA:BD:FF:6D:BB:00:5D:50:2C:79:AE:02:60:CE:E6:F8:FB:C3:0A
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019427B5AA464059858A874ECE25BB327FB7
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Guq9_227AF1QLHmuAmDO5vj7wwo.roa
Signing time: Thu 02 Jan 2025 15:50:04 +0000
ROA not before: Thu 02 Jan 2025 15:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57010
IP address blocks: 37.139.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:aa:46:40:59:85:8a:87:4e:ce:25:bb:32:7f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 15:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1aeabdff6dbb005d502c79ae0260cee6f8fbc30a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4d:4e:e5:85:81:b0:05:10:65:ad:ed:61:45:
4d:96:1f:22:56:10:44:5b:af:dc:d9:c1:bb:bd:ba:
3f:f4:71:39:24:99:83:e0:0e:af:c2:97:91:47:e5:
41:04:50:0f:67:a8:4f:12:17:35:13:97:ef:cd:fd:
c3:c2:57:0c:92:6e:b9:dc:4f:62:f3:66:a8:9c:0a:
d5:50:09:9c:21:64:8d:99:9a:e8:bb:d9:ed:84:10:
90:aa:d1:c3:ab:24:39:5c:e3:c1:2d:76:3a:25:45:
5d:cb:11:b4:44:a4:43:ed:54:91:f5:12:18:71:32:
9e:67:6a:a2:9b:3a:a0:16:f1:39:ea:f0:40:df:39:
54:e2:9d:ff:6e:95:f3:2f:83:d0:75:84:b7:f9:ec:
5a:11:2c:2d:19:da:f4:4a:5b:a1:e9:df:36:80:77:
76:45:7d:8b:b2:fb:06:df:a5:10:83:0f:28:92:b2:
a8:4e:1f:f9:d2:34:f6:63:70:9f:da:8e:b5:49:0a:
12:41:ff:1c:ae:8c:08:7f:d2:0c:d7:4f:b5:95:f7:
45:1b:a4:3b:31:b3:85:63:b7:bf:75:cf:8b:06:d1:
c3:97:e2:60:f5:61:24:2a:6c:f3:6e:ea:0e:7d:31:
d8:4e:d9:a5:8e:82:fd:76:1e:ed:47:a6:c4:1a:d4:
27:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:EA:BD:FF:6D:BB:00:5D:50:2C:79:AE:02:60:CE:E6:F8:FB:C3:0A
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Guq9_227AF1QLHmuAmDO5vj7wwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.47.0/24
Signature Algorithm: sha256WithRSAEncryption
00:30:2e:d0:68:7e:4d:56:8b:6a:58:9b:7e:d6:87:f2:ee:26:
87:78:9f:63:bf:21:66:05:7c:9f:e2:a1:01:e2:df:d4:67:5c:
b9:dc:4e:ea:64:b5:17:cb:3c:48:a9:ef:b6:4b:67:ba:98:90:
4a:23:1f:a8:a3:1c:e1:96:bc:86:1b:11:0d:6c:d4:0e:d6:55:
97:5d:da:28:0a:d8:3e:18:68:c0:1f:27:60:fa:95:bc:bb:28:
aa:6c:cd:c0:c4:87:a1:77:64:c6:33:59:a3:68:96:9d:ca:15:
aa:10:ac:2e:ab:8c:64:c2:2f:04:f1:21:85:f5:7e:a7:7d:c9:
d4:f2:be:38:86:7a:fb:e8:df:9f:77:26:36:3f:b8:d3:f1:aa:
46:90:6b:73:0b:49:12:ae:98:1f:33:27:27:8d:7d:26:d2:03:
58:eb:98:c6:34:85:5c:dd:dc:b8:f1:ba:95:6a:89:3a:e4:90:
af:02:22:2b:06:8c:2f:88:06:4a:1d:32:90:a3:87:b0:1e:b8:
6a:32:5a:d4:38:c7:95:06:1b:22:81:af:2c:0b:70:f1:1d:c5:
57:a9:f6:8a:a0:f7:20:6c:37:65:2b:c5:56:cc:fe:77:56:e8:
ca:cf:bb:6c:92:24:fd:a4:d7:a1:df:32:7b:ec:b4:ae:46:41:
cb:f6:1a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:00 2025 by rpki-client