Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/SBOuEOR_CvjyUtt4SKCvZBusbBc.roa
File: SBOuEOR_CvjyUtt4SKCvZBusbBc.roa (raw, json)
Hash identifier: rkTdSD8RU6zioQHYMcBu2B7Gt2sYxBJd3IlUz2sFUgw=
Subject key identifier: 48:13:AE:10:E4:7F:0A:F8:F2:52:DB:78:48:A0:AF:64:1B:AC:6C:17
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019427B5A8246077118A122B05263F3FE4AD
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/SBOuEOR_CvjyUtt4SKCvZBusbBc.roa
Signing time: Thu 02 Jan 2025 15:50:03 +0000
ROA not before: Thu 02 Jan 2025 15:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51167
IP address blocks: 37.139.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:a8:24:60:77:11:8a:12:2b:05:26:3f:3f:e4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 15:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4813ae10e47f0af8f252db7848a0af641bac6c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:16:39:66:7e:4a:22:13:76:d9:f3:c3:25:15:
13:05:6b:c2:92:f8:48:d7:c2:98:56:c0:f5:86:ca:
6c:04:83:91:65:1b:9f:da:62:cc:1c:43:5a:62:05:
60:ea:24:e6:e4:40:61:bc:b0:c5:2b:51:33:b4:b6:
f7:5e:ae:09:6a:20:64:2d:df:e0:b6:f4:b9:c2:d8:
29:ca:47:76:2e:0a:dc:61:5b:c3:c0:65:75:15:29:
f9:84:b0:35:ce:a4:32:d6:3c:4a:cc:45:ea:b9:38:
e1:7a:3c:d8:97:d1:60:34:e4:20:2d:de:dc:b4:94:
d5:8a:8e:51:b8:d7:77:91:6a:7e:90:03:c0:59:c4:
2f:0e:d9:87:f6:b5:a6:f3:43:99:27:a8:bd:e1:66:
da:4c:ed:a2:12:f8:3b:a8:d5:e1:ec:df:66:e8:08:
1d:8e:6e:73:36:ce:d2:c4:ff:08:1b:c5:3b:96:5b:
ee:96:6a:5c:f3:8c:92:8d:91:52:e1:2a:45:bc:46:
02:c0:56:7b:89:2c:53:57:5b:c1:fb:5d:35:45:d8:
92:3e:04:f6:9b:14:27:13:3f:82:0f:55:06:2d:d7:
92:e0:c3:23:5e:52:eb:8a:f4:48:95:c1:e0:ef:0b:
42:49:99:f7:d9:c1:65:32:fc:ba:1d:74:fc:cd:a8:
b7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:13:AE:10:E4:7F:0A:F8:F2:52:DB:78:48:A0:AF:64:1B:AC:6C:17
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/SBOuEOR_CvjyUtt4SKCvZBusbBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.52.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:20:14:1e:46:0a:6a:d3:e0:66:52:41:04:f6:75:96:41:21:
57:4f:4c:d7:10:9f:27:ef:a2:eb:52:05:80:a5:2b:9e:ca:6c:
ab:f9:b8:f9:af:cd:95:e2:83:91:76:3e:76:ff:b4:88:48:d9:
da:64:67:66:01:1e:13:2c:70:7c:55:ff:58:63:87:2f:6d:73:
0d:57:30:a7:94:55:f0:86:e4:0d:2a:e6:57:fc:b2:e7:53:87:
99:fd:97:3e:2e:c9:b2:64:83:1a:dc:80:b8:09:27:70:df:3f:
65:e9:46:a5:4b:17:02:b5:14:f3:06:82:c5:47:4d:ff:31:7d:
16:ba:6a:85:c9:10:93:a5:a3:81:cd:ff:e7:5f:0d:56:e2:4a:
f5:53:14:83:43:43:50:60:1c:db:ca:d5:5b:f1:b3:f2:6c:f2:
5e:b5:a6:46:02:31:cd:0e:31:a1:0e:ae:ea:03:22:d4:3c:8d:
41:18:78:ec:67:83:59:d1:92:70:fb:ca:db:57:96:5c:95:92:
f6:87:46:a8:09:2f:be:8d:ec:b5:dc:67:4b:08:97:d5:2e:52:
3c:4e:fa:84:4f:ac:59:e8:9f:e1:cb:1d:3f:e1:84:35:0e:86:
e0:47:23:19:eb:30:b8:34:07:16:f0:8e:ed:f0:39:72:5e:be:
55:4a:1c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 05:01:50 2025 by rpki-client