Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/fGdpO31JlgHxGWh3k5SvTBNpbkw.roa
File: fGdpO31JlgHxGWh3k5SvTBNpbkw.roa (raw, json)
Hash identifier: zqy5jRhLqwKvdrwdBIG9FL3JylpehexjnqF4a5p8lpA=
Subject key identifier: 7C:67:69:3B:7D:49:96:01:F1:19:68:77:93:94:AF:4C:13:69:6E:4C
Certificate issuer: /CN=63444210ea08ac529878d51917e3b30054d620d1
Certificate serial: 019267A79496458C73C408748A447C3EEEC8
Authority key identifier: 63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/fGdpO31JlgHxGWh3k5SvTBNpbkw.roa
Signing time: Mon 07 Oct 2024 15:44:48 +0000
ROA not before: Mon 07 Oct 2024 15:44:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 2.37.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:67:a7:94:96:45:8c:73:c4:08:74:8a:44:7c:3e:ee:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63444210ea08ac529878d51917e3b30054d620d1
Validity
Not Before: Oct 7 15:44:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c67693b7d499601f11968779394af4c13696e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f5:30:5f:05:9d:d1:54:94:04:bc:88:89:f3:
9a:80:d8:58:79:41:d1:12:41:22:2b:a3:4e:1e:f0:
ba:42:32:92:60:c4:69:4a:13:6a:93:0d:c5:f3:35:
08:95:83:8c:af:55:bd:8f:cf:bb:cb:4e:7d:da:cd:
4e:47:54:bb:96:67:7a:0a:7b:23:af:ba:d1:3b:1e:
ad:91:2c:32:fc:a4:7c:c7:4d:04:e8:c1:c9:c2:fb:
ac:87:79:5c:9b:df:28:54:ef:5a:7e:05:77:bc:10:
74:b4:30:c0:a3:c0:de:48:43:3b:ff:7b:a0:ee:ad:
a3:29:f2:fc:b6:83:be:3d:b6:77:48:bd:cf:7f:4b:
aa:c6:ef:01:6e:01:fc:1d:57:60:20:a9:c2:b8:9a:
62:4f:66:0b:97:7c:cb:98:d0:fa:ce:63:df:7f:a3:
4d:a2:83:18:99:3f:6e:84:4d:72:47:f2:ab:cf:74:
fb:e8:bc:9c:24:94:1c:fd:75:9f:33:01:ff:ef:ad:
43:9e:51:59:d5:aa:cc:38:9e:68:98:49:5f:52:7a:
33:c9:02:99:94:f2:96:20:a1:ca:1c:18:91:68:05:
98:d8:80:e9:58:45:04:f2:58:45:6b:d8:79:74:9b:
4f:3f:8e:de:6a:d4:0e:7b:ef:85:3a:30:4e:bb:8d:
43:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:67:69:3B:7D:49:96:01:F1:19:68:77:93:94:AF:4C:13:69:6E:4C
X509v3 Authority Key Identifier:
keyid:63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/fGdpO31JlgHxGWh3k5SvTBNpbkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.37.111.0/24
Signature Algorithm: sha256WithRSAEncryption
16:a9:ac:5c:d2:ff:90:aa:2f:26:29:bf:4a:1e:cd:7e:e0:06:
f7:0c:9b:d5:d8:6d:c2:70:12:a1:a8:8e:67:8b:9b:52:d9:2e:
0f:aa:7e:8d:bb:b7:0e:9b:6c:88:54:c1:90:3f:df:65:8b:25:
f7:72:00:e5:c0:16:8d:a8:d7:59:a5:3e:0c:57:13:33:ab:a1:
f5:eb:72:4b:bb:67:bc:ac:b9:62:0f:20:ae:89:94:f6:31:e8:
bd:d7:e5:ed:1f:d4:ef:ff:70:4f:f9:12:a9:ff:8a:f1:40:e8:
41:af:1b:47:a6:10:93:ac:cd:37:63:2b:c5:e6:c6:84:46:57:
eb:0b:ec:98:55:6b:e2:39:32:cd:72:a4:7b:85:87:ed:79:62:
a0:21:3b:27:06:dd:bc:10:49:d5:9c:b6:a7:83:9b:5e:5c:bf:
d6:f5:ef:87:69:93:36:9c:0e:67:50:aa:58:f0:62:dd:d0:ac:
76:da:f0:fe:ef:19:94:1a:88:b7:ef:30:3e:8b:33:56:17:e4:
17:46:07:d0:a4:7f:44:95:d0:b6:0b:7c:e0:e6:46:33:71:3a:
6c:91:5c:5b:01:29:77:6d:eb:68:0b:d9:73:43:50:1c:91:b3:
46:9e:b0:34:c7:23:3b:6d:f3:8d:3c:ac:27:dd:59:22:fd:23:
b4:79:b4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:41:29 2025 by rpki-client