Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/oYsUuh3m_CE9WVUbVnbJlYB-tkU.roa
File: oYsUuh3m_CE9WVUbVnbJlYB-tkU.roa (raw, json)
Hash identifier: HVlg+sJTQr0HD1JXFx+NFqvKiu2I41xDaHn29k4K0Y8=
Subject key identifier: A1:8B:14:BA:1D:E6:FC:21:3D:59:55:1B:56:76:C9:95:80:7E:B6:45
Certificate issuer: /CN=63444210ea08ac529878d51917e3b30054d620d1
Certificate serial: 0192DD21EE674757886243B0BDF6DFB99499
Authority key identifier: 63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/oYsUuh3m_CE9WVUbVnbJlYB-tkU.roa
Signing time: Wed 30 Oct 2024 11:14:01 +0000
ROA not before: Wed 30 Oct 2024 11:14:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 2.37.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:dd:21:ee:67:47:57:88:62:43:b0:bd:f6:df:b9:94:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63444210ea08ac529878d51917e3b30054d620d1
Validity
Not Before: Oct 30 11:14:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a18b14ba1de6fc213d59551b5676c995807eb645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8a:aa:54:6f:27:b8:88:bf:66:a6:80:ec:48:
eb:05:1e:63:f8:5b:a9:02:d3:f0:aa:ec:b2:c4:e8:
17:93:1e:5b:a9:7e:a1:d6:1b:27:4e:a7:0b:63:66:
f8:0f:35:ad:48:c7:d6:35:29:60:fd:39:e0:ea:59:
53:ca:46:c8:aa:03:c1:cf:63:4f:4a:77:74:22:c0:
f8:62:44:54:3c:50:cd:e7:c5:05:8f:57:f9:bc:05:
9d:c6:27:b8:60:54:0e:ca:9f:7c:25:48:dc:e0:23:
23:3a:3d:38:86:43:82:56:65:d5:45:71:9b:a2:18:
79:34:f2:d9:a3:a1:b2:58:2d:3e:35:67:e6:41:0a:
cc:6e:6f:30:43:fc:4e:b8:9f:1d:ca:52:86:b1:96:
7a:36:48:97:5e:f9:10:ab:bc:3c:3f:ff:ec:c0:ab:
ad:5e:c8:99:0c:44:18:b7:69:7b:1e:5b:10:72:a5:
6c:e9:e1:79:32:3f:81:b0:81:32:76:de:c7:b6:b5:
fd:a6:4d:b5:ea:38:2a:d5:82:fd:4f:c2:f0:ab:e3:
f8:6e:4d:04:34:6a:55:ee:fa:fe:6a:09:c9:1a:2a:
6e:99:e3:ae:78:68:22:42:d7:de:10:7e:06:c3:84:
34:78:b9:c9:5c:9b:3b:02:5c:7d:be:1c:63:13:e6:
8d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8B:14:BA:1D:E6:FC:21:3D:59:55:1B:56:76:C9:95:80:7E:B6:45
X509v3 Authority Key Identifier:
keyid:63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/oYsUuh3m_CE9WVUbVnbJlYB-tkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.37.111.0/24
Signature Algorithm: sha256WithRSAEncryption
35:5d:2a:8e:cf:a0:d9:89:5f:44:a3:64:7e:53:5a:87:10:bc:
15:01:63:6a:1e:7b:cf:e2:2d:c0:85:c4:fc:27:ac:bb:88:47:
25:4f:2b:3b:c4:43:68:f4:a3:ce:98:1e:4f:9e:01:64:b9:c9:
85:26:4d:6c:92:d2:fa:8a:55:cf:3d:5f:f4:9d:10:a4:d9:ff:
ef:9a:31:c5:43:f9:89:25:11:9e:a4:af:1d:30:a2:08:db:27:
47:bd:bc:68:0d:d2:c1:5e:3a:be:72:29:51:11:26:b1:97:b6:
64:87:cf:e4:d0:c0:26:40:db:c2:f6:b1:98:06:c4:68:93:5a:
f2:99:84:4d:81:83:b8:2f:f9:f9:39:76:12:59:e6:b4:9c:eb:
a6:0a:ad:d4:4a:77:cc:9d:2c:c4:db:e1:80:a4:33:64:25:53:
96:4e:fe:85:26:0e:e0:57:84:87:50:16:96:2e:2a:45:75:d8:
cd:e5:97:48:0a:e7:ab:39:62:1b:dd:ac:4c:6d:e7:b2:a6:76:
d3:a1:e3:92:f3:45:05:36:bb:1b:01:ec:e3:02:6a:f9:c9:a6:
bf:cc:2d:46:5f:08:98:b8:2b:86:8c:ec:d8:79:e7:d8:54:e1:
ab:f1:5a:be:2f:66:a8:0f:c5:3e:31:83:59:05:14:ed:7c:b1:
ad:da:93:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:06 2025 by rpki-client