Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/JV8Oy_a1UXy0SnlMZWmQNsSEfl4.roa
File: JV8Oy_a1UXy0SnlMZWmQNsSEfl4.roa (raw, json)
Hash identifier: QU3ODRDYN6Xmgjl3lZs2EqlXPrAUOupDkEzxDAA+PN4=
Subject key identifier: 25:5F:0E:CB:F6:B5:51:7C:B4:4A:79:4C:65:69:90:36:C4:84:7E:5E
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 019422FBD084DBB2315F406589DB93253CDE
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/JV8Oy_a1UXy0SnlMZWmQNsSEfl4.roa
Signing time: Wed 01 Jan 2025 17:48:35 +0000
ROA not before: Wed 01 Jan 2025 17:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213697
IP address blocks: 37.221.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:d0:84:db:b2:31:5f:40:65:89:db:93:25:3c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Jan 1 17:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=255f0ecbf6b5517cb44a794c65699036c4847e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fb:32:eb:b3:a1:00:28:cd:28:4d:03:f9:a4:
5d:ab:0b:5a:b6:18:02:5b:e3:12:e5:b7:15:19:cb:
00:63:1f:31:69:4f:59:34:bb:a1:61:2b:a0:b3:29:
c5:5b:16:1a:a7:ca:58:d9:83:f5:a1:58:fd:d6:d5:
b7:3d:5c:6d:20:93:80:03:19:f0:ad:27:eb:31:7a:
f1:f7:28:8b:71:8e:29:fa:79:db:c3:53:5b:f4:83:
f0:ba:47:14:04:d1:dd:81:15:b1:41:f8:d8:67:da:
27:a4:13:72:02:f1:07:89:93:70:fa:de:fa:8d:ca:
e8:69:5c:e6:ef:3f:46:67:a8:2e:c4:cb:b7:d9:ac:
48:40:50:50:a4:5e:8c:42:25:ee:57:34:28:54:03:
9a:63:83:fe:34:f3:7c:b6:22:65:85:f8:2b:d1:6b:
3d:01:76:69:b0:d2:3a:b3:d4:56:7f:08:0e:73:dc:
d9:ad:ad:e5:2c:e5:11:b8:bd:54:e8:16:00:8e:bc:
3f:fe:9c:4e:49:f9:9e:e5:12:9e:68:c7:e9:bd:f5:
50:57:b5:ac:a5:7a:36:0c:49:d8:6a:e4:95:01:8d:
3f:57:c7:e6:06:09:35:91:cd:bf:05:5e:09:f6:c5:
ca:eb:4c:9c:77:cb:83:5c:9e:99:28:17:c5:24:7d:
9a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5F:0E:CB:F6:B5:51:7C:B4:4A:79:4C:65:69:90:36:C4:84:7E:5E
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/JV8Oy_a1UXy0SnlMZWmQNsSEfl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.77.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:ee:e6:b3:f6:a6:5f:a1:b6:de:b1:76:3a:e8:f1:61:18:e5:
31:ef:d4:f6:59:92:22:56:09:1b:78:cc:9e:59:2f:29:d7:ba:
b3:e1:35:d3:0f:42:9b:68:65:6d:aa:26:f5:95:12:ee:59:d6:
75:72:e7:e5:48:44:9d:45:91:2d:8c:6a:12:cd:54:04:c6:ca:
fc:28:e5:72:85:b1:af:e4:f6:fe:4a:79:a8:85:51:ed:11:27:
91:fc:3d:18:34:3b:ec:22:ae:e5:8f:17:5e:18:b9:ca:b7:a9:
1d:9f:33:8a:5c:70:06:0f:9a:94:4b:33:33:eb:24:7a:ec:72:
51:4f:64:91:bc:41:25:8e:df:1c:d8:7d:78:fe:a9:cb:a5:c7:
0c:d1:b4:4c:bd:e0:f2:6a:7a:28:8b:d0:b2:ea:f1:e3:6b:26:
2c:a8:51:af:ab:10:a8:f4:d0:b7:41:82:39:57:cf:33:c5:be:
6a:9b:f4:79:72:58:8f:03:9f:fc:03:e0:a0:8f:db:25:f3:4c:
ef:0a:2d:39:44:b1:0d:3a:bb:03:9f:a2:2a:77:74:71:5e:68:
cf:8a:d6:70:bf:e0:45:ea:ae:3d:ae:e4:4e:5f:c1:de:cc:c3:
75:e3:66:d0:e3:c0:bc:9c:c9:3f:15:13:43:32:46:a4:46:26:
3f:2a:7e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:27:48 2025 by rpki-client