Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/9CazkTPZyl-WY99ZrgmP9cBlHm8.roa
File: 9CazkTPZyl-WY99ZrgmP9cBlHm8.roa (raw, json)
Hash identifier: A4QKoerXO2gKSOod1qR+fpCwzR9t0zq16179+OEZOBk=
Subject key identifier: F4:26:B3:91:33:D9:CA:5F:96:63:DF:59:AE:09:8F:F5:C0:65:1E:6F
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018FBE6B6EF6C15A68449DA0ED1CF4BC1C9B
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/9CazkTPZyl-WY99ZrgmP9cBlHm8.roa
Signing time: Tue 28 May 2024 08:57:42 +0000
ROA not before: Tue 28 May 2024 08:57:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53356
IP address blocks: 37.49.144.0/24 maxlen: 24
109.203.161.0/24 maxlen: 24
109.203.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:be:6b:6e:f6:c1:5a:68:44:9d:a0:ed:1c:f4:bc:1c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: May 28 08:57:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f426b39133d9ca5f9663df59ae098ff5c0651e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:42:f5:19:32:24:67:b1:83:78:a6:fd:4f:c1:
4e:ee:a7:c6:9a:8d:96:a7:cb:02:03:6e:37:f1:43:
43:d6:a3:a1:b9:de:10:c2:60:26:8e:d9:e8:14:af:
51:34:0e:1d:63:87:75:14:a3:07:89:72:1c:2d:16:
8c:31:b3:8c:a3:96:97:19:ff:35:95:7b:bd:9c:bc:
8a:0d:28:da:8e:35:2d:ba:4a:f3:22:95:62:98:4d:
65:71:06:d7:92:7e:96:e2:3d:d8:0d:21:3c:18:9e:
08:21:42:92:15:ab:4e:0a:1a:41:b7:18:09:f7:8b:
de:03:f8:4c:81:03:58:dd:5d:79:ee:01:c4:cc:6d:
ee:00:c7:97:59:7a:9e:74:57:53:e1:f0:61:89:92:
2c:fb:f4:01:f4:53:24:14:1f:84:95:1c:a9:a5:36:
90:5e:ec:33:41:65:87:f8:47:84:95:a8:05:99:9e:
4e:e2:26:20:bc:4d:4f:94:8e:af:fb:7f:9c:52:42:
b9:5f:97:77:00:59:a9:d3:cf:71:1b:9f:06:6a:85:
b8:24:c0:f9:ea:6a:c8:6a:d1:34:e3:8f:a1:a0:00:
e5:7d:64:be:ca:3e:15:f7:fa:45:5e:6d:af:ad:d2:
c4:e0:eb:d4:da:85:f4:93:93:33:5c:29:bd:eb:a6:
72:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:26:B3:91:33:D9:CA:5F:96:63:DF:59:AE:09:8F:F5:C0:65:1E:6F
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/9CazkTPZyl-WY99ZrgmP9cBlHm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.144.0/24
109.203.161.0/24
109.203.166.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:ee:42:4a:f9:6f:9a:68:81:5d:88:df:73:eb:45:3b:ec:8e:
43:99:af:6e:07:30:6a:eb:27:c3:3c:79:a7:79:89:33:b4:f6:
ee:b8:2d:4d:fd:27:ac:18:8a:b4:17:76:06:8a:e4:29:2d:a9:
86:fa:7c:fb:26:9f:ee:24:45:de:ff:d0:7c:8d:35:3a:25:e8:
5e:43:d2:e2:54:7d:c5:28:f6:21:53:a5:63:e1:31:ff:b0:a3:
06:94:66:a5:c1:52:53:b1:82:94:b3:d8:61:51:da:a4:61:d8:
78:aa:9a:0b:d9:ee:06:9f:32:b8:f6:00:41:f2:cc:6d:22:39:
d3:98:24:11:ce:4e:b2:14:66:38:14:aa:d7:0e:17:8d:ac:11:
2d:5b:bb:2e:c6:a5:34:69:34:ee:63:b2:5c:a7:c2:91:55:6d:
9f:a5:f9:72:47:7c:94:90:60:0a:c0:66:7f:1b:e2:19:fe:3e:
ee:ad:7f:40:17:21:39:ef:2d:74:d7:6b:00:0b:5a:54:c1:c7:
67:ec:4e:b3:ff:59:f7:60:87:39:49:cb:6e:10:a7:47:0a:34:
f5:b2:2c:71:2e:2c:b7:68:2c:89:e5:e2:56:d0:89:aa:c2:f4:
71:9a:35:d6:56:62:1c:a5:68:a2:14:86:f2:62:37:2c:88:43:
01:f0:c2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:12 2025 by rpki-client