Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/01fa18-ab6a-4899-b475-92a3661ec26d/1/_7YZaqCEVD3EjPUXXOb37-qDdYQ.roa
File: _7YZaqCEVD3EjPUXXOb37-qDdYQ.roa (raw, json)
Hash identifier: yWfDMlvAjaeGwMnAvQo77aSV6gtkmBjhx1ibV11Y3U8=
Subject key identifier: FF:B6:19:6A:A0:84:54:3D:C4:8C:F5:17:5C:E6:F7:EF:EA:83:75:84
Certificate issuer: /CN=02f81c37e9ed24d0b20e94c18690e88ae4b311ca
Certificate serial: 018570153AAEF48647DBEC0269EF9D3152D3
Authority key identifier: 02:F8:1C:37:E9:ED:24:D0:B2:0E:94:C1:86:90:E8:8A:E4:B3:11:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvgcN-ntJNCyDpTBhpDoiuSzEco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/01fa18-ab6a-4899-b475-92a3661ec26d/1/_7YZaqCEVD3EjPUXXOb37-qDdYQ.roa
Signing time: Mon 02 Jan 2023 01:25:17 +0000
ROA not before: Mon 02 Jan 2023 01:25:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7155
IP address blocks: 37.203.192.0/21 maxlen: 21
37.19.96.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:3a:ae:f4:86:47:db:ec:02:69:ef:9d:31:52:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02f81c37e9ed24d0b20e94c18690e88ae4b311ca
Validity
Not Before: Jan 2 01:25:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffb6196aa084543dc48cf5175ce6f7efea837584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:82:a5:0a:d2:7c:f3:1b:b9:8c:73:65:e1:a4:
7a:33:09:81:65:14:a2:7d:40:24:2e:09:44:df:11:
00:48:55:ee:a5:21:71:2a:41:73:a7:4b:99:26:83:
78:32:29:d0:57:6e:1b:54:b6:a3:ad:00:66:d1:83:
61:f6:91:d7:72:83:ff:e0:c3:a7:68:f4:24:24:61:
bc:25:9b:8b:92:39:01:a6:8b:8f:76:5e:bb:c0:b1:
8d:86:5b:a6:5f:fc:b3:90:70:4c:f5:87:50:ec:ee:
20:f1:f6:6b:7b:37:08:d0:c2:d4:d8:bf:9f:fe:7a:
13:58:5d:43:75:0c:12:eb:ab:f6:54:bc:46:de:cd:
1c:c0:aa:21:67:61:5a:e7:93:1b:df:94:fb:c6:78:
e7:c1:fa:67:5e:1b:49:76:7e:d9:65:03:44:7b:e1:
71:9c:9f:f6:f4:5a:df:b1:7c:9e:79:b6:02:9e:5e:
0f:62:8c:d0:47:ae:48:ee:80:da:91:68:c6:65:83:
c6:a5:77:dd:da:d6:24:57:bd:1e:5a:ec:9f:5f:c8:
43:6c:65:4b:1c:c2:24:bb:63:5e:32:99:c6:60:bf:
a8:c4:2a:a4:94:55:62:37:2e:71:38:e8:43:68:9a:
33:bc:09:7d:c2:4d:75:7b:6e:af:9e:dc:9e:7c:c5:
1d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B6:19:6A:A0:84:54:3D:C4:8C:F5:17:5C:E6:F7:EF:EA:83:75:84
X509v3 Authority Key Identifier:
keyid:02:F8:1C:37:E9:ED:24:D0:B2:0E:94:C1:86:90:E8:8A:E4:B3:11:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvgcN-ntJNCyDpTBhpDoiuSzEco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/01fa18-ab6a-4899-b475-92a3661ec26d/1/_7YZaqCEVD3EjPUXXOb37-qDdYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/01fa18-ab6a-4899-b475-92a3661ec26d/1/AvgcN-ntJNCyDpTBhpDoiuSzEco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.19.96.0/21
37.203.192.0/21
Signature Algorithm: sha256WithRSAEncryption
24:36:2b:c1:f9:b2:b0:1c:29:98:bb:c9:8d:50:19:8b:8c:77:
43:9e:45:8e:c2:eb:ec:cc:d9:a6:2d:52:ad:bb:91:5e:32:60:
16:43:d8:66:96:94:3a:47:cd:00:eb:e6:b4:87:03:08:6d:a2:
f2:39:fb:3e:02:62:fa:00:36:f9:95:4c:87:e9:19:ef:e2:22:
7c:2d:f2:56:51:6a:b4:a1:3c:51:0b:c8:21:47:22:81:90:4b:
42:56:cc:1e:e1:fd:08:aa:0b:c9:c3:80:d5:1f:5e:77:6a:bf:
34:b1:16:04:5b:da:33:13:5f:fc:8f:3c:ef:2d:23:1f:db:0f:
89:97:8f:7f:0d:53:05:26:d1:5c:9d:58:1f:0d:3c:f6:d2:02:
68:f4:a5:e8:04:17:ea:1f:ba:cf:d8:46:36:eb:e0:0a:45:bb:
5c:a8:f4:a1:3d:f9:75:b4:4e:b3:83:5c:1a:e0:a7:3f:ab:b4:
4c:a8:b6:e1:0b:7e:c0:62:97:8b:ee:ae:32:82:39:b6:42:7b:
6e:67:82:64:c0:25:ac:70:df:ec:d4:2a:b5:03:71:21:f7:f5:
19:93:f0:aa:9f:4c:60:c5:17:31:d8:60:a9:ae:47:0a:99:5e:
aa:47:b9:a2:cf:22:e4:cd:9e:86:e8:4e:27:b4:45:4d:2d:69:
95:4c:3f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:51:39 2025 by rpki-client