Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/0xc42d-LDEI-SgAKzo0kBGB10Dc.roa
File: 0xc42d-LDEI-SgAKzo0kBGB10Dc.roa (raw, json)
Hash identifier: gb2q4Z8T0zA76PNBgJ68ndUVgrHcH6k39n959MJErWM=
Subject key identifier: D3:17:38:D9:DF:8B:0C:42:3E:4A:00:0A:CE:8D:24:04:60:75:D0:37
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 0194282331776999074CD87340956F881D1A
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/0xc42d-LDEI-SgAKzo0kBGB10Dc.roa
Signing time: Thu 02 Jan 2025 17:49:42 +0000
ROA not before: Thu 02 Jan 2025 17:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201443
IP address blocks: 37.202.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:31:77:69:99:07:4c:d8:73:40:95:6f:88:1d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Jan 2 17:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d31738d9df8b0c423e4a000ace8d24046075d037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9b:71:10:27:5b:b9:3d:24:ad:12:4f:69:fc:
a9:f9:09:23:dc:b5:7e:f4:8e:cc:29:50:10:dd:5c:
6d:f5:e9:77:ae:1a:53:4a:ef:19:f5:61:f7:55:28:
a1:26:e8:53:4d:41:61:91:1c:23:91:a8:60:27:9d:
01:d3:a3:7f:2c:ca:20:09:2c:e5:39:72:57:3d:7c:
eb:fe:b9:a4:e5:a7:02:bf:a8:d8:c6:42:e6:00:79:
4b:bf:44:bb:b1:5e:3e:2c:46:dd:e3:71:48:e8:d8:
5e:de:0e:17:4b:f1:85:de:9e:a3:b7:22:05:4b:13:
75:3a:96:6e:da:68:81:3b:5a:74:47:31:4d:53:dd:
c2:9b:b8:1a:7e:5b:58:f3:52:28:05:3e:62:d1:e5:
39:c2:eb:45:15:47:87:91:9e:5a:49:01:b6:68:e8:
c6:8c:54:8f:cc:c5:88:93:eb:db:5f:b6:4a:bc:95:
ec:89:ea:6a:82:40:5b:c9:21:d9:7c:e7:f1:4c:92:
e8:53:99:09:d2:86:8c:68:5c:55:76:df:c3:be:4e:
64:68:19:19:33:64:03:f7:4f:5c:3e:a8:f3:df:e9:
7e:31:73:82:46:f8:67:a6:e0:03:0e:ac:29:87:f9:
8d:ad:1f:f8:cb:5a:98:7e:31:73:ce:e1:05:85:93:
65:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:17:38:D9:DF:8B:0C:42:3E:4A:00:0A:CE:8D:24:04:60:75:D0:37
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/0xc42d-LDEI-SgAKzo0kBGB10Dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.14.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:7e:81:dd:89:ca:02:5f:0e:84:e8:bf:93:49:35:de:0c:98:
f7:8c:47:31:37:ea:7a:a1:71:8c:ae:de:b0:2f:34:ed:bd:12:
3f:9e:22:67:12:c2:ed:e5:ac:a6:9f:9b:ef:8d:d8:52:75:5e:
e2:0e:cb:7f:21:28:5b:64:3f:c4:00:3f:eb:ae:38:74:9d:d9:
6f:30:69:eb:78:8d:27:6f:1e:20:8b:99:db:0a:33:11:5e:7e:
1a:2d:62:89:6f:02:9b:6f:5e:2d:57:c5:e9:2c:ca:7f:32:26:
25:24:22:6f:7d:e8:6e:25:0a:ee:d4:d8:c3:a0:7a:c8:83:80:
93:e4:14:fc:5f:7e:97:b8:9c:3d:eb:b5:f6:28:0e:c6:c1:32:
3c:1c:f3:ad:c5:4f:e3:cb:3c:64:9e:83:85:45:5b:90:6f:51:
10:9d:33:ac:03:9d:44:c5:d9:ae:f0:c5:b2:85:c4:f6:7a:ed:
d0:d3:ca:1c:5c:e0:41:1c:ff:b8:2f:e2:7b:1f:3b:40:2d:5b:
20:84:09:35:71:98:d4:81:6d:a1:15:12:b9:60:8f:9f:eb:d3:
b4:31:c4:ab:e7:fe:dc:d0:be:e7:8a:a6:58:c8:dc:08:44:71:
e4:c5:92:90:7b:ad:ab:15:e4:82:6c:db:06:28:0e:31:b8:54:
ed:4b:94:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:45 2025 by rpki-client