Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/FH6jvpenbZB5w0SPXtQdAsUB0LY.roa
File: FH6jvpenbZB5w0SPXtQdAsUB0LY.roa (raw, json)
Hash identifier: uRX1j/pVPbbtlQD38GkKzSxfrRyzr/bqJQIYK+eWjX4=
Subject key identifier: 14:7E:A3:BE:97:A7:6D:90:79:C3:44:8F:5E:D4:1D:02:C5:01:D0:B6
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 01856ED4DEADC194B88E392A7D8697330415
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/FH6jvpenbZB5w0SPXtQdAsUB0LY.roa
Signing time: Sun 01 Jan 2023 19:35:22 +0000
ROA not before: Sun 01 Jan 2023 19:35:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212443
IP address blocks: 37.202.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:de:ad:c1:94:b8:8e:39:2a:7d:86:97:33:04:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Jan 1 19:35:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=147ea3be97a76d9079c3448f5ed41d02c501d0b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f8:8f:79:b5:f3:c0:d2:5a:60:b0:47:e7:32:
64:f4:5a:f9:2e:0a:96:c2:9e:ad:6e:2a:77:5e:4f:
57:46:1a:75:aa:5b:50:0b:b9:9f:b9:76:1a:45:ce:
ec:25:52:60:86:8a:59:f1:9f:19:af:95:32:df:13:
98:7e:f8:c9:67:5f:e8:e9:56:ff:b8:49:20:24:9f:
ff:29:7a:5b:57:c1:3d:4d:89:9f:02:6c:05:86:de:
51:5b:d0:05:2f:c7:ad:8c:8e:73:e9:a5:d6:6f:4a:
0a:fb:58:02:39:9f:b4:c3:0c:ba:ea:d9:7e:c1:7b:
de:0f:55:36:6f:43:12:85:b2:74:64:aa:1e:39:6f:
16:66:34:6c:3c:66:69:68:aa:5d:b2:94:ba:48:6d:
43:47:99:a5:e2:95:d0:51:00:4e:6a:20:8e:3e:b0:
7e:28:62:69:3a:af:44:8b:d9:b4:57:5a:d4:9e:ec:
b0:64:69:d1:25:c5:a8:d7:11:2d:d6:71:0b:32:95:
07:f3:5b:9e:f4:23:d7:e6:46:94:70:5d:13:87:71:
0c:66:1a:54:c5:e6:ce:b0:17:4e:10:98:d7:ca:a2:
27:cb:bc:88:5a:05:6f:93:4b:07:f9:89:78:05:09:
b1:30:f3:76:19:ea:89:4d:38:c4:7b:59:d8:cb:60:
7d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7E:A3:BE:97:A7:6D:90:79:C3:44:8F:5E:D4:1D:02:C5:01:D0:B6
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/FH6jvpenbZB5w0SPXtQdAsUB0LY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.15.0/24
Signature Algorithm: sha256WithRSAEncryption
33:9c:c8:78:84:f2:dd:27:34:e3:af:e5:f7:8c:a1:b5:07:78:
f4:14:89:22:43:da:bf:b0:79:81:b2:f3:24:e2:81:4d:d9:14:
09:31:c6:40:ff:1a:ca:38:12:83:25:ac:7c:67:3d:2b:37:fc:
48:c8:4b:d4:ec:f1:97:f6:f3:57:2f:3e:fb:d9:53:15:5f:38:
42:55:1b:89:71:64:58:3e:ce:1b:5c:7c:0b:3c:56:25:6e:20:
b3:f9:e7:f0:f4:a4:c7:88:ec:44:8d:b5:6e:b3:d6:73:99:b7:
fb:72:8b:b4:7c:fd:0c:72:88:37:a8:0d:db:3a:8c:52:da:60:
77:99:26:19:38:39:cb:3d:a8:aa:1b:f9:86:dc:98:a2:b9:e7:
69:09:8e:cd:0b:cf:4b:c4:be:96:8c:ca:87:bf:5c:3d:ed:dd:
ca:87:75:9f:44:7e:d8:db:23:b9:64:72:ea:a5:96:26:7d:02:
ae:ea:be:81:8a:54:de:3c:46:0b:13:ec:a9:bc:50:10:c9:9f:
91:34:c7:4a:2f:b7:6a:a3:01:8a:b4:55:8c:73:74:9b:76:b1:
3f:c2:a3:bd:d7:b4:79:33:c3:d9:8b:37:1e:3f:f2:1e:7a:11:
6b:68:83:b1:ef:ad:d4:ca:05:e6:e1:0c:f7:6b:1b:ef:80:d3:
88:b9:ce:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:33 2025 by rpki-client