Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/7cef9c-7aff-4727-afa7-c48ea85a75bc/1/KzzB1nPVN598OkCgbb-5z8Te7Ok.roa
File: KzzB1nPVN598OkCgbb-5z8Te7Ok.roa (raw, json)
Hash identifier: ySJKAMdDeD0uoDSCPBDy17CkpX39o4F2ViDZG8eIHMs=
Subject key identifier: 2B:3C:C1:D6:73:D5:37:9F:7C:3A:40:A0:6D:BF:B9:CF:C4:DE:EC:E9
Certificate issuer: /CN=7669943165d59f25265fb97cb77a6c7cbf8b5077
Certificate serial: 01856D9D2EA4CBE52C41074A0E7406FCCC2F
Authority key identifier: 76:69:94:31:65:D5:9F:25:26:5F:B9:7C:B7:7A:6C:7C:BF:8B:50:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmmUMWXVnyUmX7l8t3psfL-LUHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/7cef9c-7aff-4727-afa7-c48ea85a75bc/1/KzzB1nPVN598OkCgbb-5z8Te7Ok.roa
Signing time: Sun 01 Jan 2023 13:54:55 +0000
ROA not before: Sun 01 Jan 2023 13:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 37.72.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:2e:a4:cb:e5:2c:41:07:4a:0e:74:06:fc:cc:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7669943165d59f25265fb97cb77a6c7cbf8b5077
Validity
Not Before: Jan 1 13:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b3cc1d673d5379f7c3a40a06dbfb9cfc4deece9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4c:5e:63:19:d1:54:d8:af:9d:97:e5:fb:cf:
4a:f5:54:c3:f1:30:4c:01:a5:05:9e:f3:c2:32:5b:
13:e1:21:be:80:89:29:a0:f8:be:f0:34:cb:2f:0e:
dd:0d:f0:10:29:84:cf:ff:22:46:f0:ae:dc:f5:5a:
6e:ee:90:83:e8:8b:73:ac:b0:dc:14:e5:cf:19:c2:
34:33:53:76:f1:9e:8e:dd:31:e3:64:11:f8:e2:13:
f0:29:1c:7e:81:72:a4:45:c9:a3:29:82:23:b2:ca:
96:cb:18:36:ad:3d:ca:2f:a8:be:8a:10:7f:77:c9:
f5:09:19:87:79:86:d2:7c:a8:55:03:58:a8:00:68:
17:62:0d:b9:46:a2:79:92:fe:ba:18:88:d0:a5:7a:
ee:5a:7d:34:74:2e:ba:91:d7:12:ab:01:6e:62:7a:
1e:40:ab:c1:5c:0d:a8:03:c7:d2:7c:57:fd:07:c1:
25:95:be:e7:dc:07:ae:62:f8:31:64:6d:9e:8e:43:
65:db:f6:7c:5b:73:77:ed:75:52:54:f3:5e:0f:62:
50:14:35:b2:08:25:bf:83:c7:29:a1:38:f6:51:50:
8c:ea:82:47:d3:b4:25:4f:9a:d5:2a:86:6f:89:40:
47:fd:17:74:06:2d:73:7e:69:97:f7:10:de:48:0f:
48:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:3C:C1:D6:73:D5:37:9F:7C:3A:40:A0:6D:BF:B9:CF:C4:DE:EC:E9
X509v3 Authority Key Identifier:
keyid:76:69:94:31:65:D5:9F:25:26:5F:B9:7C:B7:7A:6C:7C:BF:8B:50:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmmUMWXVnyUmX7l8t3psfL-LUHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7cef9c-7aff-4727-afa7-c48ea85a75bc/1/KzzB1nPVN598OkCgbb-5z8Te7Ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7cef9c-7aff-4727-afa7-c48ea85a75bc/1/dmmUMWXVnyUmX7l8t3psfL-LUHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.135.0/24
Signature Algorithm: sha256WithRSAEncryption
98:3d:c1:70:e6:18:84:e9:89:e1:e6:dc:61:f8:7b:03:d8:2a:
22:ba:b8:64:e3:fb:06:13:7c:5a:c5:90:e1:4e:ee:9e:89:49:
26:65:a1:ea:78:af:ce:de:a7:e3:10:75:2a:ac:47:d2:26:ed:
22:13:68:12:5e:ac:05:b0:91:4e:05:99:94:47:ed:40:d8:a9:
e1:82:a9:92:30:6b:76:9d:df:aa:4f:a1:3e:a1:97:43:8f:35:
46:f5:2f:5c:b0:d2:a7:a3:68:b2:1b:27:0c:f1:51:ce:3a:f6:
c9:28:14:67:90:e8:7b:3e:d7:d1:51:16:ff:65:34:48:25:aa:
ba:b7:2f:bd:6e:a3:de:b3:fe:b3:46:94:a5:d7:30:2e:b4:a6:
e2:82:0a:cb:23:85:10:64:fe:ef:db:6d:55:d6:59:34:0d:bf:
69:09:3b:4f:71:a4:ec:fa:39:74:4f:f8:10:16:30:ea:4d:bf:
d1:b8:7a:3a:c5:0e:d9:e0:d1:5e:55:48:fa:3a:16:ba:9c:09:
9b:0c:bb:59:9a:86:eb:dc:a2:4a:bb:a9:b6:cd:f6:3b:25:ae:
7b:e0:87:dd:e7:16:c9:d7:52:03:01:b0:90:e8:79:84:e9:df:
56:f4:0b:f9:5a:1c:c6:ee:2d:7c:e9:72:fc:20:93:1f:37:d8:
36:4b:b5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:03:31 2025 by rpki-client