Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/GJc4RhLN1kKy1wU6MrhlA4JW2Rg.roa
File: GJc4RhLN1kKy1wU6MrhlA4JW2Rg.roa (raw, json)
Hash identifier: I6aRD74tZDSovbD+laz0ctCLo9KTakUX3rZe/7kLACs=
Subject key identifier: 18:97:38:46:12:CD:D6:42:B2:D7:05:3A:32:B8:65:03:82:56:D9:18
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 0194266BA11BC64D27B6FC2A031A5945341E
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/GJc4RhLN1kKy1wU6MrhlA4JW2Rg.roa
Signing time: Thu 02 Jan 2025 09:49:35 +0000
ROA not before: Thu 02 Jan 2025 09:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12129
IP address blocks: 37.221.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:a1:1b:c6:4d:27:b6:fc:2a:03:1a:59:45:34:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jan 2 09:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1897384612cdd642b2d7053a32b865038256d918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c0:f9:bf:06:5e:3b:ae:6c:36:56:34:7e:51:
24:7f:8e:9f:1e:d4:36:15:07:74:fd:45:ca:18:7f:
4f:b8:99:5d:99:41:55:a2:97:c5:eb:57:18:d7:bc:
cb:43:d9:cc:7f:41:cf:63:7c:90:8b:aa:88:34:b5:
22:44:88:f4:c4:88:0d:33:00:bc:9c:93:84:4f:17:
31:ed:6c:08:62:01:6d:75:0a:fd:36:86:00:7d:48:
cf:ce:57:d0:23:d7:45:d7:b7:6d:74:53:c2:2b:3f:
11:26:c6:52:30:96:4e:6c:90:c0:00:f3:a7:f9:04:
fe:d7:fe:d2:bd:bf:98:f5:95:1b:60:86:3c:a3:2d:
10:b3:e5:62:7f:46:a7:28:0f:36:f4:fc:ca:0f:2d:
ba:8d:2b:9f:4a:a0:8e:5b:5c:de:af:00:4e:eb:5a:
78:24:f4:fe:f6:75:ba:cd:10:4d:80:5b:32:df:1f:
90:12:de:11:f9:e6:66:3a:99:0f:33:f5:6b:25:03:
2a:a8:15:58:4f:46:e7:47:9d:f7:db:34:3c:bb:46:
4a:71:58:bf:1d:13:f9:16:34:3f:6f:22:e3:9f:4c:
bc:de:4a:a2:0d:5c:b5:d2:fa:72:99:b8:9c:01:26:
da:73:3d:81:0c:bb:0b:a3:b4:59:90:46:e7:14:d4:
a9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:97:38:46:12:CD:D6:42:B2:D7:05:3A:32:B8:65:03:82:56:D9:18
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/GJc4RhLN1kKy1wU6MrhlA4JW2Rg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.109.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:c6:81:c3:50:0c:2d:f3:aa:16:0f:42:04:71:39:30:28:b1:
fc:59:23:74:64:cd:a1:34:cc:79:86:92:8a:8a:25:63:c3:ca:
d4:b7:89:73:55:39:84:8b:9f:ee:18:b8:87:a6:63:b7:4b:e6:
78:54:61:8b:90:57:9d:a4:8a:03:8c:32:a8:4f:be:39:3a:60:
31:e0:67:23:37:ba:64:63:96:8f:6d:e5:c2:99:91:c8:00:9d:
71:52:58:bf:dd:20:e9:df:5e:8c:e0:89:3d:ee:a6:0a:e5:64:
cb:2e:77:14:e8:5b:2d:74:38:9f:cd:8f:07:0e:6f:a3:1a:2a:
2f:72:ef:fc:d6:2b:85:e3:0f:82:d9:6c:f2:a5:df:9f:ef:d3:
b7:e5:05:7a:71:4d:f4:28:ed:62:9b:b4:d7:23:0e:d3:e0:cd:
04:b4:05:f5:32:48:79:66:3f:46:32:65:16:84:c3:3e:6d:28:
b1:1b:ec:87:87:7f:ba:cf:55:44:4e:72:e4:32:2b:0e:89:cd:
08:f9:b3:2c:73:e2:e2:42:45:17:b0:24:a7:43:4f:19:fa:ec:
03:00:13:1c:ad:83:35:d3:a8:b3:8f:bf:f3:66:43:0f:6a:34:
13:c9:84:a1:fc:78:6c:f6:43:6a:5a:f0:6b:04:38:36:0f:ff:
6a:61:b5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:23 2025 by rpki-client