Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/tPmN64VOOdrKHHYnAYxnTcAuQV0.roa
File: tPmN64VOOdrKHHYnAYxnTcAuQV0.roa (raw, json)
Hash identifier: rbaU0AsFTinLvI61G4Oa4g58b2kdiil1ICHOXCGUT0U=
Subject key identifier: B4:F9:8D:EB:85:4E:39:DA:CA:1C:76:27:01:8C:67:4D:C0:2E:41:5D
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 0194266BA5175A6D86F53A0E267B41FD68CE
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/tPmN64VOOdrKHHYnAYxnTcAuQV0.roa
Signing time: Thu 02 Jan 2025 09:49:36 +0000
ROA not before: Thu 02 Jan 2025 09:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33185
IP address blocks: 37.221.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:a5:17:5a:6d:86:f5:3a:0e:26:7b:41:fd:68:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jan 2 09:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4f98deb854e39daca1c7627018c674dc02e415d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fe:c3:13:d9:be:61:06:3b:d2:16:83:75:ca:
3a:2d:9b:a1:dc:b9:07:8e:59:c4:2d:44:59:bd:6a:
df:a4:0d:d7:25:0d:6f:76:f7:fb:7b:db:83:fb:4b:
22:e4:53:16:2d:0d:24:cd:5c:b8:df:9c:a3:3a:52:
56:44:90:79:b8:97:93:19:6f:66:12:53:e0:80:93:
81:c5:37:50:99:85:f2:45:79:87:5f:a8:5d:6d:72:
52:a2:79:03:8b:21:61:d8:36:f4:4b:2b:70:d5:5c:
71:c6:66:0f:c4:fb:e1:32:1e:7e:a3:50:c3:ae:c9:
50:0c:92:0a:83:8b:bc:9a:bb:9a:4e:1c:00:86:07:
1b:bd:1e:18:e4:eb:5c:a4:e6:74:89:d7:6b:16:37:
d2:28:3b:35:d5:1f:91:d0:f1:fd:96:10:aa:d9:f7:
3d:45:69:73:72:eb:bc:df:c6:ad:0b:21:7d:95:ab:
e8:d2:cb:8e:c9:ed:54:f3:2d:ff:52:1d:39:ac:bf:
ca:0c:0b:35:45:0a:2c:87:5f:b6:b9:9a:96:b0:89:
eb:81:57:5a:d6:be:02:c5:cc:0d:8e:49:40:3c:bc:
1e:64:a4:86:66:c9:df:0b:2d:d0:82:24:4d:01:1c:
26:08:56:74:37:fb:5f:de:1e:80:cb:cb:0d:fe:49:
0a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F9:8D:EB:85:4E:39:DA:CA:1C:76:27:01:8C:67:4D:C0:2E:41:5D
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/tPmN64VOOdrKHHYnAYxnTcAuQV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.110.0/24
Signature Algorithm: sha256WithRSAEncryption
87:41:c7:47:dc:56:44:d9:1a:f3:6e:88:cb:90:b5:50:fb:51:
3c:ea:c9:ca:47:7f:a6:4d:4b:83:63:00:09:e2:67:f7:6c:b9:
0b:58:df:2b:ea:cc:e9:bf:96:8e:1c:0c:bb:55:b1:90:36:dc:
12:4b:61:fc:d3:a3:f8:d4:92:5f:f0:5b:86:4e:87:e1:89:35:
a1:5c:39:ed:cd:aa:04:8a:68:c9:d9:1a:a5:2f:ef:d9:f0:13:
d6:f0:f7:c3:c2:45:2d:2f:dd:50:b8:a5:96:94:42:c8:69:4c:
14:ef:2b:b5:09:f8:2a:b7:cb:4a:d9:9a:e2:07:05:74:b5:5e:
f6:4f:b3:38:e8:df:cd:d0:93:cb:48:92:27:3c:14:0f:22:c1:
32:5f:1d:a3:7e:bf:64:8e:1a:ad:ab:0c:e4:21:6d:07:b1:eb:
97:14:cf:15:12:57:04:96:97:cf:e2:46:ee:2e:c7:9e:52:0c:
e9:e3:86:ea:6c:02:2c:26:34:c3:63:6c:87:61:5d:6d:7e:e4:
47:e3:86:05:3a:9e:07:ea:70:b0:c7:3b:cd:d0:06:e5:77:3a:
de:f4:c4:a7:cb:b6:61:57:57:8d:38:13:a6:0d:e8:95:95:ae:
94:a9:b3:d2:79:13:65:84:06:29:8a:40:08:05:90:00:ef:ec:
52:14:8a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:01:40 2025 by rpki-client