Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/1-2HJ5jn5g6Jmp5C6hP3qH41wHQo.roa
File: 1-2HJ5jn5g6Jmp5C6hP3qH41wHQo.roa (raw, json)
Hash identifier: 0+C3iSUZi8zR94giFN3+Yi4SjAXc+Ika0Xr4LBo93mY=
Subject key identifier: FB:61:C9:E6:39:F9:83:A2:66:A7:90:BA:84:FD:EA:1F:8D:70:1D:0A
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 0185442742729A7997829B3055C899E8F39B
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/1-2HJ5jn5g6Jmp5C6hP3qH41wHQo.roa
Signing time: Sat 24 Dec 2022 12:41:41 +0000
ROA not before: Sat 24 Dec 2022 12:41:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39521
IP address blocks: 37.128.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:44:27:42:72:9a:79:97:82:9b:30:55:c8:99:e8:f3:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Dec 24 12:41:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb61c9e639f983a266a790ba84fdea1f8d701d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7c:68:6b:30:37:11:64:c8:0b:5f:0d:5f:e1:
c0:73:a7:90:08:2d:f0:c0:f7:ee:5f:64:d1:3b:7e:
a6:5d:dd:84:2b:a0:66:04:d2:aa:1f:b9:fa:0b:ae:
82:e7:5f:7e:96:68:be:17:82:69:ea:a4:79:93:db:
8b:fe:ff:55:5b:5f:3f:e2:6e:00:ab:a4:87:80:54:
17:81:12:7d:17:2b:a1:04:f4:02:41:d9:e2:83:6c:
47:05:68:fe:ab:3c:f9:38:7c:83:46:e5:40:b1:4f:
c8:ff:28:88:f3:7f:4d:8e:5a:af:5d:db:58:91:cf:
1a:1d:ca:a0:12:27:07:51:9d:92:bc:a2:86:6f:8f:
7c:61:0b:fe:59:6f:63:9c:fd:73:6c:c8:2e:f3:6d:
33:5e:a0:ae:fa:3b:ec:86:55:0c:e3:d7:7f:7d:2b:
26:fe:b8:b3:04:da:cf:a3:d4:4b:a2:5b:6c:d0:a7:
d4:20:8b:e2:df:9b:f2:bc:54:a9:01:28:92:5e:f9:
d4:9e:3b:aa:25:73:47:56:73:11:c9:43:f0:3f:3c:
3e:65:b5:40:fd:f1:69:89:71:9f:a1:80:a1:03:69:
39:ff:b6:ea:64:33:0e:a2:bc:25:3c:af:79:73:88:
58:0f:b8:55:be:29:ce:1b:cc:cb:e9:78:f7:8c:20:
c2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:61:C9:E6:39:F9:83:A2:66:A7:90:BA:84:FD:EA:1F:8D:70:1D:0A
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/1-2HJ5jn5g6Jmp5C6hP3qH41wHQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.252.0/22
Signature Algorithm: sha256WithRSAEncryption
38:67:bf:c8:d2:63:5d:90:99:47:fd:74:09:6a:31:04:ff:f6:
92:ff:26:2f:51:67:39:84:d6:b2:1d:e5:81:0a:51:d1:84:31:
31:25:d4:f1:57:8e:90:c4:35:6b:6c:cf:39:9a:23:72:35:31:
1f:0b:b6:4f:24:28:a9:c4:7d:a4:56:02:b2:62:04:e9:94:86:
15:1a:96:95:e6:4d:b3:57:2c:36:fb:23:1c:c5:3e:b7:4d:c8:
87:0d:5c:6a:d1:90:02:56:d9:92:70:94:f4:6b:3f:50:be:d0:
4a:24:c6:e9:4a:0f:6f:f1:b5:05:e6:3b:84:60:63:e6:53:b7:
f8:b8:ca:73:b6:79:53:1a:0c:5c:8b:d5:29:67:cf:1b:5c:42:
8a:81:75:6b:b1:06:c6:81:06:22:f7:bd:8f:9c:ab:8b:23:32:
30:08:c9:b7:67:b6:5f:c8:3d:e5:6e:17:19:2c:2a:ab:6e:bc:
8b:68:6f:89:0e:5b:de:45:0e:0e:34:97:8f:46:73:f0:ad:96:
6a:b8:71:1d:36:9c:ae:a6:0b:90:d2:4f:12:d3:bc:52:e4:57:
cd:ce:a6:2e:da:21:80:03:ef:84:73:3d:be:c7:33:18:d6:36:
53:21:ef:27:7c:e0:ca:f6:1a:89:90:62:f4:e2:0b:d9:6a:3a:
9e:61:0e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:05 2025 by rpki-client