Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/8dr4_LkjudWFQbzOiZNGJKoG_94.roa
File: 8dr4_LkjudWFQbzOiZNGJKoG_94.roa (raw, json)
Hash identifier: tYTMFr1T3Vb6cRwTSauMUkJVv7DoGZ8gS8Taatp9RFI=
Subject key identifier: F1:DA:F8:FC:B9:23:B9:D5:85:41:BC:CE:89:93:46:24:AA:06:FF:DE
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018C9BEF93208349E69CA14855E493880E10
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/8dr4_LkjudWFQbzOiZNGJKoG_94.roa
Signing time: Sun 24 Dec 2023 13:06:58 +0000
ROA not before: Sun 24 Dec 2023 13:06:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57974
IP address blocks: 37.128.248.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:9b:ef:93:20:83:49:e6:9c:a1:48:55:e4:93:88:0e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Dec 24 13:06:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1daf8fcb923b9d58541bcce89934624aa06ffde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b5:57:f2:02:f5:25:60:22:d7:a8:97:e8:3c:
10:54:43:7b:42:75:8b:16:d0:a1:b3:09:18:95:eb:
eb:51:9a:ff:c3:ba:bc:14:e2:19:7e:ce:13:b2:aa:
c1:16:bd:4c:94:f1:bf:6e:15:61:72:0b:3d:c9:70:
10:de:01:77:67:d4:08:e2:26:ec:03:18:23:23:bf:
4e:1d:10:11:f5:ac:60:16:cb:10:c5:9c:a2:d8:71:
ee:ab:0d:32:d8:4d:0a:2b:cf:1c:8f:7a:b1:da:19:
e5:12:b4:91:44:be:1d:43:bc:92:51:99:e9:c8:41:
a1:50:dc:90:ec:31:bd:b1:bb:0d:11:4c:08:f7:8c:
9e:2a:93:c5:bc:4f:97:18:45:53:99:99:4b:0d:31:
a2:88:77:e7:92:5b:b0:86:73:e4:dd:65:98:22:35:
f9:a6:e5:4e:01:ca:56:48:71:63:e1:32:fa:e9:f0:
60:38:16:64:e8:e0:09:18:57:df:f7:0d:1a:39:d3:
cb:40:f1:ef:0d:ff:9c:a3:13:8b:85:6e:e2:ea:a7:
69:69:d3:70:72:7a:f1:a6:34:f4:c9:62:67:40:ee:
8a:7b:c9:3e:f9:2a:6f:60:ab:79:67:6c:7f:4e:f5:
ff:ed:ca:1a:15:8c:2c:a3:cc:ec:87:b9:c2:43:2a:
ab:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DA:F8:FC:B9:23:B9:D5:85:41:BC:CE:89:93:46:24:AA:06:FF:DE
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/8dr4_LkjudWFQbzOiZNGJKoG_94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.248.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:4c:e6:5b:0f:d6:6f:5b:58:5c:7d:21:6c:50:e9:be:2c:02:
ba:e4:29:f7:6e:af:9b:f3:c5:cc:0e:de:2a:22:02:ac:9d:d3:
b1:82:d4:cb:f8:c9:d1:ca:09:c6:5b:9d:77:1c:c7:cc:5d:03:
00:6a:55:1a:ee:83:16:5b:de:06:a8:54:e8:4d:16:2f:d9:c4:
1c:ee:28:5f:92:e2:c3:f4:a6:05:03:14:51:ea:ca:e2:53:d6:
04:4c:67:35:57:a9:5e:9d:50:b4:d3:bd:18:cb:a1:4d:f7:d2:
62:54:7f:08:a7:a3:4b:55:2c:3b:ce:f3:27:ac:e5:49:c6:b5:
e4:1b:b3:49:df:71:c1:db:89:d4:76:21:e1:5a:43:74:37:25:
af:55:51:74:2b:ea:90:dc:6e:98:98:11:62:c9:01:30:e4:e7:
71:af:e4:14:46:1b:2f:6c:5b:7c:d5:4e:ea:1b:c3:29:3f:71:
e7:dc:8c:e6:46:ff:0b:3f:62:02:e3:4f:3c:60:99:7a:47:6f:
59:ca:a1:8b:01:49:11:38:df:67:92:6d:d4:9b:e8:a0:00:39:
fe:4f:ed:95:0a:a3:cb:a8:86:06:36:7a:7d:33:9c:d5:dd:6e:
59:42:4b:d6:24:26:13:7d:90:4e:f6:d1:df:f3:7c:92:d9:11:
e9:44:f7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:10 2025 by rpki-client