Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/EoiwA6eD3cee9bvJh_u_u3Jwjpk.roa
File: EoiwA6eD3cee9bvJh_u_u3Jwjpk.roa (raw, json)
Hash identifier: 8TarplsJXsQ54W/A11oAMu2CXPe46DATddElyo8NyQg=
Subject key identifier: 12:88:B0:03:A7:83:DD:C7:9E:F5:BB:C9:87:FB:BF:BB:72:70:8E:99
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018948D20A7642C33BCBBB2D71BC8064BD7E
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/EoiwA6eD3cee9bvJh_u_u3Jwjpk.roa
Signing time: Wed 12 Jul 2023 06:37:52 +0000
ROA not before: Wed 12 Jul 2023 06:37:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55154
IP address blocks: 37.128.248.0/23 maxlen: 23
37.128.252.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:48:d2:0a:76:42:c3:3b:cb:bb:2d:71:bc:80:64:bd:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jul 12 06:37:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1288b003a783ddc79ef5bbc987fbbfbb72708e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2f:0b:08:a7:e7:5b:85:70:ee:79:04:50:a5:
59:66:97:36:47:b0:8d:5a:4b:39:ce:09:ed:5e:27:
54:db:ec:9c:a0:ec:cf:18:92:e6:f9:59:b2:10:f4:
8a:70:5d:58:3c:bf:ed:bc:4f:58:55:7f:04:00:dd:
c7:d2:3d:6c:1b:b4:56:32:a1:28:43:6d:ae:6f:48:
9e:6d:07:a3:6e:82:01:e2:f9:24:b5:ab:47:fb:47:
3e:2b:d7:7a:4b:0a:94:5a:88:cc:2d:d3:47:5a:cd:
41:fe:15:61:af:d0:66:b3:ed:d2:f8:3b:47:81:dc:
df:19:42:0b:42:84:8c:75:a7:ba:a8:cc:c4:62:d3:
91:29:13:d6:67:98:bf:3b:32:0d:99:f3:89:0a:b7:
a0:d3:65:6f:9c:91:1b:56:25:1e:52:86:85:e6:21:
ff:09:18:da:2f:56:62:0a:d4:be:d6:1c:f3:b6:0e:
26:07:10:3c:47:bf:36:af:e6:47:e7:36:a6:92:21:
09:88:cd:dd:20:3b:92:b2:e3:65:00:a3:d8:d8:5d:
16:79:64:32:46:59:37:e0:06:8d:23:bb:0b:b8:24:
d5:72:d5:12:0c:c2:7d:08:24:23:6d:e7:f8:47:44:
26:2c:7f:98:7d:c4:08:48:50:f7:89:e5:9a:69:49:
d1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:88:B0:03:A7:83:DD:C7:9E:F5:BB:C9:87:FB:BF:BB:72:70:8E:99
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/EoiwA6eD3cee9bvJh_u_u3Jwjpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.248.0/23
37.128.252.0/23
Signature Algorithm: sha256WithRSAEncryption
23:7e:5a:07:1a:97:65:b2:99:c9:95:b9:92:f0:eb:06:c0:35:
5a:74:df:05:68:ef:59:96:b1:3d:6e:01:fa:10:b4:79:a7:5e:
ba:8e:ac:93:04:e7:44:88:2f:fc:d2:87:a3:38:31:fe:7d:a6:
79:ec:f2:22:5f:e8:39:00:e0:9f:83:bc:ae:73:a1:05:bd:f2:
06:e3:2a:6f:ef:37:3d:96:6d:37:fb:0f:7a:e6:8f:d9:f7:ea:
53:e6:67:a9:ce:71:b7:b5:59:92:5c:af:05:46:27:c5:31:8a:
e8:d5:98:45:35:cd:38:d9:b5:64:f4:13:b3:3a:77:de:fb:4f:
b8:ae:4a:da:18:b2:1a:39:05:41:d3:87:ed:9c:a2:aa:c7:26:
08:d4:49:d6:fb:95:13:f3:26:3b:25:e4:2f:3e:a4:af:d9:16:
b7:59:51:8e:9a:05:f8:0f:f6:1b:dc:8f:08:80:54:0c:75:75:
f0:72:1d:eb:78:a3:3c:57:e1:6d:cf:0e:67:b2:ae:99:35:a2:
12:b9:04:30:14:5f:3a:a3:04:cd:44:49:d5:57:92:57:c6:f5:
b4:a6:59:74:93:2f:39:3e:e9:d4:ed:a9:b1:27:34:cf:d3:44:
c5:39:cf:6f:fe:00:c1:56:c4:06:f2:be:d3:b2:3c:20:2d:e2:
85:c1:2b:c3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYlI0gp2QsM7y7stcbyAZL1+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl
ZWNkYjYwHhcNMjMwNzEyMDYzNzUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjg4YjAwM2E3ODNkZGM3OWVmNWJiYzk4N2ZiYmZiYjcyNzA4ZTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiS8LCKfnW4Vw7nkEUKVZZpc2R7CN
Wks5zgntXidU2+ycoOzPGJLm+VmyEPSKcF1YPL/tvE9YVX8EAN3H0j1sG7RWMqEo
Q22ub0iebQejboIB4vkktatH+0c+K9d6SwqUWojMLdNHWs1B/hVhr9Bms+3S+DtH
gdzfGUILQoSMdae6qMzEYtORKRPWZ5i/OzINmfOJCreg02VvnJEbViUeUoaF5iH/
CRjaL1ZiCtS+1hzztg4mBxA8R782r+ZH5zamkiEJiM3dIDuSsuNlAKPY2F0WeWQy
Rlk34AaNI7sLuCTVctUSDMJ9CCQjbef4R0QmLH+YfcQISFD3ieWaaUnRWQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBKIsAOng93HnvW7yYf7v7tycI6ZMB8GA1UdIwQY
MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt
NjY0NTc3MjRjMmQzLzEvRW9pd0E2ZUQzY2VlOWJ2SmhfdV91M0p3anBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz
LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBJYD4AwQB
JYD8MA0GCSqGSIb3DQEBCwUAA4IBAQAjfloHGpdlspnJlbmS8OsGwDVadN8FaO9Z
lrE9bgH6ELR5p166jqyTBOdEiC/80oejODH+faZ57PIiX+g5AOCfg7yuc6EFvfIG
4ypv7zc9lm03+w965o/Z9+pT5mepznG3tVmSXK8FRifFMYro1ZhFNc042bVk9BOz
Onfe+0+4rkraGLIaOQVB04ftnKKqxyYI1EnW+5UT8yY7JeQvPqSv2Ra3WVGOmgX4
D/Yb3I8IgFQMdXXwch3reKM8V+Ftzw5nsq6ZNaISuQQwFF86owTNREnVV5JXxvW0
pll0ky85PunU7amxJzTP00TFOc9v/gDBVsQG8r7TsjwgLeKFwSvD
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:21 2025 by rpki-client