Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/UXX6b0zCq_NNw1CChIsDpoAIw90.roa
File: UXX6b0zCq_NNw1CChIsDpoAIw90.roa (raw, json)
Hash identifier: 8GfCVg61ZSQDqh9MCwsNlUYH11Tm5+lA4Y8M7MMHqUk=
Subject key identifier: 51:75:FA:6F:4C:C2:AB:F3:4D:C3:50:82:84:8B:03:A6:80:08:C3:DD
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01948F257E49F08FD2C311EC40BB76B798DE
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/UXX6b0zCq_NNw1CChIsDpoAIw90.roa
Signing time: Wed 22 Jan 2025 17:53:06 +0000
ROA not before: Wed 22 Jan 2025 17:53:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215638
IP address blocks: 37.128.248.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8f:25:7e:49:f0:8f:d2:c3:11:ec:40:bb:76:b7:98:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 22 17:53:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5175fa6f4cc2abf34dc35082848b03a68008c3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7f:28:88:89:5b:4b:e9:8d:2e:11:18:79:24:
c2:0c:7f:53:18:bb:1e:56:2d:07:ec:e3:16:5a:b0:
c1:72:d9:4e:db:4f:d7:e7:e2:66:50:5f:6f:33:66:
5a:60:d4:61:74:36:93:b8:5f:ac:3f:a4:cf:44:67:
80:00:c4:5a:dd:bb:3b:98:db:28:b8:93:2b:de:9e:
98:af:c1:3e:21:a4:17:97:27:fc:2b:69:8c:b3:87:
c5:7b:ec:cf:ab:1c:0e:aa:9e:81:0f:4a:19:5d:c6:
cf:c8:c1:94:38:85:84:42:e5:2d:8e:09:55:92:50:
a5:90:cb:f5:60:96:e4:6c:c9:ca:ee:cd:0c:58:3f:
7d:6c:c6:25:4d:b2:77:f2:71:18:2f:d9:74:5e:24:
75:ea:f7:43:9f:62:34:e4:72:8f:14:27:48:2d:ba:
fa:e6:27:f3:af:93:ce:83:f1:fc:94:94:e7:8c:84:
9e:64:95:16:72:b0:86:fb:b0:e1:60:b5:90:05:24:
7f:e0:c7:1c:b5:ba:a9:7d:28:0f:dc:bc:b0:d0:d5:
7d:c7:e5:db:ba:2f:da:b1:57:37:63:cc:1c:b5:ec:
76:40:47:be:85:fd:89:9d:8c:d3:42:0b:6c:0a:b6:
db:3f:8d:94:47:1a:91:51:d8:e0:eb:99:d8:eb:81:
50:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:75:FA:6F:4C:C2:AB:F3:4D:C3:50:82:84:8B:03:A6:80:08:C3:DD
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/UXX6b0zCq_NNw1CChIsDpoAIw90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.248.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:68:ae:e2:cc:59:5f:79:86:80:22:f5:26:f1:bb:0a:88:82:
64:17:91:a0:8e:52:e0:f9:85:99:2f:9a:a7:67:22:c3:00:27:
75:89:a2:69:2a:9e:d2:a1:b5:6c:1f:cf:08:6a:1c:d1:91:1d:
da:22:74:a1:2f:9d:36:ca:af:79:6a:85:7d:41:84:a9:3e:f7:
94:eb:46:53:60:f4:bb:49:49:87:2a:7d:0f:62:58:11:87:f7:
2a:6c:5a:c6:44:d7:15:77:4b:93:2d:8a:a8:2c:dd:dd:89:4f:
f5:32:1a:9f:c2:42:4c:e1:59:9e:05:22:19:4d:a6:c2:fb:49:
9e:09:f9:d3:eb:db:04:71:f0:29:99:d4:4b:a9:08:23:f5:c1:
7c:0e:30:5d:36:a4:5d:87:f5:00:f8:82:1e:4f:01:e2:4a:f2:
e4:4d:71:e5:f8:d2:72:c8:fe:ff:20:3b:1d:d3:70:3f:60:f0:
22:d4:30:f1:ea:58:62:57:f5:7c:b0:e8:8e:e5:4b:38:fd:8a:
e0:df:02:0b:bb:8c:d9:4e:c9:12:77:dc:c1:f3:19:3b:4a:28:
2f:e6:a6:32:3e:5a:a1:af:c4:64:f6:44:03:be:2e:b7:a1:9d:
8c:dd:d4:87:26:63:fe:b0:ef:5f:d3:51:ca:22:ae:10:95:cc:
b9:3a:70:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:29 2025 by rpki-client