Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/YeHjVSxfypMIGOtDW6nNeVZr_ww.roa
File: YeHjVSxfypMIGOtDW6nNeVZr_ww.roa (raw, json)
Hash identifier: R/pQ2eK3Bo8DDro+GOg1T0HP+11JDGwObWF4i7OlrR0=
Subject key identifier: 61:E1:E3:55:2C:5F:CA:93:08:18:EB:43:5B:A9:CD:79:56:6B:FF:0C
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01941FFA8CAD06B9D227B4FE2B3C6BE509CC
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/YeHjVSxfypMIGOtDW6nNeVZr_ww.roa
Signing time: Wed 01 Jan 2025 03:48:21 +0000
ROA not before: Wed 01 Jan 2025 03:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 147293
IP address blocks: 37.128.254.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:8c:ad:06:b9:d2:27:b4:fe:2b:3c:6b:e5:09:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 1 03:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61e1e3552c5fca930818eb435ba9cd79566bff0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9c:18:19:9e:78:d0:8e:0b:9a:2d:f4:2a:fb:
7d:de:b8:60:41:b4:23:d4:df:03:18:d9:9d:d4:74:
fa:a1:88:31:6e:38:a9:f7:8e:36:92:1f:9c:30:74:
d1:72:72:7e:be:70:26:12:d0:e8:47:8d:96:de:b4:
02:17:de:7a:82:dd:ae:de:4d:78:90:60:8e:14:62:
1d:6d:4d:0c:13:48:70:84:eb:b2:b4:3a:bd:97:c5:
71:e6:c8:4b:f3:d6:52:16:12:3b:ae:f5:fb:ea:f6:
07:7f:e7:21:84:dc:1f:d2:42:3b:1a:e4:b8:90:d1:
ee:07:39:26:de:ba:bf:40:4e:e9:e9:08:a7:e9:fd:
3b:8d:42:f4:50:12:29:d3:60:bb:4f:9b:b3:f0:6e:
89:9b:a9:2f:d6:ed:8f:97:b0:f6:6f:9d:f9:ca:dc:
e6:20:6e:60:21:f3:b7:c5:c1:57:0b:88:7f:9a:ba:
4e:9f:e6:3b:ce:79:0b:ee:76:96:a6:75:70:33:64:
bf:80:36:99:72:29:31:dc:16:aa:1f:20:59:a9:54:
3a:10:95:a8:09:2c:e9:74:93:29:b6:cc:b8:b0:2a:
f9:9e:d8:00:1f:24:97:06:dd:46:09:85:32:1a:f6:
3f:34:61:d2:3f:15:80:88:48:7d:af:f9:da:f6:11:
43:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E1:E3:55:2C:5F:CA:93:08:18:EB:43:5B:A9:CD:79:56:6B:FF:0C
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/YeHjVSxfypMIGOtDW6nNeVZr_ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.254.0/23
Signature Algorithm: sha256WithRSAEncryption
32:fc:ee:a0:80:22:f0:b8:ee:20:9b:71:b3:c0:b3:72:2d:15:
20:2d:59:63:fe:6a:88:d9:41:74:4a:73:53:33:aa:7a:a5:87:
73:87:00:65:fb:c3:66:aa:75:4c:11:e5:31:87:9f:34:b0:3e:
2c:be:d3:6c:57:1b:cb:91:1f:5e:ef:cd:9d:38:7a:41:b8:0d:
2f:6e:ad:87:d8:7a:70:1c:fb:a3:24:ce:94:f4:8f:6c:50:21:
c6:7f:35:15:5b:e8:66:7f:5d:03:43:5c:11:34:f0:7a:b8:c9:
de:97:9a:cf:01:22:4c:41:50:cd:07:06:bf:cf:b9:c7:ea:b2:
b9:ab:02:bd:55:e9:da:1f:7b:ec:09:56:a7:1f:20:91:ea:c7:
2b:ea:eb:97:45:b1:23:3b:0e:07:3f:92:29:d3:53:e7:bf:e9:
2b:25:e7:b7:93:a6:53:54:61:11:d4:2b:1a:57:d4:53:95:c6:
ea:28:1a:31:b4:52:b9:71:c7:1a:d9:78:95:bf:94:69:3f:9d:
70:3a:c4:09:cf:0f:1d:30:89:bf:60:42:f6:04:30:0e:29:f2:
fc:1b:ec:3a:b3:27:f1:ee:1b:bf:d1:3c:30:6b:6d:f7:e5:42:
86:e7:98:73:d9:65:99:8d:a0:4d:aa:48:ca:ea:e7:7e:c4:4e:
d0:8c:bb:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:35 2025 by rpki-client