Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/bYvvLRqjGaPdYouRP8jE_eQovq8.roa
File: bYvvLRqjGaPdYouRP8jE_eQovq8.roa (raw, json)
Hash identifier: YaJefBbX7igOrV/ZRpVzw9LlMBOK4B26ASJ+3Kmkbok=
Subject key identifier: 6D:8B:EF:2D:1A:A3:19:A3:DD:62:8B:91:3F:C8:C4:FD:E4:28:BE:AF
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01858096C21382A43B222BC0A3D1C60D31E9
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/bYvvLRqjGaPdYouRP8jE_eQovq8.roa
Signing time: Thu 05 Jan 2023 06:20:41 +0000
ROA not before: Thu 05 Jan 2023 06:20:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 4826
IP address blocks: 37.128.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:80:96:c2:13:82:a4:3b:22:2b:c0:a3:d1:c6:0d:31:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 5 06:20:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d8bef2d1aa319a3dd628b913fc8c4fde428beaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:31:a1:ea:db:ce:36:64:20:ba:7b:8b:dc:57:
a4:a5:53:78:0f:0d:e9:c4:41:4a:69:a7:e7:04:58:
b2:d9:a1:f9:f7:a0:78:38:fb:8e:a5:9c:03:f5:ee:
80:c4:fe:db:e1:29:cd:06:20:b4:85:f6:d8:c9:81:
56:5c:b1:ca:9e:65:51:1e:3a:68:f2:c4:46:01:95:
d8:1d:ef:73:58:1b:76:4b:be:a8:02:31:d7:86:5c:
91:27:91:03:16:ea:08:6a:3b:6b:70:71:72:3d:f8:
0c:4d:79:fe:0b:8e:9e:f9:d2:e4:f8:db:59:e4:9b:
12:4a:0d:3f:18:ee:94:09:08:26:60:8e:97:d6:c2:
31:6d:00:f3:d2:fb:95:66:10:a6:20:e7:32:cc:a7:
a8:ec:3a:f8:f0:1c:0c:b0:20:40:dc:54:01:79:f7:
7c:de:0e:c0:3a:08:e0:2e:2e:cc:ec:e8:bf:cf:e6:
0d:96:2b:dd:b9:c2:62:d5:bf:e8:18:58:7f:a0:64:
56:d9:12:e9:45:25:0b:13:f3:76:71:e5:e1:84:83:
43:40:32:2e:8d:8b:99:d4:f5:7f:e2:bc:3a:91:89:
1b:c3:33:ce:6f:ae:38:1c:40:19:fa:13:3f:c9:37:
2b:4f:c7:db:af:b3:64:17:79:e5:4d:81:8b:01:a7:
1f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8B:EF:2D:1A:A3:19:A3:DD:62:8B:91:3F:C8:C4:FD:E4:28:BE:AF
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/bYvvLRqjGaPdYouRP8jE_eQovq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.248.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:45:a1:71:40:b1:b7:e3:25:44:17:1c:a8:67:05:bb:22:5e:
44:42:0c:06:4d:17:93:f8:3c:f4:00:2b:e0:11:8f:f6:db:23:
f6:40:e8:84:b1:b5:1c:95:6f:d2:9b:ec:e7:e3:ef:f6:29:a8:
26:90:a8:e5:3d:9d:50:f1:56:00:5d:a0:cd:a8:1c:c8:6d:01:
d8:db:94:eb:f5:c2:2e:68:b7:f1:b1:88:dc:f4:02:4e:86:d9:
c4:e8:77:0d:ec:9b:ec:f7:a8:9f:8e:bd:f1:3d:9d:54:42:a3:
8b:d2:ab:88:5f:1e:3a:33:29:5d:d3:69:ca:d0:84:d6:62:a2:
dc:27:70:3e:65:da:92:b6:73:89:c6:61:d6:e4:ca:6d:e8:12:
e8:fd:63:6e:db:05:5a:5c:93:10:82:85:95:2a:2f:91:03:78:
0c:a9:0f:dc:81:78:cd:8a:de:d8:69:06:03:d7:00:41:8c:11:
56:17:37:a5:db:19:8e:2c:24:9f:51:f1:51:9e:c7:45:03:c7:
1c:6f:d2:3f:3a:e6:4b:89:b6:01:59:72:eb:51:c3:58:0e:59:
37:9e:77:5f:6c:4b:dc:3a:0c:9c:62:5c:5e:26:7f:69:93:92:
99:b8:b8:c1:ce:f7:e1:a5:46:22:54:3d:49:be:06:b8:8c:44:
25:b9:2c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:52 2025 by rpki-client