Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/dtwlb1NcqRBluBZ6rPWshIDQids.roa
File: dtwlb1NcqRBluBZ6rPWshIDQids.roa (raw, json)
Hash identifier: XtM8SNE7ILi+1VcU2NcvzjPFutMSOcTCk0MVgwh+L6U=
Subject key identifier: 76:DC:25:6F:53:5C:A9:10:65:B8:16:7A:AC:F5:AC:84:80:D0:89:DB
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 0186F88D2E183F97A3FA83A862213C81280B
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/dtwlb1NcqRBluBZ6rPWshIDQids.roa
Signing time: Sun 19 Mar 2023 06:27:27 +0000
ROA not before: Sun 19 Mar 2023 06:27:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39521
IP address blocks: 37.128.252.0/22 maxlen: 24
37.128.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f8:8d:2e:18:3f:97:a3:fa:83:a8:62:21:3c:81:28:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Mar 19 06:27:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76dc256f535ca91065b8167aacf5ac8480d089db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8a:f1:0a:7d:0d:c5:5b:8d:3f:01:0c:45:10:
0d:28:a2:43:04:40:6d:b8:e3:a0:7f:18:0f:eb:56:
d4:8c:fa:6a:23:a2:56:d6:28:b6:7d:4a:91:db:2a:
d1:75:9f:68:2a:cb:cd:e8:33:3d:6a:0f:e3:21:5f:
0a:9e:6e:2b:99:d0:ea:aa:21:e5:71:d7:c6:2e:71:
17:c7:90:7c:e6:84:2b:6a:07:92:8a:22:5c:73:0a:
2a:d6:69:43:dd:4f:18:d6:46:83:25:5e:40:74:87:
1e:cc:99:54:ff:1f:c0:fc:7f:5d:a2:40:29:f3:b8:
bf:a1:93:89:24:99:6a:d9:dc:07:19:b7:7b:44:c5:
ed:87:46:39:d3:71:89:91:fb:75:82:a2:28:1f:90:
19:3d:df:b0:2c:65:e5:77:b8:9e:2c:4d:1a:32:60:
87:61:7d:a0:96:4f:8a:6c:76:c0:d3:a7:96:35:cc:
18:51:51:c7:fa:cb:d5:f5:fc:05:c2:dc:01:c5:74:
4a:e5:0f:d9:a2:c3:f2:80:f2:c4:fb:d1:84:bb:05:
9c:9c:15:8c:17:55:3b:85:2d:40:e2:81:58:9e:18:
56:ae:50:38:8f:34:61:18:63:a5:11:9c:1b:c1:29:
a0:ee:ac:7b:ae:bb:56:8e:bd:d8:26:04:a2:64:e6:
e0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DC:25:6F:53:5C:A9:10:65:B8:16:7A:AC:F5:AC:84:80:D0:89:DB
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/dtwlb1NcqRBluBZ6rPWshIDQids.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.248.0/21
Signature Algorithm: sha256WithRSAEncryption
6a:0e:0b:71:a3:5b:aa:98:43:1a:ed:e1:2b:a0:a9:1c:2d:e3:
25:83:a5:39:91:0e:86:78:2b:cd:9c:0d:74:b1:65:10:13:8d:
c5:17:d5:03:c8:58:db:60:ec:14:ae:79:a8:f5:de:a4:fb:5c:
4d:7d:a4:74:8f:27:e1:24:35:9f:b9:5a:ba:d5:2a:80:bd:7f:
b2:c8:17:22:23:0c:be:e0:4c:0f:71:20:91:af:e9:71:3d:0c:
98:4b:95:25:c2:66:bc:ce:46:67:98:92:f1:87:ee:ea:bf:eb:
a0:09:2a:74:15:a5:8e:f7:0d:36:84:2f:b2:ff:d3:7a:de:53:
b0:35:55:99:fd:95:75:d2:8c:c4:05:6d:ae:1e:cf:46:e2:1a:
53:24:f2:d4:7d:4b:09:ef:b5:ff:26:5e:9b:5e:62:65:ec:e0:
f8:cb:7c:1e:02:6c:f3:2f:3b:31:88:8a:92:5a:a1:95:c0:e5:
13:86:bc:75:c5:5f:66:80:ea:08:99:4a:43:23:d5:c4:0d:22:
bb:eb:8e:92:4c:f3:2b:43:98:ad:93:30:26:d3:13:f8:ee:90:
33:26:f8:1f:6a:96:61:c1:c9:b7:18:7b:df:a1:d6:68:08:17:
0b:bd:e2:18:df:66:2c:fa:31:f5:0e:fa:90:34:cc:1c:85:f9:
b8:24:51:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:47 2025 by rpki-client