Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/j7rN0i69iy569SdmgQ6fHRhdj-Y.roa
File: j7rN0i69iy569SdmgQ6fHRhdj-Y.roa (raw, json)
Hash identifier: K7VAwuyyIlSMwaAaUFWVEIX4LGyYKVWWBqDQ4rYQ0T8=
Subject key identifier: 8F:BA:CD:D2:2E:BD:8B:2E:7A:F5:27:66:81:0E:9F:1D:18:5D:8F:E6
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01941FFA8DF2B62F205E5D747CB794B83303
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/j7rN0i69iy569SdmgQ6fHRhdj-Y.roa
Signing time: Wed 01 Jan 2025 03:48:21 +0000
ROA not before: Wed 01 Jan 2025 03:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152179
IP address blocks: 37.128.250.0/23 maxlen: 24
176.221.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:8d:f2:b6:2f:20:5e:5d:74:7c:b7:94:b8:33:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 1 03:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fbacdd22ebd8b2e7af52766810e9f1d185d8fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:92:92:37:f2:8e:b6:40:9b:fa:66:06:c6:bf:
b7:97:6f:6e:0f:cc:f9:1d:16:49:ce:92:47:fd:5e:
04:ff:55:27:7f:9b:23:9b:64:bb:0a:ba:f6:ff:b8:
c8:21:80:8a:13:d4:f1:56:f9:d0:fc:cd:a5:24:a0:
ce:c6:88:3b:e0:28:9f:e4:e1:1a:72:0a:56:14:c0:
58:71:09:ca:44:69:61:06:ba:6c:ee:5a:a3:93:47:
07:9f:78:d2:18:b9:f8:9a:cd:a3:f7:da:52:bd:74:
46:2b:d2:e6:86:e3:28:8e:85:fa:cc:1a:4a:38:63:
fd:4a:32:89:be:b2:a7:87:b0:25:ce:86:49:4a:f3:
e9:ed:c8:65:52:1e:54:19:b2:4b:c1:7a:6d:4b:bb:
2e:31:f3:c6:ec:42:e2:d3:28:72:d1:b7:7b:21:7f:
ca:89:df:e6:54:a2:9f:e8:eb:20:e2:d6:82:a8:37:
7a:33:87:15:6a:4f:3b:41:27:c1:0f:dc:ce:cf:24:
b8:47:08:20:ba:cb:b8:83:3f:af:7b:c9:a8:74:1e:
13:e9:b0:8d:b3:10:d1:9a:53:53:da:a3:b0:02:07:
6a:9d:84:3d:db:90:a1:4d:a3:4b:d0:f1:28:6c:43:
b1:58:68:7a:04:b2:87:59:44:ef:00:6e:70:58:cc:
4b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BA:CD:D2:2E:BD:8B:2E:7A:F5:27:66:81:0E:9F:1D:18:5D:8F:E6
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/j7rN0i69iy569SdmgQ6fHRhdj-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.250.0/23
176.221.16.0/22
Signature Algorithm: sha256WithRSAEncryption
38:e1:b7:9b:69:e0:a5:e9:c3:3e:b1:70:66:d3:e2:24:56:78:
34:25:01:42:7b:29:3a:b7:1a:3e:fa:8e:cb:4e:ca:b4:a7:2b:
bd:f0:5f:92:64:1a:d1:55:23:1c:64:93:4a:26:d6:de:93:18:
68:e3:59:55:29:fb:b7:18:2c:d6:9c:48:3b:7e:06:19:f9:a9:
1a:5b:3a:b1:2e:e8:60:8e:92:e5:f2:f1:84:22:8e:ca:c0:56:
98:1c:9a:24:64:52:18:4b:b4:e1:86:b8:ee:b9:0a:15:7f:ac:
b9:dd:5c:9f:53:50:b4:db:f0:55:8d:61:b8:6b:ee:34:83:ad:
c4:47:5a:88:7b:c1:d5:f6:2a:c5:ae:b7:0e:21:d4:5f:fa:ae:
9a:fb:1c:af:64:e9:74:88:4c:7d:9d:00:30:fb:eb:94:b9:5b:
a9:ba:b8:c4:93:c8:d0:20:37:c5:15:8b:a7:37:b7:ea:06:17:
1a:76:79:b6:10:1a:49:fa:c2:11:ca:96:46:d2:05:e4:ba:cb:
eb:55:41:f1:80:0c:f6:a4:bd:de:5b:22:90:ce:53:6d:8f:cb:
0a:a2:f9:aa:1c:38:1e:d1:36:c5:4c:55:0f:dd:6e:25:28:c1:
a1:29:c6:09:64:f6:e2:a5:d7:73:d9:9f:19:67:bd:80:14:07:
ba:fd:29:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:47 2025 by rpki-client