Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/jHo2DNYLc31PmcdzoosE2mOHWTo.roa
File: jHo2DNYLc31PmcdzoosE2mOHWTo.roa (raw, json)
Hash identifier: GOflIXufJixRqoFuhpE3fLSIxXwXzcLzs/qlTomzx6k=
Subject key identifier: 8C:7A:36:0C:D6:0B:73:7D:4F:99:C7:73:A2:8B:04:DA:63:87:59:3A
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018441AAE6CDC3CC9BF808BBED2EF5CFD0E9
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/jHo2DNYLc31PmcdzoosE2mOHWTo.roa
Signing time: Fri 04 Nov 2022 08:03:50 +0000
ROA not before: Fri 04 Nov 2022 08:03:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9384
IP address blocks: 37.128.240.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:41:aa:e6:cd:c3:cc:9b:f8:08:bb:ed:2e:f5:cf:d0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Nov 4 08:03:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c7a360cd60b737d4f99c773a28b04da6387593a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:24:3b:64:e4:d4:12:25:d1:85:04:59:3f:10:
1e:db:42:97:ae:be:3d:fd:86:ba:de:a1:7b:a1:95:
3d:5d:90:3e:f4:46:d0:91:2d:f6:b2:d0:51:5d:d8:
f1:66:24:a5:ec:3f:f7:9d:f6:02:fc:23:94:ed:bc:
97:0c:0d:7d:55:93:bb:3e:6d:ed:e1:a6:a5:40:04:
3b:d8:23:14:03:27:c0:fc:18:df:2a:a7:f2:a1:a0:
b7:27:7e:b6:6a:91:c8:9a:c4:83:27:c0:f3:b1:99:
7d:2b:ef:57:31:3c:27:f9:6c:95:fb:29:9f:d6:24:
a6:59:40:b8:b2:ea:34:61:d9:1c:ee:a1:d0:69:37:
c0:1f:cb:35:81:e0:39:ae:8b:7e:22:c3:80:cb:71:
e1:38:63:71:aa:f6:38:95:e0:cd:ea:7c:d0:be:44:
4e:5e:9b:cd:81:6a:b5:62:8a:f2:b6:49:cf:81:31:
dd:12:08:7e:10:4b:67:f0:2b:f7:d0:a4:2f:f3:c9:
bf:75:50:ac:b8:fd:ed:a6:15:e6:13:d8:00:12:65:
c5:11:5c:b4:8d:69:5b:58:86:35:1f:c5:43:7d:9a:
f3:d3:fd:c6:88:fa:b3:40:a8:a0:d1:15:b6:2e:94:
ce:dc:bd:ef:35:d1:38:7d:2c:67:f6:a9:d2:37:2f:
db:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7A:36:0C:D6:0B:73:7D:4F:99:C7:73:A2:8B:04:DA:63:87:59:3A
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/jHo2DNYLc31PmcdzoosE2mOHWTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.240.0/21
Signature Algorithm: sha256WithRSAEncryption
a3:e2:2d:59:b2:29:0f:29:6f:ea:61:a3:a1:f9:c3:2d:f5:a1:
e6:06:dd:19:46:9c:ea:5f:74:ec:2a:7c:0c:84:39:9b:a7:11:
29:0b:e3:89:ba:84:d4:d9:82:b1:73:a4:53:db:37:de:b4:b5:
95:ab:a2:9d:a8:53:9e:59:20:a7:36:3f:1b:fe:a1:59:e4:e6:
dc:d1:f9:b0:87:25:31:21:d9:0f:43:08:7e:1b:c6:5e:14:5e:
52:86:03:25:11:f2:9b:6c:e1:07:74:64:e1:53:98:16:23:d5:
b9:5f:c1:dc:8e:2f:61:4d:f8:a7:c3:cc:e4:82:09:6f:0f:4b:
67:46:b6:a9:25:95:e0:03:a6:dc:00:36:b3:0d:ee:20:40:96:
d0:82:aa:9f:bb:76:02:77:29:65:5d:32:bf:b1:e9:d4:c4:fc:
0a:de:07:2f:ed:12:a2:59:fc:b9:a1:14:72:35:e7:9c:16:8a:
ec:c7:9b:42:b4:86:8f:2d:c1:a3:e7:a3:30:3b:ab:11:52:9e:
93:7a:38:d0:0f:44:79:83:9e:ba:29:c2:63:45:c0:bc:98:3c:
73:4c:bc:00:32:c8:1d:78:88:b3:b1:f8:71:d4:23:aa:58:d8:
73:5f:17:9e:0c:88:81:97:37:93:3b:ce:02:a0:89:68:c4:80:
45:e6:6d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:05 2025 by rpki-client