Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/oohsU5hrvTMm6sz7ucGp4Iv--Og.roa
File: oohsU5hrvTMm6sz7ucGp4Iv--Og.roa (raw, json)
Hash identifier: djbttH0TAiGzs2CaLTWsX2J/9splEIA0f5K92CO/LjA=
Subject key identifier: A2:88:6C:53:98:6B:BD:33:26:EA:CC:FB:B9:C1:A9:E0:8B:FE:F8:E8
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018ED4E5B1D634083E6725C8A7AE98376D30
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/oohsU5hrvTMm6sz7ucGp4Iv--Og.roa
Signing time: Sat 13 Apr 2024 00:40:06 +0000
ROA not before: Sat 13 Apr 2024 00:40:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 37.128.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d4:e5:b1:d6:34:08:3e:67:25:c8:a7:ae:98:37:6d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Apr 13 00:40:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2886c53986bbd3326eaccfbb9c1a9e08bfef8e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1b:31:59:06:13:e2:95:7c:f9:76:a7:7a:f7:
46:ad:fb:c0:41:17:27:41:69:62:e3:f6:61:ab:0d:
c5:47:e9:e0:46:ac:95:da:a9:1a:85:00:11:0d:78:
7f:b6:82:48:2a:70:ee:92:5a:94:23:99:9a:54:1d:
34:a4:b6:35:95:82:d0:c1:86:0c:6e:cd:64:64:cc:
75:84:ab:18:0d:c8:62:e3:ae:a7:6b:1b:69:4e:8e:
b4:19:e6:44:e1:57:39:df:0c:3f:26:4f:75:e1:b0:
7a:df:15:55:77:22:eb:56:06:fb:a5:65:11:dd:b9:
2e:18:8a:0e:b8:58:bf:39:8f:63:76:70:6d:5a:0b:
93:9d:98:78:f2:a9:f6:fc:83:b6:a5:e5:c3:41:f4:
47:ae:36:95:e1:6a:0d:e9:c2:d6:53:1c:ef:61:76:
05:6e:8d:22:6f:65:08:76:a1:9a:4f:14:71:42:36:
3a:80:29:e3:61:a3:ae:37:fb:14:e0:ea:5a:dc:74:
9d:55:dc:e6:c6:6f:9f:6a:21:20:e8:f4:d4:46:72:
91:67:6b:7e:f9:40:52:28:78:db:0c:2d:02:41:d0:
09:fc:bd:a1:ac:3f:7f:e4:a6:89:e5:1b:9a:79:45:
6c:8f:3f:7e:10:f0:9a:31:62:81:fd:22:aa:68:52:
ba:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:88:6C:53:98:6B:BD:33:26:EA:CC:FB:B9:C1:A9:E0:8B:FE:F8:E8
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/oohsU5hrvTMm6sz7ucGp4Iv--Og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.255.0/24
Signature Algorithm: sha256WithRSAEncryption
12:e5:ff:2f:f8:87:9a:20:75:84:c3:41:ad:ad:0d:85:b3:c4:
3a:36:99:dd:21:83:18:3d:db:71:18:a3:ab:30:f0:70:cb:d3:
7c:a2:9b:2f:ed:53:4d:fd:2c:71:9f:69:ee:ee:8e:50:db:f3:
73:a4:4a:ea:46:c4:ef:e1:7d:2b:e2:eb:48:65:dc:3e:0c:42:
09:d0:c9:a6:dd:45:e2:53:7f:e2:82:1a:69:f1:bb:11:d2:e9:
82:d1:7b:88:73:e1:90:67:fa:80:1f:7d:7c:2e:2b:c8:94:f8:
cc:18:1c:87:23:15:63:73:7f:fd:99:b3:5a:ad:19:84:6e:33:
1b:14:c9:b1:6a:ec:0f:bb:46:3e:3d:38:1a:62:c6:e7:54:d3:
20:38:b3:87:d5:ab:90:62:58:f1:94:69:07:90:20:ef:c1:0e:
42:31:b2:4a:25:00:65:da:5b:ee:af:b2:80:62:6e:12:b1:e5:
fc:9b:bd:60:92:5c:5b:58:a3:16:a6:fb:af:2b:d1:ed:4b:09:
f1:66:16:11:5e:5c:a7:43:97:90:52:35:2a:36:fb:65:0f:c8:
58:56:44:a2:94:30:46:db:57:86:ac:92:02:88:ae:74:76:31:
1c:f5:a8:3f:d5:b5:b1:66:59:a2:80:51:75:f4:f9:7a:2c:4b:
44:98:6b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:47 2025 by rpki-client