Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/pDgWZ2Ztrld3CBXBlCsZw3nSSR4.roa
File: pDgWZ2Ztrld3CBXBlCsZw3nSSR4.roa (raw, json)
Hash identifier: m8xuQsFm/E15HPQSMTfYLlMmTSsCuU+10zOAEZlqPhE=
Subject key identifier: A4:38:16:67:66:6D:AE:57:77:08:15:C1:94:2B:19:C3:79:D2:49:1E
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018A212AFF0C9E9120C14BA0926E1BE0499B
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/pDgWZ2Ztrld3CBXBlCsZw3nSSR4.roa
Signing time: Wed 23 Aug 2023 06:53:00 +0000
ROA not before: Wed 23 Aug 2023 06:53:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61112
IP address blocks: 37.128.252.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:21:2a:ff:0c:9e:91:20:c1:4b:a0:92:6e:1b:e0:49:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Aug 23 06:53:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4381667666dae57770815c1942b19c379d2491e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d7:43:26:e1:64:2e:f1:fc:62:be:5d:11:85:
d1:68:46:bd:ab:52:2c:ef:07:7a:c0:16:fd:64:f0:
8a:a5:6c:c6:88:c2:73:b8:7a:bf:89:e2:f0:fb:66:
43:a6:bf:b6:4d:92:1f:93:1d:fd:6e:7b:9f:47:02:
6c:9a:31:12:ad:0d:15:58:9e:df:56:4a:33:2a:4c:
12:5e:ca:6d:f3:4d:a5:ba:73:26:45:ba:0f:00:d2:
9f:a6:7c:a2:4d:d3:a5:ec:7b:e1:f9:b4:b0:73:b4:
74:60:96:f9:26:be:d9:65:fb:84:bb:b9:6e:2c:be:
ed:1a:39:07:f5:c5:66:79:61:d5:9c:07:2d:fe:83:
cf:0c:d4:8e:75:f5:0a:2b:9b:61:94:6c:5b:1c:19:
93:15:c3:2b:79:13:9f:41:20:7e:67:50:ff:ff:44:
df:3d:aa:00:4d:74:96:21:be:f5:7d:fb:f6:f5:5d:
40:a7:e9:e3:8f:3a:3d:9c:67:07:06:97:a2:68:24:
6f:c4:3b:c2:ea:04:50:5f:97:b2:ad:60:57:cf:83:
1e:b2:80:9a:72:17:6a:23:a2:80:f1:4a:e9:76:b8:
93:b0:19:29:fc:31:1f:11:00:40:ed:90:3b:f6:36:
e5:90:54:3b:eb:d8:21:56:df:bc:99:95:75:7d:9f:
80:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:38:16:67:66:6D:AE:57:77:08:15:C1:94:2B:19:C3:79:D2:49:1E
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/pDgWZ2Ztrld3CBXBlCsZw3nSSR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.252.0/23
Signature Algorithm: sha256WithRSAEncryption
18:eb:e0:96:b9:78:60:b4:db:45:65:fe:c9:70:45:41:02:d1:
6d:b1:97:3f:05:ab:39:c7:76:b5:b1:a0:21:1f:ee:50:c4:a4:
9f:af:5b:81:99:2a:74:d3:aa:fa:4b:5d:eb:81:53:80:b2:0e:
c1:bc:77:dc:92:5a:0c:28:d4:38:6b:2f:56:4e:f6:c0:62:2c:
50:8f:d5:e3:d8:e3:26:04:50:e1:f5:d6:39:b0:5a:56:be:76:
cb:68:b7:54:47:31:a1:c0:6b:2f:0c:ef:8b:43:7e:d0:0a:4e:
ee:b3:e5:5a:53:3c:f2:83:71:d6:b2:30:1d:81:ac:0d:00:e5:
2a:38:4e:1e:53:6b:3d:51:7f:69:43:53:43:42:ba:0c:ed:13:
2b:72:64:7c:bc:a1:7d:7b:b9:9c:ba:0e:dd:37:0c:11:e8:36:
54:e7:23:73:dd:7e:4d:4e:4f:d7:c3:34:9d:62:16:53:7b:4e:
d5:3f:c7:d2:6b:ff:ae:a6:7b:c5:c4:f6:2a:26:3e:da:92:27:
b8:28:68:85:d8:f0:80:84:75:60:ee:2f:05:d1:5f:3b:4f:d9:
31:ba:fc:c7:ce:35:e4:9b:9e:2c:b0:48:e4:b7:89:72:08:fe:
3d:01:33:55:10:0c:17:c4:2f:30:ab:6f:fc:40:48:de:fc:99:
97:8e:7d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:22 2025 by rpki-client