Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/qUdwMYZ2wD71NDIDgI54GlGSQa8.roa
File: qUdwMYZ2wD71NDIDgI54GlGSQa8.roa (raw, json)
Hash identifier: stXTM0+g0/enNfIxRUxzw45tn1Eg8/eV4KYiiVybD8k=
Subject key identifier: A9:47:70:31:86:76:C0:3E:F5:34:32:03:80:8E:78:1A:51:92:41:AF
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01941FFA923CE4CF1D81D06029C858700F1A
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/qUdwMYZ2wD71NDIDgI54GlGSQa8.roa
Signing time: Wed 01 Jan 2025 03:48:22 +0000
ROA not before: Wed 01 Jan 2025 03:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215638
IP address blocks: 37.128.248.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:92:3c:e4:cf:1d:81:d0:60:29:c8:58:70:0f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 1 03:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a94770318676c03ef5343203808e781a519241af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:02:48:ce:f8:22:e8:30:34:c5:a9:f8:04:86:
f0:7a:8c:95:e9:52:1f:be:cb:de:90:e4:41:dc:7b:
20:cd:9d:c0:40:02:7f:1d:b8:89:ab:78:d6:70:90:
36:09:03:93:aa:dc:78:04:32:c2:83:dc:0e:43:df:
b1:94:8c:83:c6:60:be:1a:0f:7f:c0:49:7e:95:1b:
52:a4:be:bf:70:19:9d:2e:39:6e:9c:64:49:af:23:
10:90:d2:eb:2b:13:db:f9:f6:a3:b7:3c:91:21:cc:
3e:d6:b0:7d:02:7b:33:03:b0:6a:c2:56:07:dd:26:
20:a0:99:be:28:06:4e:6b:a7:c0:ef:f2:06:93:33:
82:4b:6c:fc:c9:de:d2:d3:73:f0:76:fb:3b:5e:4a:
c3:6c:a4:0e:40:ae:97:a2:e2:b8:3f:49:36:a6:9c:
78:c3:54:c1:02:58:c8:7d:f4:9d:9a:b7:1f:71:d1:
f1:78:ba:a8:0d:39:45:16:ba:b5:db:4b:90:29:88:
93:b0:82:22:b4:16:01:67:60:9e:ad:02:86:e0:e5:
e2:13:d4:87:fd:19:06:99:c4:0b:99:20:13:1d:43:
46:c7:b7:a3:5e:3c:18:3b:97:61:67:7c:f2:b3:47:
cb:ed:57:2a:d3:b6:93:53:a5:1d:83:73:bd:43:9e:
bd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:47:70:31:86:76:C0:3E:F5:34:32:03:80:8E:78:1A:51:92:41:AF
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/qUdwMYZ2wD71NDIDgI54GlGSQa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.248.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:b5:89:fa:98:d7:03:23:01:a3:1a:14:15:2f:28:7b:46:f8:
31:a3:de:1d:1b:af:00:1d:47:a4:b7:0a:48:b9:eb:84:6e:1c:
f2:f1:a7:9c:f5:4f:16:cb:5f:2e:e4:23:04:a2:f6:e5:cd:8f:
b5:dd:39:59:f2:e3:12:31:99:7e:ee:65:cf:c8:09:0c:b7:39:
4a:9e:a3:9f:2b:a7:d3:80:38:1c:95:13:da:e5:e5:52:f0:ec:
d5:e4:f1:ac:0b:2f:a2:7e:45:98:a5:2d:49:78:22:ca:03:53:
d0:a4:ed:fb:b1:3c:67:8b:9a:4e:d5:34:ac:90:05:7c:80:b5:
89:5c:ec:55:e2:8a:28:b2:31:9a:e9:62:30:9f:e4:f4:5c:40:
45:85:0b:e5:3a:0e:01:f2:0b:e6:48:22:35:4e:b5:72:94:91:
00:58:b3:a8:4c:4c:84:08:4d:d4:f9:14:9c:7f:18:13:99:24:
d5:2a:87:b7:51:2e:5a:97:5d:ac:d4:27:49:c5:56:9b:48:c5:
7f:18:34:f2:9e:40:fd:5f:3e:5d:b5:76:e2:5c:82:f2:cc:87:
e5:53:ea:91:23:17:c4:58:78:9e:2c:89:5b:c8:f7:8f:1c:36:
fa:af:a0:40:7a:4c:a9:58:29:8d:ce:93:5a:d3:7f:b5:47:19:
26:dd:24:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:48 2025 by rpki-client