Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/qemY634gkaZJ7KDL_OVKLKhTdyk.roa
File: qemY634gkaZJ7KDL_OVKLKhTdyk.roa (raw, json)
Hash identifier: irWNiCXXjhVADBnH2bA1YNNPfoj0RohsuGPJAY+LYcE=
Subject key identifier: A9:E9:98:EB:7E:20:91:A6:49:EC:A0:CB:FC:E5:4A:2C:A8:53:77:29
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018ED1D084D73A01132D11E8717923717FF0
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/qemY634gkaZJ7KDL_OVKLKhTdyk.roa
Signing time: Fri 12 Apr 2024 10:18:07 +0000
ROA not before: Fri 12 Apr 2024 10:18:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51847
IP address blocks: 37.128.254.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d1:d0:84:d7:3a:01:13:2d:11:e8:71:79:23:71:7f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Apr 12 10:18:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9e998eb7e2091a649eca0cbfce54a2ca8537729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2c:75:cf:ca:15:b1:48:dc:46:59:6a:1e:c8:
37:c0:40:54:80:ab:b3:48:61:44:c8:e7:29:98:0e:
e1:a4:03:31:26:62:ef:56:9a:ff:80:cd:e5:82:da:
fe:68:06:b3:5b:75:be:90:70:52:bb:ee:ce:f2:9d:
74:70:41:92:28:48:f2:e8:3e:9d:86:7a:fd:ff:55:
fa:7f:b2:33:87:a6:4f:97:ca:bf:9b:0e:b9:3f:e9:
f0:c6:a1:11:23:e5:35:7d:50:2e:7a:34:9e:20:16:
c9:f7:21:6d:c1:98:47:fe:c5:4d:32:e5:91:07:89:
1e:e5:19:73:1f:d6:ba:b2:fe:28:87:c6:0e:b0:ed:
6b:15:a7:60:6d:a1:d3:f7:a6:9f:79:bb:e9:d2:0e:
1e:a4:62:85:67:38:95:66:14:6b:bf:60:5d:ee:18:
46:59:a4:dd:b6:18:16:ac:56:ab:87:84:ed:28:35:
d9:b1:c9:10:e1:c9:7d:7c:c8:26:ee:ca:5f:14:6f:
c9:d9:88:84:61:29:7f:e7:3f:d6:a0:ab:d1:05:7d:
40:3f:00:4a:c0:1e:2e:4e:a7:4e:51:8b:4d:59:5a:
96:91:0a:ad:c5:fb:b7:af:d8:41:05:8c:f5:39:c4:
d7:9e:65:49:02:ad:d7:27:15:d7:f4:a4:db:31:9c:
9e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E9:98:EB:7E:20:91:A6:49:EC:A0:CB:FC:E5:4A:2C:A8:53:77:29
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/qemY634gkaZJ7KDL_OVKLKhTdyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.254.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:79:b0:3e:e9:c3:ce:a4:2c:1f:c4:8e:6b:5e:60:d6:2e:f3:
de:9a:d8:93:e4:39:97:2d:ce:59:fb:f7:5e:48:80:9e:25:48:
fb:1d:94:27:a9:98:8e:96:f2:80:dd:8b:45:75:c9:d1:61:76:
a6:33:69:9e:99:66:e8:cb:73:22:38:c4:3c:a2:43:0c:f7:9b:
e3:81:30:7e:59:fb:b9:23:f2:53:66:69:94:72:f1:36:1b:82:
28:32:db:41:2b:5f:c1:c8:7b:ca:6b:f5:ee:64:27:eb:2e:f1:
ec:17:d7:9e:6a:fe:72:fe:f1:1f:57:e5:85:6e:6e:69:bf:30:
f5:ad:12:88:cf:1a:a4:6f:54:20:6e:d4:35:c0:13:c3:1f:9f:
5d:61:a6:76:9d:e4:17:d2:27:4b:49:6f:1b:f6:56:76:4f:80:
15:6e:8c:da:15:70:1a:26:25:d5:26:68:22:1e:eb:19:cd:62:
00:58:8c:17:fe:83:0d:f7:f9:ec:f4:b6:d0:75:a7:74:27:94:
71:5c:1b:a4:76:af:08:19:68:ca:db:22:49:01:c0:51:77:57:
cb:5c:26:36:8e:be:7c:d7:91:42:9f:3f:03:8a:6a:f1:07:d1:
0a:84:0e:c5:5e:45:7c:fd:0c:56:15:af:b6:e8:2a:76:5a:41:
65:60:6a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:43 2025 by rpki-client