Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/v0yoJhIn6i0syRSR2K6F3YmA_0g.roa
File: v0yoJhIn6i0syRSR2K6F3YmA_0g.roa (raw, json)
Hash identifier: BsFC2HoYM+sqLtBMnoPNTZ97aEzJ9EbDR+6K5Pp2qyo=
Subject key identifier: BF:4C:A8:26:12:27:EA:2D:2C:C9:14:91:D8:AE:85:DD:89:80:FF:48
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01941FFA906B7E32B2FF86C97FD0C6743862
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/v0yoJhIn6i0syRSR2K6F3YmA_0g.roa
Signing time: Wed 01 Jan 2025 03:48:22 +0000
ROA not before: Wed 01 Jan 2025 03:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210542
IP address blocks: 37.128.250.0/23 maxlen: 24
176.221.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:90:6b:7e:32:b2:ff:86:c9:7f:d0:c6:74:38:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 1 03:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf4ca8261227ea2d2cc91491d8ae85dd8980ff48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:75:16:63:c9:0d:0a:b0:e1:cf:56:aa:e8:76:
71:28:72:4d:c2:11:7e:b7:77:9a:f6:3f:ec:2b:52:
d7:26:67:6e:9d:4f:2f:24:bf:9b:1c:40:fc:98:b7:
52:5f:db:ad:a0:61:ca:08:31:c0:f6:31:b7:73:51:
18:11:e6:b0:7b:7d:b1:4a:d4:c9:37:b7:7e:93:43:
5b:a6:4e:3b:01:ec:5e:e0:0e:76:8d:1f:0d:85:07:
87:ec:d4:64:67:c5:a6:76:a0:8e:de:6c:38:aa:05:
41:61:df:e0:1d:3d:40:54:41:8c:f3:d7:2b:8b:6c:
3d:59:6f:0e:e0:3e:be:2b:64:48:09:d1:ec:36:5c:
05:60:f2:26:5a:05:1f:01:7b:e9:58:f9:d8:d2:ca:
57:ee:36:9e:2d:8b:cb:04:11:40:a6:11:b7:40:db:
72:01:ce:76:71:03:1f:f0:d2:8d:54:b1:01:1d:8e:
ea:7e:80:db:a3:d3:02:63:bd:4c:ad:65:31:9f:10:
3c:e5:9e:aa:52:a5:fb:a2:dc:7f:ac:ed:5b:bf:30:
64:f3:83:e3:e4:a6:fb:4b:24:a2:bc:cb:fb:7d:b7:
01:c0:26:cb:e2:96:55:27:2b:34:7e:4b:7e:b7:2d:
08:47:2d:f1:6e:a0:80:ff:2a:bb:33:de:8f:42:50:
23:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4C:A8:26:12:27:EA:2D:2C:C9:14:91:D8:AE:85:DD:89:80:FF:48
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/v0yoJhIn6i0syRSR2K6F3YmA_0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.250.0/23
176.221.16.0/22
Signature Algorithm: sha256WithRSAEncryption
90:fe:67:dd:1d:b6:04:e1:8d:5c:7b:c5:0c:b5:30:21:34:03:
3f:1f:f5:be:23:de:96:9f:19:76:02:b2:75:45:1a:b3:ff:dc:
ef:c7:c0:ff:fb:25:db:40:86:14:d7:14:4e:72:94:16:21:28:
2a:a9:96:de:37:10:a0:dd:bb:29:60:d9:b6:de:23:bd:ba:d8:
07:5b:88:03:c2:6a:d4:d7:d4:5a:0d:3e:08:d7:f1:59:4d:19:
0d:d2:36:b2:9f:25:de:5b:84:9a:af:12:d0:48:34:b0:f3:b7:
e1:45:19:c7:75:5e:17:75:70:52:c2:67:c7:e1:25:e9:45:ea:
b9:ff:1d:2a:fb:6b:c7:f2:63:00:70:cb:dc:41:43:30:85:0a:
f1:62:09:0b:50:fd:74:e3:bf:47:97:f0:26:30:48:0b:8b:92:
8f:39:e7:eb:3f:9b:f6:9b:d0:5c:9b:d3:fa:8f:51:bc:6a:f6:
aa:cf:4c:2a:31:7b:81:c4:43:45:1e:e4:ed:d4:ee:2c:38:36:
62:69:6e:8d:8f:cc:54:b7:78:3a:8d:6d:a4:e6:86:77:9e:99:
bd:fa:12:07:1c:ce:2c:c5:b2:ce:74:9e:d4:11:df:f9:f6:3c:
d4:eb:a4:14:75:f0:a8:19:c5:81:0b:f6:9a:92:77:8d:01:30:
ae:11:80:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:54 2025 by rpki-client