Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/w4gATau-sBXHs10DJhXI2HRzYHw.roa
File: w4gATau-sBXHs10DJhXI2HRzYHw.roa (raw, json)
Hash identifier: hiNLOREA0L9M+3aUTC/12h+/tKlwYTuY0RAQ+XkZYXY=
Subject key identifier: C3:88:00:4D:AB:BE:B0:15:C7:B3:5D:03:26:15:C8:D8:74:73:60:7C
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018AEA04D6755A16B4C918BC96A1A26FED63
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/w4gATau-sBXHs10DJhXI2HRzYHw.roa
Signing time: Sun 01 Oct 2023 06:55:00 +0000
ROA not before: Sun 01 Oct 2023 06:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209242
IP address blocks: 37.128.254.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ea:04:d6:75:5a:16:b4:c9:18:bc:96:a1:a2:6f:ed:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Oct 1 06:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c388004dabbeb015c7b35d032615c8d87473607c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c3:ce:6d:55:6f:1b:04:6f:c9:2f:11:e6:81:
9a:fb:1f:f5:74:9d:85:9c:5e:c7:4e:6a:c7:5a:eb:
89:e7:35:39:0a:97:7f:c1:88:dd:93:64:12:b1:33:
79:97:aa:42:a3:b1:3e:95:3b:ec:14:d6:c1:13:d4:
9b:22:5a:a9:b1:3d:e7:c2:56:c8:df:35:58:34:bd:
22:fd:9a:08:84:a7:04:10:81:a1:4a:90:0c:8c:81:
44:69:a6:90:15:ef:f5:bb:cc:17:3f:35:0f:1e:bd:
3c:46:75:6f:d2:79:61:cd:72:c5:48:c9:fe:69:5b:
77:02:ef:5d:f0:2a:42:9b:29:5d:0a:2a:89:5a:af:
94:a7:8c:bc:b8:f8:5d:76:8f:8e:c6:a4:e1:b5:4b:
aa:ba:79:b8:eb:c9:ba:7c:ab:22:f7:b4:cb:48:66:
98:78:53:aa:83:a0:dc:02:59:51:48:8a:09:be:b0:
28:f4:11:f4:08:8c:92:b4:28:10:ef:fc:b4:92:51:
f7:00:71:18:67:18:a4:8b:4c:e5:ac:ef:04:bf:f0:
3b:d3:1c:50:fb:b1:a0:b2:3d:00:ff:20:44:70:c2:
10:26:08:11:54:70:38:93:ea:73:26:ba:b1:dc:9f:
76:86:5b:62:13:c7:a6:72:31:97:21:d7:0c:cc:c9:
54:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:88:00:4D:AB:BE:B0:15:C7:B3:5D:03:26:15:C8:D8:74:73:60:7C
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/w4gATau-sBXHs10DJhXI2HRzYHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.254.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:64:38:0f:3d:61:a8:f8:dc:f9:a2:f6:0b:f5:54:73:77:11:
e9:8e:c7:ec:6c:3a:be:2f:a7:6a:f1:1e:6b:c2:0c:10:4f:f4:
03:36:f8:0b:9f:ee:04:2f:1d:f5:01:6f:d7:d1:2d:bd:1e:5b:
71:22:b9:3f:1a:7d:96:86:82:eb:7d:58:63:a7:78:2a:cd:b6:
4b:6f:6d:2b:9f:4a:1d:52:cb:35:91:d7:36:a5:91:85:b7:3d:
3b:28:63:91:99:03:39:f2:26:48:8b:51:75:bd:96:47:89:b5:
e0:6f:02:91:fe:90:c8:c4:d5:60:0d:cf:20:bd:07:b4:3c:14:
b1:c9:82:47:73:da:58:39:bb:9f:40:9a:d7:d7:e9:d5:52:a7:
81:17:61:0d:66:f3:03:10:f5:62:a3:9d:a1:03:ac:50:c3:c2:
7b:75:5d:9b:7b:08:8b:68:ca:db:21:b1:77:4d:4c:0d:d7:f3:
60:ea:f6:78:39:21:c0:ff:fe:a1:fc:df:c0:70:c4:0b:0c:e1:
82:68:40:22:17:80:14:32:56:95:83:b6:99:d7:50:f4:4b:b4:
bf:f3:fc:9d:62:5a:aa:9f:5a:48:6f:2f:a0:17:21:79:ee:3e:
89:b5:4d:10:8d:bf:5a:ce:63:d0:03:ff:c0:0a:b5:84:28:11:
b3:f2:8f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:33 2025 by rpki-client