Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/wBUaEujjiJU10DDc9JYGSWIt93o.roa
File: wBUaEujjiJU10DDc9JYGSWIt93o.roa (raw, json)
Hash identifier: B3M8iQNU94Bn/dF8xVKqKeDoEZzI5dmCH5rPfFhkSzc=
Subject key identifier: C0:15:1A:12:E8:E3:88:95:35:D0:30:DC:F4:96:06:49:62:2D:F7:7A
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01941FFA8998EC03252106F7B4A074BA0823
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/wBUaEujjiJU10DDc9JYGSWIt93o.roa
Signing time: Wed 01 Jan 2025 03:48:20 +0000
ROA not before: Wed 01 Jan 2025 03:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61112
IP address blocks: 37.128.252.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:89:98:ec:03:25:21:06:f7:b4:a0:74:ba:08:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 1 03:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0151a12e8e3889535d030dcf4960649622df77a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:83:fa:39:18:fb:8a:e7:86:d5:71:38:17:57:
9d:9d:85:71:b1:61:47:c4:df:ee:85:a9:db:1a:e9:
9a:6f:db:9d:14:b4:eb:d6:5f:ba:43:16:f5:ea:8f:
76:b0:6f:d1:bb:65:04:3f:50:c5:21:22:b8:59:36:
92:db:cd:0d:a5:14:45:cb:e9:c9:e3:95:88:03:29:
ad:a9:ae:a0:dd:54:22:f4:8c:af:8c:ab:15:7a:93:
9b:0b:48:5d:d7:3f:c1:b7:1f:b3:2e:64:b5:35:17:
43:4b:d5:a0:fb:c5:c8:42:20:98:a1:6b:b4:4f:43:
3a:54:a0:e4:d8:29:27:f3:23:f5:fd:86:e3:33:2a:
ba:0f:14:fb:26:54:be:74:3f:2a:fc:40:0d:85:78:
4c:17:70:a3:c8:88:70:33:9b:e7:d9:94:60:77:ad:
00:da:8d:1d:8c:cf:42:89:be:5b:82:86:a8:a2:c5:
79:38:a7:59:cd:07:4f:9e:86:7b:a7:91:da:2d:5d:
f5:63:97:ba:6f:a8:4c:ba:1f:50:e7:bb:54:2c:ed:
80:e7:05:93:ba:0c:58:3f:2d:9b:a1:b5:c1:2a:2e:
ce:f8:b2:52:22:70:37:43:b9:17:a4:13:e0:d6:b8:
d4:d2:4b:94:a1:c7:4d:19:08:80:a4:4b:3c:43:a6:
d4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:15:1A:12:E8:E3:88:95:35:D0:30:DC:F4:96:06:49:62:2D:F7:7A
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/wBUaEujjiJU10DDc9JYGSWIt93o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.252.0/23
Signature Algorithm: sha256WithRSAEncryption
61:57:47:13:c1:4a:e3:47:76:37:fb:9c:b2:cd:97:98:74:31:
a1:de:cd:5b:a9:bb:d6:b9:bb:7a:05:0e:bd:6c:63:77:c2:89:
31:aa:9c:0d:e2:cc:95:47:0c:f6:29:8f:27:70:45:d3:6d:16:
e8:c5:33:38:59:e6:7a:9b:e1:d6:a8:70:3a:92:dd:c7:df:a1:
cb:b4:64:00:f7:aa:72:ee:fe:1f:3a:f3:5a:e0:a1:d9:9f:7e:
e2:33:2a:c1:f0:cf:ab:99:a5:28:3a:5c:5e:d2:c9:ca:0a:13:
e2:55:ea:d6:60:5e:d5:ef:90:8f:72:4a:fc:36:93:54:23:3c:
a0:e3:27:9e:6f:b5:9b:6c:cb:20:11:95:cf:f6:33:ef:4d:49:
b4:93:08:3f:93:a2:70:cf:44:c4:8a:1f:98:8b:95:41:5b:ea:
18:37:58:28:44:9a:99:b1:51:f3:b9:fc:74:21:89:de:71:cc:
21:6f:46:3b:ef:b8:c7:74:42:ae:65:d1:db:e3:06:66:74:15:
85:c5:9a:1a:16:22:4f:f0:39:1b:f5:49:85:66:df:9f:25:a5:
41:8b:21:b4:0b:14:59:ca:d5:e6:3b:2a:aa:08:0e:65:1b:57:
1d:71:fb:6d:bc:23:f2:74:ee:d4:f2:02:bc:77:e0:58:31:67:
f2:91:48:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:22 2025 by rpki-client