Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/c47b14-01f4-48b6-a34d-0e4f7c189499/1/186hWs-uhwOSeXtDzOn-qjVumEI.roa
File: 186hWs-uhwOSeXtDzOn-qjVumEI.roa (raw, json)
Hash identifier: +jwK3tKRzk8KB2EmaNzyPgoHFK8Ggmh1Iop6xKyzsOU=
Subject key identifier: D7:CE:A1:5A:CF:AE:87:03:92:79:7B:43:CC:E9:FE:AA:35:6E:98:42
Certificate issuer: /CN=aed9fdbb4bd5779af25289043443b2b07c72b30a
Certificate serial: 018337881B73CB6054EE6829EEC4C12A21AE
Authority key identifier: AE:D9:FD:BB:4B:D5:77:9A:F2:52:89:04:34:43:B2:B0:7C:72:B3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtn9u0vVd5ryUokENEOysHxyswo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/c47b14-01f4-48b6-a34d-0e4f7c189499/1/186hWs-uhwOSeXtDzOn-qjVumEI.roa
Signing time: Tue 13 Sep 2022 15:46:50 +0000
ROA not before: Tue 13 Sep 2022 15:46:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212669
IP address blocks: 37.44.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:37:88:1b:73:cb:60:54:ee:68:29:ee:c4:c1:2a:21:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aed9fdbb4bd5779af25289043443b2b07c72b30a
Validity
Not Before: Sep 13 15:46:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7cea15acfae870392797b43cce9feaa356e9842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:86:22:9d:4e:4a:78:89:de:3a:23:a1:77:d3:
56:e7:a5:af:20:0e:3f:5a:a5:52:b7:96:ea:61:d4:
4b:57:8f:25:d0:3a:a6:18:b5:c0:5d:78:2c:23:f5:
13:8b:77:ab:b0:d2:80:46:be:5c:dc:03:e5:31:91:
6b:47:69:d4:e9:90:5c:15:af:01:1e:af:83:74:2b:
fc:f5:2d:d3:83:55:4c:8e:5b:b0:87:de:3b:23:de:
eb:a9:93:44:71:f8:c2:e7:c4:b1:c5:c5:cb:9f:ef:
58:53:8e:e5:47:79:34:6d:71:14:e2:8f:a4:ac:79:
da:d7:42:77:4c:e3:8b:82:b2:d4:7b:b9:3f:6b:a8:
cd:fe:bd:72:f3:56:e0:ba:79:49:9e:e9:eb:4b:dc:
af:61:a5:0a:0f:27:ad:20:7d:82:28:a8:67:ac:cc:
2e:cc:a7:96:75:72:fd:6c:78:f2:9b:8b:07:72:69:
0d:be:d5:01:d8:68:83:98:78:af:88:a0:08:01:d6:
6b:24:78:7a:3c:d0:ab:29:c1:4a:32:f4:cd:75:18:
a0:bc:0a:c4:d2:83:76:06:8d:c3:af:3d:e8:eb:72:
51:aa:60:06:2a:58:7a:19:ac:43:4c:a7:47:78:8a:
fd:f4:ca:fa:cf:21:c8:3a:71:7a:8e:0d:25:7b:bb:
d3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CE:A1:5A:CF:AE:87:03:92:79:7B:43:CC:E9:FE:AA:35:6E:98:42
X509v3 Authority Key Identifier:
keyid:AE:D9:FD:BB:4B:D5:77:9A:F2:52:89:04:34:43:B2:B0:7C:72:B3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtn9u0vVd5ryUokENEOysHxyswo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c47b14-01f4-48b6-a34d-0e4f7c189499/1/186hWs-uhwOSeXtDzOn-qjVumEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c47b14-01f4-48b6-a34d-0e4f7c189499/1/rtn9u0vVd5ryUokENEOysHxyswo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.212.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:f4:8a:0e:bf:44:fe:53:37:a7:c8:72:45:3c:2e:f1:e4:d0:
31:dd:49:d9:47:22:fc:6a:20:71:75:81:76:47:4a:dd:e4:9b:
bf:44:4b:8d:bf:a1:9c:6d:c9:3f:2f:98:ee:19:ef:1a:f2:e1:
9f:93:82:3c:24:35:7d:32:b7:e8:5a:01:2a:0c:be:02:24:0c:
56:fd:e0:3e:49:f5:fd:6c:53:e6:8c:ef:48:33:1a:78:3b:c9:
a7:62:aa:23:51:61:28:5b:0a:5e:ad:25:90:15:16:84:cf:58:
3a:b2:9b:e3:67:41:59:3b:54:18:c2:b1:da:72:c9:8b:c6:2a:
53:93:55:67:c7:b5:1f:3e:39:eb:2a:37:bb:ab:29:d0:88:17:
96:a7:0e:31:af:ea:a4:5d:59:0f:12:fc:9b:e7:9f:08:32:19:
3c:0f:30:1b:b4:0d:7f:d6:7a:64:f1:65:0d:d6:4b:7b:0c:88:
f0:db:2a:1b:7b:1f:dd:6a:60:27:37:d2:20:34:7b:0c:ab:d8:
65:c7:fb:37:81:91:35:3f:7f:73:08:9f:93:92:e9:03:ed:69:
f5:4c:b7:ea:c6:61:8e:68:27:86:ac:66:3e:2e:a1:6e:2e:d2:
83:d3:7a:cc:49:02:f8:c8:47:fc:dc:ea:d9:9d:2c:37:9d:8d:
91:03:b7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:27 2025 by rpki-client