Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/c47b14-01f4-48b6-a34d-0e4f7c189499/1/94KMeOWTdOigOwViyIGTzealXFQ.roa
File: 94KMeOWTdOigOwViyIGTzealXFQ.roa (raw, json)
Hash identifier: EyZUt/VwS/ycX3fSq5nQBmMxsVOw0v8tkFYLWN3ysIs=
Subject key identifier: F7:82:8C:78:E5:93:74:E8:A0:3B:05:62:C8:81:93:CD:E6:A5:5C:54
Certificate issuer: /CN=aed9fdbb4bd5779af25289043443b2b07c72b30a
Certificate serial: 01856E8B4F4BB9C979253A504F8270749D3D
Authority key identifier: AE:D9:FD:BB:4B:D5:77:9A:F2:52:89:04:34:43:B2:B0:7C:72:B3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtn9u0vVd5ryUokENEOysHxyswo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/c47b14-01f4-48b6-a34d-0e4f7c189499/1/94KMeOWTdOigOwViyIGTzealXFQ.roa
Signing time: Sun 01 Jan 2023 18:15:01 +0000
ROA not before: Sun 01 Jan 2023 18:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212669
IP address blocks: 37.44.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:4f:4b:b9:c9:79:25:3a:50:4f:82:70:74:9d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aed9fdbb4bd5779af25289043443b2b07c72b30a
Validity
Not Before: Jan 1 18:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7828c78e59374e8a03b0562c88193cde6a55c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a7:b7:b3:84:01:63:11:de:b0:2a:f7:4b:bd:
90:66:af:a8:5a:90:30:18:fe:2f:06:9c:00:2b:1f:
83:ab:47:d7:fd:f5:da:66:bf:c2:59:bd:f2:d5:ab:
d3:32:31:d3:99:61:44:74:b6:8f:90:1c:5b:6d:db:
6d:86:02:70:bf:7f:27:13:2e:a0:65:dc:79:fe:77:
bc:be:fb:44:0e:e2:3c:ba:d7:b4:1f:a7:4f:91:c6:
a6:7d:65:21:c5:cf:ed:85:12:66:d0:0c:2d:15:09:
71:25:bf:39:92:60:cb:0a:86:6c:bc:0e:7e:d6:07:
1b:f3:51:99:1f:c5:d9:de:66:3a:29:1d:62:63:be:
36:be:06:30:ce:83:f1:13:d4:15:0b:de:94:f4:e0:
7a:11:95:71:94:3c:33:3e:14:9c:68:b1:43:a8:85:
ec:f5:8d:2b:83:40:12:6e:22:5d:da:fd:62:0a:1c:
19:5b:92:8c:e9:c2:ea:9f:23:a5:9e:a9:dd:c9:2e:
5d:fa:03:3a:20:05:ba:a4:7f:2e:b1:4e:f1:a4:d2:
58:97:d3:82:2c:63:70:43:36:50:67:76:e1:49:8b:
a2:fb:33:39:56:06:56:01:1f:1e:be:7c:49:f4:94:
09:ec:a7:69:0a:4a:bb:b2:79:da:a3:c4:a8:c6:97:
3c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:82:8C:78:E5:93:74:E8:A0:3B:05:62:C8:81:93:CD:E6:A5:5C:54
X509v3 Authority Key Identifier:
keyid:AE:D9:FD:BB:4B:D5:77:9A:F2:52:89:04:34:43:B2:B0:7C:72:B3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtn9u0vVd5ryUokENEOysHxyswo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c47b14-01f4-48b6-a34d-0e4f7c189499/1/94KMeOWTdOigOwViyIGTzealXFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c47b14-01f4-48b6-a34d-0e4f7c189499/1/rtn9u0vVd5ryUokENEOysHxyswo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.212.0/24
Signature Algorithm: sha256WithRSAEncryption
59:4d:08:b6:bc:fa:12:4b:32:8b:62:eb:f7:53:ca:c8:05:8a:
59:f5:71:c6:89:cf:8d:97:f6:b0:75:ba:07:b5:09:44:7d:17:
77:65:73:e3:c3:40:ed:e0:fb:76:2a:e6:29:58:8f:dc:87:e8:
4f:6b:97:4a:cd:90:f3:8a:15:06:13:f4:18:14:57:bc:a7:dd:
11:b9:b2:15:c6:60:0f:44:d9:50:e0:63:fb:8e:1a:05:36:86:
cb:ec:3f:f2:14:a2:6f:00:fc:8c:a5:04:28:f0:b0:34:fe:88:
85:e3:07:ee:bb:82:a2:b4:ff:c1:05:b9:58:58:3f:6a:b0:f6:
83:f1:c3:a7:02:ec:6f:e4:80:87:fb:77:65:ed:8c:a0:6a:39:
40:e3:d5:5c:5a:ff:20:f0:0b:d4:07:41:71:92:50:3c:3f:cc:
53:3a:90:91:37:ba:4e:ab:a1:7b:c6:de:7f:a6:c3:3b:69:de:
50:96:0f:13:ef:03:c2:b4:67:a0:64:41:66:eb:36:ec:c1:99:
14:dd:ae:f0:2f:93:a5:23:d6:aa:2c:10:b8:e0:25:a3:7c:b1:
f0:a3:7d:a7:5e:9e:75:25:62:8a:f4:c6:0b:8e:ee:ca:82:4b:
25:89:d2:56:2f:54:37:11:21:03:d3:83:bd:7b:99:60:74:3e:
2b:b9:ac:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:25 2025 by rpki-client