Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/c47b14-01f4-48b6-a34d-0e4f7c189499/1/AF-3oF5g2Lm853vpXv-XhVdtWVY.roa
File: AF-3oF5g2Lm853vpXv-XhVdtWVY.roa (raw, json)
Hash identifier: sgn/gIXBr4H6nRKCOV/DxiK4ni+wlEsIKTmy35j0jB8=
Subject key identifier: 00:5F:B7:A0:5E:60:D8:B9:BC:E7:7B:E9:5E:FF:97:85:57:6D:59:56
Certificate issuer: /CN=aed9fdbb4bd5779af25289043443b2b07c72b30a
Certificate serial: 029998A2
Authority key identifier: AE:D9:FD:BB:4B:D5:77:9A:F2:52:89:04:34:43:B2:B0:7C:72:B3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtn9u0vVd5ryUokENEOysHxyswo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/c47b14-01f4-48b6-a34d-0e4f7c189499/1/AF-3oF5g2Lm853vpXv-XhVdtWVY.roa
Signing time: Thu 10 Mar 2022 16:51:12 +0000
ROA not before: Thu 10 Mar 2022 16:51:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 37.44.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43620514 (0x29998a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aed9fdbb4bd5779af25289043443b2b07c72b30a
Validity
Not Before: Mar 10 16:51:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=005fb7a05e60d8b9bce77be95eff9785576d5956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9c:27:0f:b0:a7:c0:01:c7:23:eb:b5:4b:f3:
e6:8d:16:a6:e6:cd:f8:be:9b:61:28:5e:89:93:90:
ef:d7:bc:a9:09:1f:fd:e1:56:b0:f5:70:28:c3:25:
9b:0a:88:a0:cf:84:aa:6a:7e:2c:a5:27:54:bc:6c:
46:28:30:f4:e4:23:18:80:93:05:1a:14:8b:c9:cc:
30:7e:f9:7a:27:92:55:9a:d2:cd:53:db:53:78:97:
09:25:e2:6a:01:ef:9e:cb:49:51:bb:7b:6d:cf:e0:
fb:5b:5c:32:4c:37:4f:25:e6:bf:b2:a2:82:d3:ad:
d4:f3:83:4d:31:84:b2:fb:2f:0b:fe:dc:f5:e8:b9:
ae:45:96:8c:ed:8d:3e:c3:f5:41:c4:81:96:f2:9b:
ff:dc:c5:79:2a:a2:9e:10:ff:1e:dd:2e:f7:e6:e5:
93:22:0a:2f:ea:ac:dd:df:b5:98:12:cb:a3:09:00:
93:52:28:d4:3c:e8:2b:3c:63:84:c8:99:78:4e:44:
78:a0:72:d7:61:e9:bb:bf:5c:f4:8b:c8:a0:f7:df:
dc:18:e8:af:a4:0f:85:9b:7d:2f:5e:b4:eb:89:e2:
a9:d7:ec:fa:66:70:23:21:89:09:7f:df:fe:c7:3e:
f1:5e:54:94:7e:29:38:75:01:b7:e3:8d:e4:82:17:
11:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5F:B7:A0:5E:60:D8:B9:BC:E7:7B:E9:5E:FF:97:85:57:6D:59:56
X509v3 Authority Key Identifier:
keyid:AE:D9:FD:BB:4B:D5:77:9A:F2:52:89:04:34:43:B2:B0:7C:72:B3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtn9u0vVd5ryUokENEOysHxyswo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c47b14-01f4-48b6-a34d-0e4f7c189499/1/AF-3oF5g2Lm853vpXv-XhVdtWVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c47b14-01f4-48b6-a34d-0e4f7c189499/1/rtn9u0vVd5ryUokENEOysHxyswo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.212.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:da:93:44:d2:e7:08:45:34:a7:0e:61:15:03:d1:b7:ee:a5:
7b:92:ed:cb:4c:ba:ca:4b:cd:9d:c6:9a:f2:c6:b4:c5:80:45:
7e:51:18:48:0d:39:a5:6e:39:39:fa:98:41:6d:f5:4b:30:28:
aa:19:c0:0f:68:79:5e:74:99:a5:48:f7:22:4d:9c:ec:cd:5f:
c9:ae:f8:d1:52:22:11:79:e3:d3:bf:ef:c2:af:8b:a7:14:c3:
3e:ef:8b:e4:5f:70:e3:e6:dd:63:ed:73:e5:ed:ff:0a:e3:1c:
8a:4d:2e:d0:3e:09:10:d5:70:40:a4:e8:86:de:3a:84:18:3e:
f8:99:bd:4e:7e:49:01:0c:09:34:e8:48:2c:32:40:1e:69:e6:
7e:fa:bd:c8:13:75:d0:85:24:d7:d6:f0:aa:60:f6:ad:90:77:
e8:8f:63:68:20:12:64:41:5b:9a:13:70:fa:b3:f6:f6:9f:b6:
60:44:fb:a8:2c:0b:b5:92:ce:61:45:b5:0b:4b:94:c1:60:09:
0e:26:e3:ba:8e:4a:90:dc:6c:ee:f9:a2:dd:0f:13:2d:f4:57:
b7:29:94:1b:7a:06:2c:23:5a:1d:8d:8f:75:49:d9:b6:47:31:
d3:03:1e:84:4f:8c:48:05:a0:7b:4c:c4:d1:ef:bf:87:e4:96:
6c:0d:db:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:59:46 2025 by rpki-client