Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/c47b14-01f4-48b6-a34d-0e4f7c189499/1/UM3xDWcXYDad-aK5o1iTtHMrMaM.roa
File: UM3xDWcXYDad-aK5o1iTtHMrMaM.roa (raw, json)
Hash identifier: sUmoYmof2c9oZyQDYJnA2AlWMYI5bacwzzdcrlT1R4c=
Subject key identifier: 50:CD:F1:0D:67:17:60:36:9D:F9:A2:B9:A3:58:93:B4:73:2B:31:A3
Certificate issuer: /CN=aed9fdbb4bd5779af25289043443b2b07c72b30a
Certificate serial: 01F5F1D2
Authority key identifier: AE:D9:FD:BB:4B:D5:77:9A:F2:52:89:04:34:43:B2:B0:7C:72:B3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtn9u0vVd5ryUokENEOysHxyswo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/c47b14-01f4-48b6-a34d-0e4f7c189499/1/UM3xDWcXYDad-aK5o1iTtHMrMaM.roa
Signing time: Sat 01 Jan 2022 02:02:01 +0000
ROA not before: Sat 01 Jan 2022 02:02:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211112
IP address blocks: 37.44.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32895442 (0x1f5f1d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aed9fdbb4bd5779af25289043443b2b07c72b30a
Validity
Not Before: Jan 1 02:02:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50cdf10d671760369df9a2b9a35893b4732b31a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9d:63:59:d3:d2:0f:e0:e1:9e:4d:b8:c6:3d:
cb:5d:07:20:66:9e:8c:2e:09:bd:60:fa:4b:88:ac:
b9:ce:c9:90:a0:12:d3:63:64:90:11:fb:e4:77:66:
ae:15:7f:7f:b5:2c:76:4f:76:8f:16:28:88:06:12:
8e:cb:3e:15:5a:f2:b2:8b:38:3d:cb:8b:3b:04:08:
99:bd:02:f7:ee:49:bc:c2:1f:3c:8d:91:e5:2a:21:
31:c2:41:01:68:e9:2b:fd:54:c8:80:69:87:50:51:
5e:32:3e:18:c7:32:35:db:37:f6:78:2b:a1:4b:d7:
e1:bf:6b:fe:cf:9e:4c:9f:21:34:ce:b5:45:08:9c:
be:3e:f9:e9:4b:f8:f6:79:48:99:72:9f:84:c8:b2:
f1:2f:96:09:ba:3c:24:61:26:8e:c6:27:96:85:ad:
e1:f5:4e:87:ba:37:cc:17:83:85:7e:8b:51:91:13:
bc:02:0a:74:4a:67:e3:94:74:76:9a:a0:c5:e3:e0:
8f:f0:60:f9:fe:bb:7f:09:a0:07:18:d7:45:0d:c9:
1b:f1:4f:1e:0c:b1:61:28:d2:66:e4:80:8c:8a:85:
b8:e9:c0:ea:a1:c9:24:5a:6a:53:28:df:da:b5:50:
08:5d:28:cf:5b:d8:a9:82:aa:33:8f:01:a7:b7:71:
30:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CD:F1:0D:67:17:60:36:9D:F9:A2:B9:A3:58:93:B4:73:2B:31:A3
X509v3 Authority Key Identifier:
keyid:AE:D9:FD:BB:4B:D5:77:9A:F2:52:89:04:34:43:B2:B0:7C:72:B3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtn9u0vVd5ryUokENEOysHxyswo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c47b14-01f4-48b6-a34d-0e4f7c189499/1/UM3xDWcXYDad-aK5o1iTtHMrMaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c47b14-01f4-48b6-a34d-0e4f7c189499/1/rtn9u0vVd5ryUokENEOysHxyswo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.212.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:8a:1d:9a:0a:72:d6:b2:e8:5c:ac:71:34:35:36:16:e6:0c:
d9:e0:ab:28:8d:88:27:f5:ef:bf:fd:53:93:6d:37:3f:e0:76:
86:d3:17:26:63:8c:37:c9:17:3c:f4:d7:18:b5:68:15:d3:f9:
56:c8:e4:90:31:0f:2a:05:87:73:51:ea:b0:3c:92:1a:6a:23:
dc:15:a6:64:b1:92:3f:ad:12:53:34:0b:84:ee:63:2d:d2:ef:
7f:c2:88:ef:e3:95:46:ec:fc:97:f0:45:b6:f8:72:10:8c:99:
81:43:57:31:31:f0:9f:b5:d7:f7:3e:eb:c6:ad:18:02:ad:46:
35:7d:7a:a1:95:43:6d:2e:57:88:6c:a9:c2:33:f1:73:d8:b6:
e5:54:b9:c3:9f:33:da:f7:db:a0:f9:43:d1:6d:c2:c5:97:d2:
b7:4f:7b:e7:ac:1a:d9:c1:b2:6d:5c:93:0b:2b:6a:05:99:ae:
62:e2:21:ed:93:d9:83:58:9b:f7:e5:50:25:ef:3f:64:ab:70:
9d:78:3e:3f:39:48:a4:2e:97:bb:16:2e:9b:9a:9a:3a:6b:c2:
61:5c:8c:64:af:50:74:ea:c1:b1:cc:14:bf:27:aa:98:02:3b:
07:15:17:20:1a:81:b9:16:5b:f0:18:29:68:5d:89:7d:9f:7e:
be:31:06:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:41 2025 by rpki-client