Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/c47b14-01f4-48b6-a34d-0e4f7c189499/1/rKx8nVsO12t41qlEr97gQfhch0s.roa
File: rKx8nVsO12t41qlEr97gQfhch0s.roa (raw, json)
Hash identifier: Z1+FWXKREqC1jKmH6adF8sjyolhFSEUWJaaEf4mhQog=
Subject key identifier: AC:AC:7C:9D:5B:0E:D7:6B:78:D6:A9:44:AF:DE:E0:41:F8:5C:87:4B
Certificate issuer: /CN=aed9fdbb4bd5779af25289043443b2b07c72b30a
Certificate serial: 01F3A38B
Authority key identifier: AE:D9:FD:BB:4B:D5:77:9A:F2:52:89:04:34:43:B2:B0:7C:72:B3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtn9u0vVd5ryUokENEOysHxyswo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/c47b14-01f4-48b6-a34d-0e4f7c189499/1/rKx8nVsO12t41qlEr97gQfhch0s.roa
Signing time: Sat 01 Jan 2022 02:02:00 +0000
ROA not before: Sat 01 Jan 2022 02:02:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 37.44.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32744331 (0x1f3a38b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aed9fdbb4bd5779af25289043443b2b07c72b30a
Validity
Not Before: Jan 1 02:02:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=acac7c9d5b0ed76b78d6a944afdee041f85c874b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ae:d1:e4:13:3d:12:9e:65:ce:2d:8c:31:08:
1c:7d:28:8d:a2:02:68:eb:56:83:63:35:93:82:78:
57:46:8c:92:56:60:d5:36:54:3c:57:47:9e:1b:eb:
29:da:d5:d5:a6:23:c9:d6:41:df:f0:91:25:20:ca:
8e:c7:5c:f2:e2:b4:90:49:f8:6d:1b:74:59:db:15:
c9:de:04:52:1d:49:22:a5:4d:3f:bc:21:64:f8:da:
96:16:3c:9c:9e:74:ba:03:7a:cf:e0:b1:da:db:08:
36:b7:26:75:e2:38:0a:58:a4:aa:72:b6:88:8f:3e:
96:aa:cf:ac:01:cb:54:b7:0e:83:b1:84:f6:27:a2:
dc:e4:cd:ab:79:53:68:f9:b5:80:d9:4b:ee:19:80:
c9:80:8e:b6:54:cf:3f:4a:5e:82:1a:b0:20:45:e5:
ac:d2:f2:e1:34:cb:e0:d9:8e:67:8a:4d:f1:b2:b8:
20:de:70:fc:0d:80:69:63:8c:a0:af:d7:db:c6:1e:
55:37:f2:4b:6d:52:4c:89:26:d6:76:0b:a7:6e:a4:
45:16:d8:b2:48:93:7a:49:da:db:69:1b:fb:08:ec:
47:3a:fa:39:39:2a:36:b5:1f:f8:2a:7f:f9:ee:2f:
18:ff:02:5c:6f:13:aa:ca:75:f7:09:20:48:a4:0f:
5b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AC:7C:9D:5B:0E:D7:6B:78:D6:A9:44:AF:DE:E0:41:F8:5C:87:4B
X509v3 Authority Key Identifier:
keyid:AE:D9:FD:BB:4B:D5:77:9A:F2:52:89:04:34:43:B2:B0:7C:72:B3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtn9u0vVd5ryUokENEOysHxyswo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c47b14-01f4-48b6-a34d-0e4f7c189499/1/rKx8nVsO12t41qlEr97gQfhch0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c47b14-01f4-48b6-a34d-0e4f7c189499/1/rtn9u0vVd5ryUokENEOysHxyswo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.212.0/24
Signature Algorithm: sha256WithRSAEncryption
05:43:10:fb:4b:e3:59:a1:72:2f:6a:3d:ff:a8:0f:4f:ed:c2:
58:1c:fd:81:25:87:54:28:74:95:16:5a:5b:ab:a1:ef:32:ce:
95:4d:0c:8d:86:1d:6b:94:9b:10:82:e6:c3:c1:4b:8d:9d:84:
89:94:fe:b2:20:39:15:76:fe:29:59:02:e9:bc:a4:78:88:30:
24:c8:f1:98:55:78:1d:a0:36:71:3a:c4:92:4d:4a:ee:31:fd:
e2:43:02:33:81:80:6c:6b:c5:b4:7a:c3:67:af:0a:6e:34:6a:
61:fe:2f:cf:f6:4e:48:42:d0:03:7a:57:d7:c9:c0:9e:7c:2e:
7d:4d:d7:d3:7a:33:5a:f4:27:f3:af:14:aa:82:ec:a9:9e:3e:
41:45:06:ab:bd:30:af:0f:9c:b1:5c:61:e6:58:ba:53:c0:84:
54:d8:39:32:c7:13:03:61:7c:ae:69:d7:2e:bf:17:c3:aa:51:
a8:a0:1f:76:ab:11:b9:0a:58:5a:f6:cf:d7:6c:85:15:2f:70:
79:00:8a:6b:44:a4:c4:1e:ae:e0:ed:19:7c:ac:af:5c:b4:67:
1e:2e:5b:81:c0:9f:48:f7:36:04:aa:36:5c:98:f1:a2:5d:30:
61:8d:21:d0:92:97:f5:cd:92:4e:71:a0:9d:b9:9a:a6:36:31:
b3:6d:82:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:45:50 2025 by rpki-client