Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/tf6V9pqNCbCQjqMdsTRLLnicDDw.roa
File: tf6V9pqNCbCQjqMdsTRLLnicDDw.roa (raw, json)
Hash identifier: C6JqXzYqs97vJDrsW2D2bUuMQI0PIKQVotrzyCCLlKg=
Subject key identifier: B5:FE:95:F6:9A:8D:09:B0:90:8E:A3:1D:B1:34:4B:2E:78:9C:0C:3C
Certificate issuer: /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial: 018347F86DEC796358473BC5B3C7AA520508
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/tf6V9pqNCbCQjqMdsTRLLnicDDw.roa
Signing time: Fri 16 Sep 2022 20:23:26 +0000
ROA not before: Fri 16 Sep 2022 20:23:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12129
IP address blocks: 37.221.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:47:f8:6d:ec:79:63:58:47:3b:c5:b3:c7:aa:52:05:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Validity
Not Before: Sep 16 20:23:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b5fe95f69a8d09b0908ea31db1344b2e789c0c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:56:32:9f:47:55:22:b8:24:49:eb:62:0d:52:
f8:74:31:8e:e3:cb:32:88:c1:b2:39:60:02:a3:de:
c3:72:78:48:6f:0b:65:f0:2e:47:4b:63:70:d8:81:
dd:68:30:19:fd:f3:ae:09:40:d5:1d:ea:63:4c:2e:
80:bc:94:af:23:27:dc:c4:03:8c:30:e9:38:b2:45:
57:6f:e5:96:75:fc:5d:df:64:7a:25:ad:27:32:99:
57:0b:df:9c:33:67:af:3b:1b:7b:02:bd:1b:b4:5b:
a2:be:25:11:cf:fb:a2:3b:ff:2d:8c:dd:64:b7:44:
77:d1:8d:96:06:61:95:32:83:ed:fc:c0:92:79:a1:
0a:df:d5:4d:d3:2f:62:b8:92:72:5c:e4:14:ca:dd:
cf:15:69:09:06:f6:95:d5:85:3b:6c:61:09:0c:98:
1f:73:ca:84:f1:f7:a4:6b:a5:35:db:2b:72:9e:14:
95:68:8c:d2:18:5f:a1:f4:87:c1:54:db:e7:2c:ff:
de:0b:0b:50:65:f6:b9:46:ae:9e:3c:86:99:bd:60:
4e:2a:2b:24:d8:d2:bc:aa:cd:1c:8b:10:e1:fb:b0:
25:6e:2f:c6:a5:61:ed:e4:df:41:bd:be:b5:64:3f:
8d:94:3b:e7:92:d0:74:b1:87:69:07:98:5c:e9:d5:
1e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FE:95:F6:9A:8D:09:B0:90:8E:A3:1D:B1:34:4B:2E:78:9C:0C:3C
X509v3 Authority Key Identifier:
keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/tf6V9pqNCbCQjqMdsTRLLnicDDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.109.0/24
Signature Algorithm: sha256WithRSAEncryption
65:d1:35:19:dc:f6:99:3b:75:bb:1b:97:d1:da:41:cc:ce:89:
88:2a:4e:bf:7f:db:52:c2:29:b1:65:72:73:0a:74:1e:0e:a0:
de:ac:19:d9:82:25:0e:11:50:1c:69:2f:a2:f4:94:cd:d7:b9:
50:e8:c3:5a:56:55:14:7f:ec:bc:d2:db:8d:f0:d7:8a:19:67:
a7:de:cd:bd:be:97:8b:73:dd:6c:c2:87:f7:15:14:c0:8b:d0:
4a:02:7b:4f:2e:39:28:4b:c8:ac:40:f6:ab:c7:d2:48:a4:bb:
da:5a:d6:18:1d:75:1c:1e:6b:36:68:e7:2a:c9:6e:fa:83:d5:
f6:10:34:02:6c:aa:81:ee:b0:2b:77:a0:7c:74:d2:37:9f:e2:
2d:58:84:59:66:b9:e7:50:e0:86:cb:44:a9:13:1c:f2:b2:2b:
2f:32:dd:28:2e:53:ba:91:2f:32:25:98:99:9d:66:a6:25:b7:
35:2e:20:26:5c:25:f8:f6:51:e6:c5:9c:77:65:97:6e:de:a1:
03:8d:fc:42:c4:66:a0:a6:58:35:5b:27:a9:60:61:28:52:f6:
f8:ef:99:41:ba:7a:26:1c:24:fa:a9:4a:fd:64:e6:9f:90:a9:
5b:17:7d:5e:d0:4f:81:39:82:c6:48:03:18:06:01:e1:63:9d:
8e:0a:5e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:30:42 2025 by rpki-client