Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/4514ee-3dab-49fe-8577-3c8efcfc14f6/1/7GmiiyLf6VX4jOo1egwFpm0N5bE.roa
File: 7GmiiyLf6VX4jOo1egwFpm0N5bE.roa (raw, json)
Hash identifier: QwyBXbmU6hfUKBpx4fwTXsbvt5mcCGk/TrR6gAPFCYI=
Subject key identifier: EC:69:A2:8B:22:DF:E9:55:F8:8C:EA:35:7A:0C:05:A6:6D:0D:E5:B1
Certificate issuer: /CN=739a7358f73039a1da8865ef2f2ff6f9fc99ff38
Certificate serial: E1A53A
Authority key identifier: 73:9A:73:58:F7:30:39:A1:DA:88:65:EF:2F:2F:F6:F9:FC:99:FF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c5pzWPcwOaHaiGXvLy_2-fyZ_zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/4514ee-3dab-49fe-8577-3c8efcfc14f6/1/7GmiiyLf6VX4jOo1egwFpm0N5bE.roa
Signing time: Sat 01 Jan 2022 07:59:05 +0000
ROA not before: Sat 01 Jan 2022 07:59:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 37.72.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14787898 (0xe1a53a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=739a7358f73039a1da8865ef2f2ff6f9fc99ff38
Validity
Not Before: Jan 1 07:59:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec69a28b22dfe955f88cea357a0c05a66d0de5b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:59:7d:5d:96:eb:ba:7e:0d:86:97:f7:b9:5a:
d4:66:fb:62:c6:a2:f8:c5:7b:a7:86:07:7e:6d:8e:
c6:d3:19:92:55:91:a8:e4:a1:c4:90:af:4f:1f:8b:
84:2b:34:27:03:08:0a:e8:08:d9:7d:d1:cc:cd:72:
e2:50:93:0d:96:d5:f1:ba:03:ff:2e:a0:89:bb:3d:
84:53:06:7c:24:56:4f:e3:c2:3d:4a:df:99:40:bc:
50:77:67:44:17:46:3d:61:3c:b6:79:f6:a6:49:a3:
ff:2b:2c:86:8f:55:05:c6:f6:e1:5f:c4:1c:07:03:
f3:7c:9f:75:b3:71:ec:47:d7:be:71:05:89:05:d5:
4f:36:a3:71:d3:84:db:51:0f:ed:d2:d5:df:b9:94:
a2:4c:89:b8:d5:ce:32:7f:0f:3d:ba:39:3a:75:b5:
38:ad:c9:0d:81:d4:bc:44:6c:3e:6f:5f:8d:d5:4b:
f0:b9:18:cc:1f:5c:f1:b1:a8:e2:24:c5:14:f8:5e:
02:3a:e9:d9:a1:36:08:54:4b:e8:38:60:56:eb:7c:
f8:08:d2:45:a8:3b:4c:a4:08:e5:ec:a3:e5:59:99:
01:63:a1:af:0a:e8:dc:12:00:0e:e6:90:24:4f:16:
b2:45:36:2c:08:4a:e1:52:28:9c:07:fd:70:f6:23:
48:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:69:A2:8B:22:DF:E9:55:F8:8C:EA:35:7A:0C:05:A6:6D:0D:E5:B1
X509v3 Authority Key Identifier:
keyid:73:9A:73:58:F7:30:39:A1:DA:88:65:EF:2F:2F:F6:F9:FC:99:FF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5pzWPcwOaHaiGXvLy_2-fyZ_zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4514ee-3dab-49fe-8577-3c8efcfc14f6/1/7GmiiyLf6VX4jOo1egwFpm0N5bE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4514ee-3dab-49fe-8577-3c8efcfc14f6/1/c5pzWPcwOaHaiGXvLy_2-fyZ_zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.142.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:55:2e:03:2c:9b:7d:c9:fb:af:b7:e8:33:c7:81:f0:c9:bc:
85:d9:93:92:1a:74:75:b8:e5:1c:b0:a3:ab:1d:1a:a7:25:32:
43:96:97:8a:d1:1d:ac:96:fa:cb:c1:c1:00:f6:c6:27:bc:a3:
19:9b:ea:84:7a:ed:9f:0d:1f:17:a4:e6:c3:2c:c0:ae:fb:1c:
bc:14:da:0f:cc:09:a0:4a:55:b8:a4:12:23:70:a2:14:69:3d:
75:e8:3b:32:7c:a3:e9:08:b0:86:90:2b:bd:61:6f:7e:6c:bf:
6e:05:79:fe:6b:4b:36:c5:35:33:df:4b:9d:79:ca:02:f8:ad:
70:92:08:90:0a:17:c5:0f:fe:c1:96:e4:83:62:b9:09:6f:e0:
3c:d5:cc:e7:81:40:9d:69:3a:0e:9d:a4:9d:e6:d3:8f:cb:aa:
a0:36:ee:8a:7d:19:be:8d:03:be:8c:06:d2:f0:79:7d:fd:7d:
53:42:17:55:0f:11:51:67:55:6f:a3:5b:f9:6d:84:8d:29:c0:
50:52:5e:bf:e6:b7:90:8b:05:29:18:15:c6:42:f8:9e:83:ab:
a7:38:b6:f2:61:f2:a6:3e:50:51:29:e4:a5:58:16:d8:80:c7:
c2:db:3f:8c:f5:5a:61:95:5c:8f:54:50:a0:78:b3:06:e5:84:
93:15:e1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:20:29 2025 by rpki-client