Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/4514ee-3dab-49fe-8577-3c8efcfc14f6/1/_N2jJTCAZVLUkK_3jFHVxcotxxk.roa
File: _N2jJTCAZVLUkK_3jFHVxcotxxk.roa (raw, json)
Hash identifier: t0e91jfyxCvDMWTkxvQLA2CQA/x6tk6uYN/gsHegjWs=
Subject key identifier: FC:DD:A3:25:30:80:65:52:D4:90:AF:F7:8C:51:D5:C5:CA:2D:C7:19
Certificate issuer: /CN=739a7358f73039a1da8865ef2f2ff6f9fc99ff38
Certificate serial: 0182209002E94DFB4F03AC73BF5D4A570B49
Authority key identifier: 73:9A:73:58:F7:30:39:A1:DA:88:65:EF:2F:2F:F6:F9:FC:99:FF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c5pzWPcwOaHaiGXvLy_2-fyZ_zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/4514ee-3dab-49fe-8577-3c8efcfc14f6/1/_N2jJTCAZVLUkK_3jFHVxcotxxk.roa
Signing time: Thu 21 Jul 2022 11:41:24 +0000
ROA not before: Thu 21 Jul 2022 11:41:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 37.72.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:20:90:02:e9:4d:fb:4f:03:ac:73:bf:5d:4a:57:0b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=739a7358f73039a1da8865ef2f2ff6f9fc99ff38
Validity
Not Before: Jul 21 11:41:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fcdda32530806552d490aff78c51d5c5ca2dc719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:36:f9:80:17:37:a3:c3:d1:86:c8:cc:bd:fa:
c8:ac:71:b6:b8:f8:d9:97:3d:4d:99:77:7d:e6:5b:
37:a2:65:a6:e6:70:25:fe:5d:06:74:aa:bf:71:8d:
2c:9c:68:be:00:c4:0c:e9:4c:61:5e:57:43:5f:71:
9d:ac:75:3e:3e:f9:3d:a5:b6:ea:26:b9:34:ca:da:
fa:fc:ee:03:89:5c:65:36:a9:6c:a0:a4:12:47:1e:
8a:88:60:2d:28:4e:aa:5c:e9:22:65:95:83:b6:75:
02:9b:6a:b8:93:78:40:2b:07:6f:52:da:af:ef:7f:
1e:21:46:c9:94:32:e4:b6:8a:c6:a0:54:a5:a4:82:
ae:d9:54:ab:73:94:9c:1e:a6:41:86:cc:65:45:24:
24:0b:4e:09:35:11:06:ba:b7:73:97:e5:c3:ef:fc:
63:16:fb:35:3b:c6:1f:aa:27:c0:9e:30:41:a5:77:
c8:15:8c:17:4a:69:2b:ed:af:ab:94:66:27:0b:86:
96:04:b2:b5:c8:6a:84:72:45:f6:81:e1:eb:e0:35:
46:00:ac:f3:08:89:e4:02:0c:85:b9:25:8b:4f:43:
c2:db:f2:59:6b:09:10:69:c9:25:a3:a4:6c:08:6e:
01:51:76:14:66:b3:e7:96:53:a4:40:ac:b0:b2:f5:
14:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:DD:A3:25:30:80:65:52:D4:90:AF:F7:8C:51:D5:C5:CA:2D:C7:19
X509v3 Authority Key Identifier:
keyid:73:9A:73:58:F7:30:39:A1:DA:88:65:EF:2F:2F:F6:F9:FC:99:FF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5pzWPcwOaHaiGXvLy_2-fyZ_zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4514ee-3dab-49fe-8577-3c8efcfc14f6/1/_N2jJTCAZVLUkK_3jFHVxcotxxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4514ee-3dab-49fe-8577-3c8efcfc14f6/1/c5pzWPcwOaHaiGXvLy_2-fyZ_zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.142.0/24
Signature Algorithm: sha256WithRSAEncryption
56:5d:03:b9:e3:ab:5d:52:91:d8:2e:09:22:0b:ac:05:33:c0:
ec:04:1d:03:02:59:c5:89:6b:ab:16:c9:09:f7:22:67:1d:87:
b2:e9:aa:bd:32:3a:32:4f:fb:2c:e5:78:ab:2c:d8:e2:6e:a2:
0a:1a:17:4a:b1:eb:56:8e:db:80:eb:e7:08:ac:99:b8:70:57:
64:14:cf:a3:9f:8b:00:d1:a3:3a:f4:e7:00:e9:71:19:0f:d1:
f7:6f:4b:18:20:73:65:b9:6c:c9:d6:ab:37:06:c0:93:8e:e2:
36:32:33:b9:66:00:13:c3:03:32:1a:38:d4:fb:83:45:2f:4e:
18:68:93:8f:be:82:a6:64:8b:20:4d:ca:22:62:46:f6:7f:c8:
18:a0:ee:7e:b5:44:80:1a:46:c9:1d:f3:b4:d0:0c:a2:78:60:
5d:a5:c0:83:07:d4:35:a8:c1:22:ad:be:c4:3a:b3:33:20:2d:
0d:de:31:35:d6:ec:b7:ef:59:f9:5a:90:3d:ba:14:d5:ef:16:
ee:9e:4f:f7:68:fe:42:a5:38:f3:f1:95:1f:c7:64:2f:c6:f9:
8a:1a:e0:30:58:b1:9d:23:ae:c2:99:19:2a:ba:e4:e6:61:d9:
24:b6:52:3f:26:e9:3e:ad:78:c8:03:07:27:c1:65:bb:7b:e3:
70:89:37:76
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYIgkALpTftPA6xzv11KVwtJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczOWE3MzU4ZjczMDM5YTFkYTg4NjVlZjJmMmZmNmY5ZmM5
OWZmMzgwHhcNMjIwNzIxMTE0MTI0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2RkYTMyNTMwODA2NTUyZDQ5MGFmZjc4YzUxZDVjNWNhMmRjNzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzb5gBc3o8PRhsjMvfrIrHG2uPjZ
lz1NmXd95ls3omWm5nAl/l0GdKq/cY0snGi+AMQM6UxhXldDX3GdrHU+Pvk9pbbq
Jrk0ytr6/O4DiVxlNqlsoKQSRx6KiGAtKE6qXOkiZZWDtnUCm2q4k3hAKwdvUtqv
738eIUbJlDLktorGoFSlpIKu2VSrc5ScHqZBhsxlRSQkC04JNREGurdzl+XD7/xj
Fvs1O8YfqifAnjBBpXfIFYwXSmkr7a+rlGYnC4aWBLK1yGqEckX2geHr4DVGAKzz
CInkAgyFuSWLT0PC2/JZawkQacklo6RsCG4BUXYUZrPnllOkQKywsvUUmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPzdoyUwgGVS1JCv94xR1cXKLccZMB8GA1UdIwQY
MBaAFHOac1j3MDmh2ohl7y8v9vn8mf84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzVweldQY3dPYUhhaUdYdkx5XzItZnlaX3pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80NTE0ZWUtM2RhYi00OWZlLTg1Nzct
M2M4ZWZjZmMxNGY2LzEvX04yakpUQ0FaVkxVa0tfM2pGSFZ4Y290eHhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy80NTE0ZWUtM2RhYi00OWZlLTg1NzctM2M4ZWZjZmMxNGY2
LzEvYzVweldQY3dPYUhhaUdYdkx5XzItZnlaX3pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJUiOMA0G
CSqGSIb3DQEBCwUAA4IBAQBWXQO546tdUpHYLgkiC6wFM8DsBB0DAlnFiWurFskJ
9yJnHYey6aq9MjoyT/ss5XirLNjibqIKGhdKsetWjtuA6+cIrJm4cFdkFM+jn4sA
0aM69OcA6XEZD9H3b0sYIHNluWzJ1qs3BsCTjuI2MjO5ZgATwwMyGjjU+4NFL04Y
aJOPvoKmZIsgTcoiYkb2f8gYoO5+tUSAGkbJHfO00AyieGBdpcCDB9Q1qMEirb7E
OrMzIC0N3jE11uy371n5WpA9uhTV7xbunk/3aP5CpTjz8ZUfx2QvxvmKGuAwWLGd
I67CmRkquuTmYdkktlI/Juk+rXjIAwcnwWW7e+NwiTd2
-----END CERTIFICATE-----
Generated at Sun Apr 20 05:00:31 2025 by rpki-client