Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/4514ee-3dab-49fe-8577-3c8efcfc14f6/1/zxGe8oTwQJN72tSzS9-VK2DNM4s.roa
File: zxGe8oTwQJN72tSzS9-VK2DNM4s.roa (raw, json)
Hash identifier: BKh7O1q38L8iPNhjtn6D69u92HBlhDDcX1BVRECctpI=
Subject key identifier: CF:11:9E:F2:84:F0:40:93:7B:DA:D4:B3:4B:DF:95:2B:60:CD:33:8B
Certificate issuer: /CN=739a7358f73039a1da8865ef2f2ff6f9fc99ff38
Certificate serial: 01856C1CA20B27AAF721F9C7EFBAE660E001
Authority key identifier: 73:9A:73:58:F7:30:39:A1:DA:88:65:EF:2F:2F:F6:F9:FC:99:FF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c5pzWPcwOaHaiGXvLy_2-fyZ_zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/4514ee-3dab-49fe-8577-3c8efcfc14f6/1/zxGe8oTwQJN72tSzS9-VK2DNM4s.roa
Signing time: Sun 01 Jan 2023 06:54:53 +0000
ROA not before: Sun 01 Jan 2023 06:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 37.72.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:a2:0b:27:aa:f7:21:f9:c7:ef:ba:e6:60:e0:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=739a7358f73039a1da8865ef2f2ff6f9fc99ff38
Validity
Not Before: Jan 1 06:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf119ef284f040937bdad4b34bdf952b60cd338b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:05:24:6d:0f:18:c0:21:02:24:34:5d:9a:e1:
e7:a2:bc:c5:87:62:1b:f3:0f:46:45:06:76:ae:ee:
bd:c4:d4:24:31:82:e2:b5:e4:12:40:7d:ea:b8:fc:
9d:a6:2f:e1:1b:51:79:3d:4e:c4:55:46:eb:92:e7:
10:ee:fe:f8:e2:65:96:dc:49:1a:3e:8d:76:36:29:
a1:2e:e5:77:14:69:d3:67:d1:e0:72:fd:af:ce:71:
0a:50:49:5f:8b:0a:8b:cc:98:c3:79:d1:f9:78:4d:
94:df:6a:d1:07:b0:97:36:68:0e:43:73:84:2f:17:
a4:9d:5a:cf:9f:2d:b6:17:52:e3:2a:e4:61:4b:31:
d3:37:92:6e:2e:90:cf:be:bc:96:fc:24:83:9b:9b:
54:a3:7e:70:ab:ca:d1:6e:50:5c:64:90:cb:01:f7:
c2:d5:e7:70:b5:7b:b2:a0:63:74:31:77:cc:30:82:
12:6f:7d:e6:ff:ea:48:a8:21:5c:15:ee:be:78:fd:
23:c1:23:d3:a2:90:44:ff:7f:24:81:10:f1:65:51:
6e:7e:17:ae:14:28:f4:4c:48:c0:e1:af:7f:09:0d:
bb:5c:df:39:0c:a6:69:9b:ae:31:b5:e5:59:d8:66:
b2:6c:d5:a8:58:29:3d:c7:94:76:62:40:64:74:1b:
1a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:11:9E:F2:84:F0:40:93:7B:DA:D4:B3:4B:DF:95:2B:60:CD:33:8B
X509v3 Authority Key Identifier:
keyid:73:9A:73:58:F7:30:39:A1:DA:88:65:EF:2F:2F:F6:F9:FC:99:FF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5pzWPcwOaHaiGXvLy_2-fyZ_zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4514ee-3dab-49fe-8577-3c8efcfc14f6/1/zxGe8oTwQJN72tSzS9-VK2DNM4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4514ee-3dab-49fe-8577-3c8efcfc14f6/1/c5pzWPcwOaHaiGXvLy_2-fyZ_zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.142.0/24
Signature Algorithm: sha256WithRSAEncryption
07:61:b4:0b:75:88:ac:f0:48:af:95:77:8d:db:82:fb:2d:88:
0a:7c:0d:90:02:0b:fa:b4:a9:c2:7c:9a:dd:70:ee:15:4e:50:
f6:a6:53:ff:8a:31:40:5a:e7:bd:4c:56:e0:72:d1:f7:17:00:
80:0a:02:8c:82:51:3b:b7:7d:1e:9e:b2:57:3e:82:f0:ad:94:
4f:34:ea:c5:1c:14:37:b9:d9:94:d2:5c:c8:17:75:b3:21:6c:
c9:b6:18:4b:59:2c:dd:30:59:bd:55:15:ba:6d:e7:40:52:f5:
e8:95:28:70:61:f2:2f:cc:1c:e5:ca:a8:3f:c4:9e:fc:ac:01:
39:6d:80:c6:64:1d:40:4d:fd:93:49:f9:bb:b1:30:08:73:22:
5e:db:b7:fe:3a:de:18:1c:35:2f:56:74:07:99:47:62:32:aa:
e1:7f:99:8c:25:a4:26:af:be:c7:09:fb:41:15:7f:e8:5b:00:
69:a1:81:08:cb:c0:2b:09:02:a5:2e:12:e9:2e:4f:9a:0e:07:
50:9b:94:41:d9:64:8d:cd:ce:9c:e5:f8:38:94:26:a3:07:28:
bd:4c:2f:53:e3:4e:3e:65:2c:53:4b:79:d0:e7:9a:0f:a0:9a:
25:41:03:fd:5c:2c:52:96:61:1b:f5:97:2d:f8:b7:9f:4f:00:
ab:b3:3d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:35 2025 by rpki-client