Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/RqiGFoHKY_PvFOmHEK-QxYQhid8.roa
File: RqiGFoHKY_PvFOmHEK-QxYQhid8.roa (raw, json)
Hash identifier: 7Q9q0xcwl3LPjrjXkBmNiQj0PUW+2bCcKvQ2CphVsQc=
Subject key identifier: 46:A8:86:16:81:CA:63:F3:EF:14:E9:87:10:AF:90:C5:84:21:89:DF
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 01941FFA3D2F1DD21F831E9013EA34EC21C4
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/RqiGFoHKY_PvFOmHEK-QxYQhid8.roa
Signing time: Wed 01 Jan 2025 03:48:00 +0000
ROA not before: Wed 01 Jan 2025 03:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215338
IP address blocks: 37.114.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:3d:2f:1d:d2:1f:83:1e:90:13:ea:34:ec:21:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Jan 1 03:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46a8861681ca63f3ef14e98710af90c5842189df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:57:26:44:5c:5e:d3:35:8a:7d:f3:29:d3:b7:
e2:61:25:8b:60:12:b6:5c:71:8e:cb:4c:97:68:4c:
97:18:6d:57:26:e1:3b:fd:6d:e3:d7:de:58:cf:8c:
b5:76:a8:b2:58:8c:c3:5a:b1:04:5d:74:bd:0c:da:
4b:17:fb:78:ee:e2:2e:0d:85:2d:ac:46:5e:1c:c0:
2d:8a:a5:e9:0e:d7:be:ed:5d:06:15:a4:0b:99:86:
0b:c1:73:08:24:ea:c1:8e:91:3c:55:54:31:42:54:
dc:ed:bd:89:04:9b:37:49:4d:02:91:a1:19:bd:78:
af:8f:69:20:79:24:51:c1:98:ab:3b:2d:82:23:0e:
12:50:77:e2:a2:ab:15:87:ab:bb:21:41:21:2f:d8:
3f:77:4d:2b:84:b9:c5:f9:7f:9e:ab:33:8c:5b:26:
fc:54:bf:5b:8a:a2:d4:ca:1b:23:6c:85:41:58:f3:
5a:27:56:5f:80:c8:0d:e7:55:ed:70:3a:90:8e:63:
e3:8d:55:68:97:6d:e1:7e:f2:8b:9e:3c:d2:72:fa:
d2:fe:48:b5:79:72:ec:99:10:a5:df:f0:85:ee:f9:
0b:b6:8e:83:aa:f7:f7:60:f5:86:87:28:ed:5f:b8:
4a:f6:0f:91:c5:f8:3a:38:b3:c2:0a:05:c8:68:f2:
e5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A8:86:16:81:CA:63:F3:EF:14:E9:87:10:AF:90:C5:84:21:89:DF
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/RqiGFoHKY_PvFOmHEK-QxYQhid8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.54.0/24
Signature Algorithm: sha256WithRSAEncryption
96:71:24:b9:4f:bf:69:03:01:f7:48:30:ae:bc:a3:0d:6b:77:
72:61:ac:05:cc:a1:b6:f9:af:ac:9b:c3:6a:00:aa:cf:13:83:
14:2d:d4:7b:85:13:f7:2c:70:2d:a3:a1:08:83:dd:53:98:f5:
c9:6c:7c:8c:09:6b:6a:36:22:ed:20:e0:e5:e8:d6:e1:35:76:
56:36:83:5c:ba:9f:9d:c2:45:fb:b5:42:12:5b:0a:37:95:11:
73:09:57:b0:9f:63:f0:00:3f:1c:27:01:ca:e8:c8:82:b5:23:
5e:9b:d4:4a:8c:b3:13:dc:bf:01:be:3b:43:f8:d2:89:30:b9:
db:65:4d:44:2f:27:be:9b:e9:32:c5:68:dd:43:e4:07:39:21:
d4:3d:f8:fa:fe:0c:3e:e8:5f:b6:93:90:a7:d4:00:52:d6:5e:
14:0a:73:74:68:92:15:b1:fc:1e:1a:82:ad:49:03:59:65:d2:
94:84:d9:e5:4c:26:5f:de:42:ae:67:cb:f3:55:d8:56:87:03:
ca:c9:60:db:34:7b:b9:a4:8c:5d:bb:07:3f:f1:6a:c1:94:79:
da:77:8a:82:cf:f1:d5:c7:d7:ef:75:fb:0d:90:c7:61:52:ba:
02:dc:5b:c5:79:5c:6f:c3:1f:e8:79:7a:21:bb:04:a2:a5:8b:
cf:76:26:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 14:55:57 2025 by rpki-client