Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/uFOFjnpS5WfkiXWuANlN0J-QpVE.roa
File: uFOFjnpS5WfkiXWuANlN0J-QpVE.roa (raw, json)
Hash identifier: AOEC6tTe16mH/5zPTdMGyJX1tIhoZY/G4YVm3ABD8jI=
Subject key identifier: B8:53:85:8E:7A:52:E5:67:E4:89:75:AE:00:D9:4D:D0:9F:90:A5:51
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 01941FFA3819E7DCF4E12FCDE6F2AF11DDB4
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/uFOFjnpS5WfkiXWuANlN0J-QpVE.roa
Signing time: Wed 01 Jan 2025 03:47:59 +0000
ROA not before: Wed 01 Jan 2025 03:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62294
IP address blocks: 37.114.57.0/24 maxlen: 24
176.100.34.0/24 maxlen: 24
2a00:ccc5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:38:19:e7:dc:f4:e1:2f:cd:e6:f2:af:11:dd:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Jan 1 03:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b853858e7a52e567e48975ae00d94dd09f90a551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:59:86:f0:f3:72:e9:36:4e:3d:03:8e:23:fb:
27:da:ec:e0:03:b6:a3:8b:bb:ab:5f:b3:5c:df:d3:
12:b9:67:52:9e:ce:5a:68:f9:0b:dd:4f:d6:ae:c0:
57:50:c5:76:9f:ff:ef:10:76:1e:aa:c7:ae:ab:1f:
93:51:5a:20:e4:f0:19:da:f1:7d:86:aa:7f:24:b9:
e9:6e:00:55:a8:ab:6d:f0:7c:3c:9a:85:60:57:b1:
91:be:e9:43:a0:e3:45:5d:cf:49:c4:48:bb:e3:f3:
52:f1:7f:e0:fe:1b:5c:da:58:ab:c7:4b:e5:97:24:
4d:69:14:9f:fd:97:a2:02:ca:76:1c:4d:1c:62:b2:
f8:cb:f5:27:3d:93:88:5b:d1:af:c4:4e:8b:b3:4e:
ed:d3:c0:2d:f1:b5:e5:3a:6b:3f:9d:41:bc:cc:a7:
ff:1a:81:4e:2c:6f:54:8b:89:e5:a8:b6:95:65:c7:
77:4f:c0:6b:9d:4c:64:da:ff:73:18:a0:ef:df:b6:
5e:8a:97:9b:fb:df:29:07:84:d6:2b:3c:60:ad:43:
12:b1:2f:b5:59:9a:5f:9f:68:7b:95:e3:55:fb:2e:
47:87:d5:a7:11:bb:c1:12:c0:89:84:27:e4:bf:06:
f3:77:16:8d:60:3c:86:8c:2d:bf:61:26:29:56:4b:
96:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:53:85:8E:7A:52:E5:67:E4:89:75:AE:00:D9:4D:D0:9F:90:A5:51
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/uFOFjnpS5WfkiXWuANlN0J-QpVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.57.0/24
176.100.34.0/24
IPv6:
2a00:ccc5::/32
Signature Algorithm: sha256WithRSAEncryption
a7:60:5c:0d:4e:2e:83:5b:b5:3c:76:20:bf:6c:9b:e5:75:d2:
b9:18:20:cd:ae:87:b0:5f:e0:dd:4a:d5:93:8d:fe:21:08:ba:
b7:92:36:88:80:9b:9d:08:ac:f4:a7:c8:22:35:3b:34:ac:4a:
bf:6a:d4:a3:29:17:58:d1:44:4a:e9:ea:40:2d:aa:e1:54:4a:
f9:09:ca:bc:fa:f0:63:2b:13:81:7b:4c:c4:44:b2:0f:4f:d6:
f8:c2:c2:77:b0:77:3c:8c:81:68:0d:40:85:49:55:cb:03:4e:
19:4a:f3:2b:56:78:c5:f1:7e:fa:27:a0:7c:b1:24:8d:2c:a4:
d1:6b:64:c0:7c:f0:ff:46:e5:64:3e:0d:f9:8b:4f:77:dd:5e:
eb:5e:9d:e4:6a:1b:3e:2c:c9:e4:30:49:22:d1:70:2b:4d:47:
ff:dc:8a:a3:6e:58:b1:7f:1f:b2:f7:85:d2:03:cc:e3:f1:a0:
ed:5e:88:c9:45:6a:ee:5a:ec:d5:81:cc:59:b3:a8:6f:a3:ed:
0e:5e:21:41:b4:7d:27:0d:8e:81:18:02:f4:83:53:00:45:e1:
e2:ba:44:80:13:f1:37:5c:4a:53:7c:0e:ec:3f:9f:10:37:2f:
1b:91:82:fe:01:e4:73:67:75:4e:55:47:ad:9a:4d:2f:70:32:
ed:17:63:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:29:46 2025 by rpki-client