Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8e44d1-a73b-45cf-b3d0-b8ab05f4ca65/1/1BgnRnfyGiBAUkQmdDWa8viIpxU.roa
File: 1BgnRnfyGiBAUkQmdDWa8viIpxU.roa (raw, json)
Hash identifier: L8yJfXvnfDX4EXZxIcxSu1disOxHwV+JoNBcczzVbjU=
Subject key identifier: D4:18:27:46:77:F2:1A:20:40:52:44:26:74:35:9A:F2:F8:88:A7:15
Certificate issuer: /CN=8cef626d4dd21d587d607134cc0f29847aae2732
Certificate serial: 0104E9F1
Authority key identifier: 8C:EF:62:6D:4D:D2:1D:58:7D:60:71:34:CC:0F:29:84:7A:AE:27:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jO9ibU3SHVh9YHE0zA8phHquJzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8e44d1-a73b-45cf-b3d0-b8ab05f4ca65/1/1BgnRnfyGiBAUkQmdDWa8viIpxU.roa
Signing time: Sat 01 Jan 2022 12:05:23 +0000
ROA not before: Sat 01 Jan 2022 12:05:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 37.140.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17099249 (0x104e9f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cef626d4dd21d587d607134cc0f29847aae2732
Validity
Not Before: Jan 1 12:05:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d418274677f21a204052442674359af2f888a715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9a:bf:cd:b5:62:94:82:c8:6f:4e:1d:94:4d:
2c:af:f7:d1:f4:a8:29:8f:70:9c:95:1a:85:45:44:
08:4c:72:7a:df:6a:ae:68:23:ae:f0:32:dd:05:17:
69:a8:51:26:45:85:5c:11:f9:11:c8:51:51:d1:2e:
09:3d:77:66:3a:c8:fc:d4:95:33:a2:ec:bb:cd:78:
c9:63:3f:72:ba:00:a3:51:53:ee:c8:41:a9:41:e6:
ca:cc:17:cc:8c:9a:af:af:f2:16:3a:8b:cf:ef:58:
6f:5b:f8:1d:8f:ca:71:35:ea:b4:a2:00:6b:e3:49:
53:17:8e:dc:0c:e5:af:ec:6e:97:02:65:92:a4:4d:
4b:1c:9d:7f:a1:3e:7d:21:e2:87:1f:65:87:2a:7d:
53:13:da:19:38:f2:d7:b9:c8:a3:be:bf:bc:3d:77:
5a:ad:2f:8f:f2:ed:a5:28:b9:e5:07:a9:f8:bc:6b:
0a:fb:c4:21:80:4e:7b:54:7f:21:59:23:5c:4a:7c:
ac:e4:70:66:cc:6d:43:2f:b9:71:19:38:66:59:f0:
53:3d:de:a8:08:e1:f1:60:76:f4:8c:f1:ba:cb:4a:
a2:22:71:7d:37:cd:39:a0:a4:d7:02:50:df:80:12:
07:d6:8c:64:5d:2d:1b:3e:c4:72:30:1e:13:e0:5c:
8d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:18:27:46:77:F2:1A:20:40:52:44:26:74:35:9A:F2:F8:88:A7:15
X509v3 Authority Key Identifier:
keyid:8C:EF:62:6D:4D:D2:1D:58:7D:60:71:34:CC:0F:29:84:7A:AE:27:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jO9ibU3SHVh9YHE0zA8phHquJzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e44d1-a73b-45cf-b3d0-b8ab05f4ca65/1/1BgnRnfyGiBAUkQmdDWa8viIpxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e44d1-a73b-45cf-b3d0-b8ab05f4ca65/1/jO9ibU3SHVh9YHE0zA8phHquJzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.222.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:56:d7:0f:ed:81:59:71:3f:34:4b:84:ee:64:48:3a:93:2e:
1f:79:2f:17:58:e0:d3:1f:03:ba:c1:41:89:1c:31:0f:72:ea:
34:39:69:b9:5d:cc:d6:e7:8c:48:a8:25:64:a7:fd:a9:a6:9f:
1e:61:79:e0:61:38:9f:32:17:cd:cf:20:93:d3:2d:0c:54:eb:
c3:74:0a:d1:8d:cb:d4:74:91:1c:f2:3e:c5:fa:76:93:de:3d:
88:c2:32:ff:2d:84:6d:8e:9d:4c:8d:2d:d6:bb:75:8c:be:2c:
cf:a9:07:88:27:ca:a9:95:13:ec:32:26:02:56:75:9e:1d:46:
86:60:62:b8:fc:57:f5:9f:03:43:af:f7:7a:44:b2:6f:58:2e:
6a:4b:40:0d:b9:ba:e4:56:72:ad:1e:c3:65:61:57:6e:ed:0c:
20:40:24:ab:e7:75:8e:c8:fe:94:a8:3f:58:b2:19:5d:16:53:
22:5c:8d:12:53:4b:05:bc:69:76:a8:4b:f5:d2:53:26:30:5a:
40:8f:a8:24:7f:7f:b1:34:b9:0a:d5:7c:ad:cc:96:a7:4d:4b:
e8:e2:63:e4:3c:3d:1b:09:eb:b0:da:95:c3:79:22:24:71:d4:
ca:53:57:c9:e9:22:94:70:48:1b:6a:63:08:91:0a:e5:f4:9c:
d4:8b:76:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:10:28 2025 by rpki-client