Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8e44d1-a73b-45cf-b3d0-b8ab05f4ca65/1/BdWzC8C6LRnntzU__Uj4BUry4fk.roa
File: BdWzC8C6LRnntzU__Uj4BUry4fk.roa (raw, json)
Hash identifier: dE/8xhlh8r7dagW2/B7Rn6Tctgql3rJq60alUEuENtU=
Subject key identifier: 05:D5:B3:0B:C0:BA:2D:19:E7:B7:35:3F:FD:48:F8:05:4A:F2:E1:F9
Certificate issuer: /CN=8cef626d4dd21d587d607134cc0f29847aae2732
Certificate serial: 018573CCF9E4A09C80357BCD78F8B14A0637
Authority key identifier: 8C:EF:62:6D:4D:D2:1D:58:7D:60:71:34:CC:0F:29:84:7A:AE:27:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jO9ibU3SHVh9YHE0zA8phHquJzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8e44d1-a73b-45cf-b3d0-b8ab05f4ca65/1/BdWzC8C6LRnntzU__Uj4BUry4fk.roa
Signing time: Mon 02 Jan 2023 18:44:51 +0000
ROA not before: Mon 02 Jan 2023 18:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 37.140.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:cc:f9:e4:a0:9c:80:35:7b:cd:78:f8:b1:4a:06:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cef626d4dd21d587d607134cc0f29847aae2732
Validity
Not Before: Jan 2 18:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05d5b30bc0ba2d19e7b7353ffd48f8054af2e1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:74:f5:dc:46:21:b7:df:7b:dd:06:93:a5:2c:
63:f8:3c:9b:59:f0:ee:2d:8b:1a:b1:e7:f4:0a:e7:
ba:de:2b:9c:ee:46:19:64:18:72:d4:1b:d5:c7:da:
76:3d:56:02:a3:cd:ca:bb:e2:75:3b:22:a0:60:1d:
1c:28:4c:77:97:60:19:77:95:49:b6:d7:6b:1e:8d:
48:90:52:0d:14:65:66:cf:6b:d7:ea:11:02:f9:cc:
1a:28:3a:9e:84:a4:60:b4:eb:86:27:c0:37:b0:c7:
50:46:98:51:fe:3e:b5:71:07:0a:89:e7:8e:b5:d0:
82:3c:46:34:f3:1b:bd:8c:05:af:84:93:3e:50:b0:
e6:25:f4:46:8f:34:8c:1f:14:f5:35:36:72:03:6d:
0c:a1:42:79:cf:67:d1:bb:cc:44:2c:4e:ab:b9:97:
02:56:9a:49:50:2f:19:6a:dd:5b:84:5d:28:25:de:
ae:79:26:eb:9a:ee:e2:b2:be:51:23:86:10:34:43:
a0:9d:5b:45:6d:81:64:78:4e:54:b6:50:96:55:69:
c6:c4:6d:ab:49:02:64:89:f6:05:ac:ca:08:cd:ca:
bb:c4:dc:72:16:25:5d:be:db:fd:e5:01:a7:b2:6e:
b4:47:70:36:04:b9:92:2b:5c:90:be:25:d4:3e:27:
8d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D5:B3:0B:C0:BA:2D:19:E7:B7:35:3F:FD:48:F8:05:4A:F2:E1:F9
X509v3 Authority Key Identifier:
keyid:8C:EF:62:6D:4D:D2:1D:58:7D:60:71:34:CC:0F:29:84:7A:AE:27:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jO9ibU3SHVh9YHE0zA8phHquJzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e44d1-a73b-45cf-b3d0-b8ab05f4ca65/1/BdWzC8C6LRnntzU__Uj4BUry4fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e44d1-a73b-45cf-b3d0-b8ab05f4ca65/1/jO9ibU3SHVh9YHE0zA8phHquJzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.222.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:fb:f1:42:c4:a7:9e:4e:87:5c:f5:76:a4:bd:76:e1:d8:76:
1f:08:b1:58:3b:8c:ad:68:49:61:9e:37:3b:12:84:c7:be:7e:
8e:57:80:1b:4c:f7:46:ae:64:55:3f:0e:8d:da:8a:cc:62:ea:
75:6a:3b:9f:2a:6a:a4:02:b8:09:19:8a:48:c7:e6:da:6e:51:
3f:dc:ed:bb:59:63:0c:15:03:09:8e:61:d4:ba:8b:11:de:e2:
be:3b:d5:5e:a6:3f:57:ae:13:06:79:a1:c7:69:46:ed:ee:51:
2a:cb:fa:2b:6c:ed:6d:b0:41:95:a5:ad:8a:5c:dc:3f:be:54:
74:3b:77:34:a8:95:0c:cb:35:4e:67:4c:81:41:e6:07:2b:fc:
be:49:af:e0:0c:2d:a2:be:f6:0f:e1:d0:54:c2:8d:00:4b:51:
67:61:6e:92:17:b3:4b:88:e3:fc:0d:80:e2:43:e1:0a:6a:57:
61:5f:75:f5:00:25:22:ac:7b:42:8e:7e:3c:1c:fa:3b:15:79:
1e:75:09:f1:24:4b:52:cc:fa:ea:a5:85:86:6c:59:8e:04:39:
5d:ef:5c:4c:a3:8b:c7:0e:73:10:fa:4f:a3:4d:9d:61:ce:9a:
5a:50:fe:4d:89:68:62:fa:be:d3:75:12:7d:d7:eb:bc:4c:56:
a4:5d:64:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:09 2025 by rpki-client