Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/E_7lfxRnXL43BaxS0BR35ae28-8.roa
File: E_7lfxRnXL43BaxS0BR35ae28-8.roa (raw, json)
Hash identifier: bsdbl8+gmpOB2GMwRa9PUSXIwKLCbxh9y6aoGWsrfmA=
Subject key identifier: 13:FE:E5:7F:14:67:5C:BE:37:05:AC:52:D0:14:77:E5:A7:B6:F3:EF
Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Certificate serial: 01942825CF95C2316196C39089287FD5D810
Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/E_7lfxRnXL43BaxS0BR35ae28-8.roa
Signing time: Thu 02 Jan 2025 17:52:34 +0000
ROA not before: Thu 02 Jan 2025 17:52:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 37.0.9.0/24 maxlen: 24
37.0.13.0/24 maxlen: 24
37.0.14.0/24 maxlen: 24
37.0.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:cf:95:c2:31:61:96:c3:90:89:28:7f:d5:d8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Validity
Not Before: Jan 2 17:52:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13fee57f14675cbe3705ac52d01477e5a7b6f3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:98:55:1f:8a:66:37:47:32:02:67:f5:64:09:
81:02:cb:3d:4f:6e:b5:c3:fe:ee:1a:b4:65:2c:e3:
b9:2f:0e:9d:ba:51:ad:c2:1a:7e:9b:89:4a:cc:d9:
3d:b9:b6:90:01:4d:74:44:ff:c0:28:db:52:17:3d:
a2:6f:f9:ac:5d:9e:cb:f1:34:3f:15:f7:7e:8f:5e:
40:35:49:1c:e7:dd:b0:6a:0b:f3:f1:da:5e:64:4a:
07:80:7a:64:aa:f0:76:d5:48:a6:bf:d6:72:55:7d:
8c:a4:e9:9e:a0:00:9f:44:69:31:e5:5d:77:58:d7:
99:f7:d1:c3:c8:59:be:95:95:6f:70:96:5d:ad:0a:
fa:20:20:80:63:28:1c:af:9e:56:e3:07:29:66:72:
c5:ac:99:a8:07:99:f2:c9:4d:83:65:03:3f:50:c5:
ea:ce:eb:85:13:c2:e9:8e:67:b6:29:4c:ac:26:b0:
43:ca:ed:79:eb:77:e7:3c:d5:c0:8e:eb:6b:95:39:
5a:c5:6f:bd:8f:67:71:9a:d5:d4:26:9f:14:6a:f7:
5a:fa:cc:7c:46:c5:92:d1:69:ea:eb:d2:58:1b:31:
1b:80:0d:95:8c:3c:c7:e0:e2:4a:2b:2e:95:94:5d:
95:64:b7:76:ec:c7:93:1f:62:63:7a:7c:4a:55:6a:
4e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FE:E5:7F:14:67:5C:BE:37:05:AC:52:D0:14:77:E5:A7:B6:F3:EF
X509v3 Authority Key Identifier:
keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/E_7lfxRnXL43BaxS0BR35ae28-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.0.9.0/24
37.0.13.0-37.0.15.255
Signature Algorithm: sha256WithRSAEncryption
47:0d:02:e5:b1:0a:75:71:0f:62:bd:af:4c:ae:8f:fb:de:4f:
ab:82:97:cd:75:e5:86:29:84:87:e2:81:38:99:48:e3:41:7a:
6a:e3:9d:83:86:5b:5f:64:18:28:c4:f7:a8:c2:e8:2b:2c:14:
e8:1c:4d:40:c1:27:f9:37:5f:e2:65:26:ea:79:05:45:1d:ad:
64:7e:64:08:2c:58:a1:34:e0:60:6b:2d:49:c0:fe:60:e9:6e:
a5:a4:78:12:53:1e:1d:b7:41:a6:31:7e:91:73:45:64:96:1f:
d1:fd:89:a0:0b:6d:31:e1:1a:c4:b1:2b:19:10:a6:9a:cc:3a:
0c:dd:e1:3d:98:4f:b5:64:24:7d:9d:6c:16:e0:32:76:fd:b0:
28:7e:f9:b9:39:01:49:ec:87:3f:12:8c:09:35:85:e8:1c:2c:
06:eb:1a:76:a0:84:4b:6e:2f:b8:4d:9f:53:46:f2:af:7e:93:
45:e9:fe:ec:64:a4:d9:45:58:33:58:98:e6:aa:8b:ba:4d:b5:
8a:c8:5a:dd:1b:0a:28:11:4d:53:7c:c2:3c:00:de:3c:27:79:
56:a3:3f:58:b9:db:e8:af:ad:e8:71:71:0a:03:3e:43:5f:ea:
47:82:a0:bb:b6:81:84:7f:86:99:49:42:c9:ce:0a:2b:86:78:
30:ef:56:96
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:20:27 2025 by rpki-client