Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/kVpC8L3NVBoBD0uRMCZwUe0L0hI.roa
File: kVpC8L3NVBoBD0uRMCZwUe0L0hI.roa (raw, json)
Hash identifier: ZhoOhvNlGipJNbOy/H0tyIYa78nFkIWP7NHbAfT2b3I=
Subject key identifier: 91:5A:42:F0:BD:CD:54:1A:01:0F:4B:91:30:26:70:51:ED:0B:D2:12
Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Certificate serial: 01942825D30C5BE665C4C09D81457564F18E
Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/kVpC8L3NVBoBD0uRMCZwUe0L0hI.roa
Signing time: Thu 02 Jan 2025 17:52:34 +0000
ROA not before: Thu 02 Jan 2025 17:52:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206804
IP address blocks: 37.0.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:d3:0c:5b:e6:65:c4:c0:9d:81:45:75:64:f1:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Validity
Not Before: Jan 2 17:52:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=915a42f0bdcd541a010f4b9130267051ed0bd212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:eb:e3:6d:33:e3:7b:50:d0:e4:17:a3:89:31:
14:c2:cb:31:25:c0:85:61:e8:57:ac:b9:1e:5e:cd:
b9:7d:0d:44:2c:ef:ac:3c:59:dc:f3:26:9c:d1:9e:
d0:82:d5:e5:09:93:8a:b8:0b:b4:b0:32:97:87:f0:
a0:e9:2d:36:80:d0:d6:9b:98:fc:07:3a:17:f2:8c:
0a:5c:ea:3a:38:96:59:c5:1b:c0:62:07:8a:fa:ad:
55:c6:93:aa:e0:24:a2:20:9d:b0:c9:d3:f4:c9:ac:
b1:45:fb:fd:17:96:2d:ca:72:b4:b1:26:75:91:07:
08:a0:6a:a3:74:4f:9a:da:fd:f1:d5:77:4e:b0:93:
2c:b3:66:4c:e1:64:29:af:c9:ac:75:b7:07:99:07:
0a:59:62:0e:de:e5:76:c0:6a:dd:5e:16:9a:15:b5:
e9:7f:3a:cc:61:66:91:22:9d:3d:ee:c9:90:db:d9:
bd:ce:69:99:95:ce:e2:d8:03:c9:70:8b:4d:ae:c4:
9b:06:cd:a4:50:c8:45:c2:18:ba:20:d2:8a:af:10:
5b:36:65:1e:55:12:31:f9:5d:32:48:3d:33:a4:d0:
6b:c3:0c:48:d0:ae:0a:16:9b:a5:52:91:aa:04:d9:
dc:5c:a3:b7:46:2c:5f:91:2c:e6:1c:d0:40:64:53:
e8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5A:42:F0:BD:CD:54:1A:01:0F:4B:91:30:26:70:51:ED:0B:D2:12
X509v3 Authority Key Identifier:
keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/kVpC8L3NVBoBD0uRMCZwUe0L0hI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.0.12.0/24
Signature Algorithm: sha256WithRSAEncryption
82:6e:d6:77:77:01:11:bf:cd:2b:74:64:81:5d:69:cd:8f:69:
73:73:81:9d:1b:4b:f9:fa:c3:59:91:df:e9:78:94:76:9f:07:
e1:f2:36:61:5d:24:ff:06:4d:ff:05:f4:cd:e9:30:77:81:29:
b3:77:d9:3e:85:b0:eb:71:3f:1a:7e:09:10:4b:9e:13:e6:66:
4e:23:ba:09:46:7d:c9:cf:b8:75:83:f8:18:0c:b2:83:37:12:
72:57:03:d6:f6:59:aa:70:0d:9a:68:15:d1:4e:5e:ba:88:8e:
bd:c8:35:c6:ad:f1:9e:38:4c:07:25:46:da:e7:e3:fe:b8:01:
c4:8b:35:a8:42:1c:a5:18:20:12:ef:0b:d3:5a:53:ab:71:f9:
e4:6c:14:e1:04:90:50:68:6d:65:f8:61:88:9d:3f:cb:7d:0c:
87:43:a0:16:55:26:cf:9c:03:84:1b:0d:2b:52:c3:47:95:4f:
c8:44:94:e5:53:1f:5c:ce:83:c7:81:39:c4:15:f5:e0:c4:e4:
08:81:52:57:4c:10:12:1b:9a:a2:7c:5d:73:38:ef:ba:99:ed:
55:be:93:ff:18:e3:4c:11:81:c4:f8:85:5e:8b:2b:66:c8:64:
a2:b1:9b:88:47:ac:8c:4f:26:15:63:5a:61:b7:39:25:67:4e:
91:5b:0c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:54 2025 by rpki-client