Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/65c33b-005b-408e-892d-a606efb66408/1/eIZnCr6RMeP4L5iqc4tEwSWRQ_s.roa
File: eIZnCr6RMeP4L5iqc4tEwSWRQ_s.roa (raw, json)
Hash identifier: oRI1GspmuBRIPVX57vnBP1qniDnG8zMRLSX89TH0zTc=
Subject key identifier: 78:86:67:0A:BE:91:31:E3:F8:2F:98:AA:73:8B:44:C1:25:91:43:FB
Certificate issuer: /CN=af0694e0113e678930747ad6af0b233db8453da1
Certificate serial: 0187FB488FA1CAF5A5866753C5DCB8DBE7E8
Authority key identifier: AF:06:94:E0:11:3E:67:89:30:74:7A:D6:AF:0B:23:3D:B8:45:3D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwaU4BE-Z4kwdHrWrwsjPbhFPaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/65c33b-005b-408e-892d-a606efb66408/1/eIZnCr6RMeP4L5iqc4tEwSWRQ_s.roa
Signing time: Mon 08 May 2023 12:14:09 +0000
ROA not before: Mon 08 May 2023 12:14:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 37.77.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fb:48:8f:a1:ca:f5:a5:86:67:53:c5:dc:b8:db:e7:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0694e0113e678930747ad6af0b233db8453da1
Validity
Not Before: May 8 12:14:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7886670abe9131e3f82f98aa738b44c1259143fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e9:55:86:ca:c0:40:43:ca:79:24:af:6f:58:
86:e9:ec:9a:b0:59:88:1a:e5:a4:5b:4f:39:f1:ca:
9e:98:b5:88:6e:76:4c:e8:d7:b6:1d:97:e6:2a:6a:
35:b9:b2:d5:9b:0c:f4:2c:01:da:f9:dd:3e:a8:91:
df:67:cf:6a:8f:2c:2d:f8:b3:1b:c4:a9:9e:e0:b6:
14:90:dd:cb:98:ee:a2:42:53:bc:37:14:6b:eb:af:
51:4a:4a:2f:83:51:c7:5f:b3:e4:3f:4b:d0:0a:72:
49:34:54:2b:8a:32:3d:89:a7:aa:d2:3e:ca:8c:33:
4c:3e:da:20:51:ff:8e:f5:59:0f:9e:9f:74:cf:04:
ce:2e:7b:bc:72:a4:44:c8:6a:e5:1c:7f:6f:9f:f5:
17:c0:6d:f1:56:6b:a3:1b:6b:b5:84:fc:ca:05:59:
21:9e:77:34:e0:fa:16:8d:6b:f4:38:9e:e3:08:9b:
14:96:e1:6a:a4:84:37:22:4a:45:fe:9a:ab:e3:36:
11:64:eb:fc:4e:36:c7:68:c2:d9:80:ba:9f:87:ec:
2a:0f:8d:e8:02:db:53:1e:66:1c:ee:77:56:43:3d:
b7:6d:e5:f4:0d:b6:6d:82:c6:d6:65:14:83:20:e2:
9a:29:6f:40:0e:54:7d:86:b3:33:bb:6f:d0:7e:d1:
6d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:86:67:0A:BE:91:31:E3:F8:2F:98:AA:73:8B:44:C1:25:91:43:FB
X509v3 Authority Key Identifier:
keyid:AF:06:94:E0:11:3E:67:89:30:74:7A:D6:AF:0B:23:3D:B8:45:3D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwaU4BE-Z4kwdHrWrwsjPbhFPaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/65c33b-005b-408e-892d-a606efb66408/1/eIZnCr6RMeP4L5iqc4tEwSWRQ_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/65c33b-005b-408e-892d-a606efb66408/1/rwaU4BE-Z4kwdHrWrwsjPbhFPaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.147.0/24
Signature Algorithm: sha256WithRSAEncryption
53:7d:fb:19:78:ca:42:6b:8d:ed:77:33:19:8f:a1:36:94:bb:
71:c1:e5:7b:ff:49:b3:6f:1a:0b:0c:b7:09:a2:5a:d2:02:23:
03:83:9f:8d:6f:bb:70:2b:c2:56:3f:0c:d8:98:7d:e0:d8:de:
4d:f5:8b:72:1b:30:80:73:46:85:c5:dc:b8:f7:c8:c8:c0:66:
de:74:7c:cc:89:2e:38:29:06:03:3d:ef:b9:35:19:b2:42:72:
ac:f6:dd:30:16:3b:47:f7:ee:1d:cf:23:05:13:dc:73:c1:50:
a1:e6:e9:95:4e:b1:5b:67:aa:c2:fd:4a:de:d1:73:ac:64:3d:
9b:7e:b8:79:91:72:86:04:8f:c8:1b:3b:7c:53:69:80:6a:3f:
66:c3:2b:70:be:c3:75:ad:ae:3d:91:88:80:20:9a:6e:2a:40:
56:a7:4c:ff:5b:94:d6:d2:1f:59:89:a1:59:44:f1:a0:ef:76:
2c:06:4c:a4:de:09:1f:4a:7e:27:3e:ac:2f:34:76:1a:de:40:
87:b9:2d:a5:9d:42:fb:6c:90:7a:33:c7:1d:68:8e:29:bd:9d:
4e:df:08:c5:00:a4:19:9e:cd:ce:14:05:de:9e:73:79:68:9f:
4a:2f:a5:0c:c6:d1:f4:43:dc:c2:d5:dd:01:62:b9:8d:f1:a2:
78:0e:1c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:24 2025 by rpki-client