Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Rf2JMbh1ZKVDVf3w7cagdUyuM8w.roa
File: Rf2JMbh1ZKVDVf3w7cagdUyuM8w.roa (raw, json)
Hash identifier: ZqmZz6ub3gvrtbEawda09NKbC2DL2IzP9tuZyCCRNic=
Subject key identifier: 45:FD:89:31:B8:75:64:A5:43:55:FD:F0:ED:C6:A0:75:4C:AE:33:CC
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD5488DE8C9AE4D5AB0603C46CAFB04
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Rf2JMbh1ZKVDVf3w7cagdUyuM8w.roa
Signing time: Mon 02 Jan 2023 00:15:26 +0000
ROA not before: Mon 02 Jan 2023 00:15:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62342
IP address blocks: 37.156.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:48:8d:e8:c9:ae:4d:5a:b0:60:3c:46:ca:fb:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45fd8931b87564a54355fdf0edc6a0754cae33cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:96:d8:35:b6:4e:c6:45:4e:dd:ae:50:81:51:
bc:16:e5:45:79:e0:43:bd:ae:f4:2b:9e:f2:e1:2d:
ff:24:32:37:38:b4:69:36:09:de:1c:76:7e:ed:50:
1f:9a:3d:7c:41:bf:83:9b:73:66:ba:6e:fe:87:37:
14:81:c6:e7:4f:4d:35:04:90:6e:2b:cf:76:a9:84:
a2:13:a0:69:0f:df:23:59:00:9f:34:e2:11:3f:65:
93:08:ad:57:28:0c:0c:4c:b1:7d:a8:e8:98:f3:03:
65:fd:30:e5:0c:a7:9b:5c:d2:16:bf:f2:bc:a2:cb:
80:7a:10:5a:3e:08:df:fd:45:92:65:21:97:e8:3a:
c2:72:f3:73:6c:14:5f:ff:2e:49:7f:45:8f:9a:cb:
fd:49:0a:e8:e0:8d:3c:3d:4e:b8:44:e6:cd:f0:ef:
db:28:cc:66:b0:d2:ce:b7:2f:6a:84:fc:29:bf:dd:
04:9a:2a:ba:c7:95:29:63:61:2a:3d:cb:3a:df:18:
29:6e:75:f0:e7:3b:4f:73:a5:10:44:e2:52:41:c3:
cf:c9:2a:09:67:39:d6:79:81:3d:08:b5:36:5e:e2:
ee:79:2b:03:56:f6:77:56:fb:fa:72:8a:e0:65:6f:
34:6a:51:89:a1:1e:6c:84:c6:d0:69:e3:a0:af:43:
79:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FD:89:31:B8:75:64:A5:43:55:FD:F0:ED:C6:A0:75:4C:AE:33:CC
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Rf2JMbh1ZKVDVf3w7cagdUyuM8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.36.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:19:83:d1:34:d0:88:d7:5d:a9:6c:bb:96:3e:3a:50:72:0f:
16:50:86:51:38:27:61:7e:cd:48:7e:c6:f0:a2:70:7e:2b:c4:
f0:b8:d2:72:6f:34:4f:77:e3:e9:34:ce:52:50:bf:2e:48:e4:
6d:c8:60:87:69:97:5c:76:34:56:b6:28:7e:30:2f:08:76:1d:
74:1f:71:ac:2d:ce:ff:4d:80:ff:45:b5:1c:47:93:1d:4f:06:
f2:c3:d0:9d:02:31:83:75:78:37:19:d6:6d:9f:a4:43:05:b8:
62:10:d5:0c:c5:f8:0c:35:4c:be:0c:88:cd:88:90:65:30:40:
e1:cd:b5:2c:61:34:de:95:6e:ab:23:8d:55:e8:58:03:9d:94:
89:d8:ac:0d:8e:3a:0e:7a:8a:57:a4:e7:82:a8:87:bf:95:e8:
ca:a5:a3:11:53:76:6b:b0:0e:92:18:2f:f4:dd:d3:24:11:04:
4d:ed:fd:e5:02:2c:4f:be:85:e9:d5:91:fe:52:48:5f:fc:da:
50:2c:b7:db:29:aa:ea:d2:87:84:af:28:c1:30:a4:57:ed:29:
b7:97:b3:26:37:15:e2:41:dc:22:dc:1c:c0:c2:72:65:f9:63:
29:95:dd:82:18:05:f2:f7:8d:38:9d:79:db:5e:f2:98:7f:c5:
ed:52:bd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:46:10 2025 by rpki-client