Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/upmbEGD5zUfBQYgH1geZHFDfZEw.roa
File: upmbEGD5zUfBQYgH1geZHFDfZEw.roa (raw, json)
Hash identifier: kbseA/i6njFirl0R+1xR1vD5jerH0Jrs1TxDP/WTWPk=
Subject key identifier: BA:99:9B:10:60:F9:CD:47:C1:41:88:07:D6:07:99:1C:50:DF:64:4C
Certificate issuer: /CN=2688ef373f8f00e01c25cf924b4f2e8ec6a219d1
Certificate serial: 01941F8C0A6F5BD8138B27867ECAC4071593
Authority key identifier: 26:88:EF:37:3F:8F:00:E0:1C:25:CF:92:4B:4F:2E:8E:C6:A2:19:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/upmbEGD5zUfBQYgH1geZHFDfZEw.roa
Signing time: Wed 01 Jan 2025 01:47:38 +0000
ROA not before: Wed 01 Jan 2025 01:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205868
IP address blocks: 37.130.140.0/22 maxlen: 24
2a00:7380:feed::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:0a:6f:5b:d8:13:8b:27:86:7e:ca:c4:07:15:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2688ef373f8f00e01c25cf924b4f2e8ec6a219d1
Validity
Not Before: Jan 1 01:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba999b1060f9cd47c1418807d607991c50df644c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:92:08:65:11:0f:87:7d:b9:67:28:77:77:63:
f3:7c:f6:ba:54:0d:84:fe:23:82:81:31:d1:bb:18:
7f:34:f8:36:29:83:8b:a6:c1:bf:87:50:5d:38:c1:
0f:1b:a1:f5:ab:f2:00:8a:e6:98:2e:d4:16:9e:c5:
63:93:64:8e:46:43:eb:71:b6:3c:c9:db:70:c2:c6:
db:95:1b:30:df:70:7a:1e:87:c8:92:d9:da:78:31:
9b:eb:06:7c:37:29:0b:14:89:4b:64:14:25:60:ec:
c2:67:cd:63:5f:52:17:2e:c4:c1:7b:a4:20:09:71:
7c:fa:5c:94:08:31:44:30:0c:3a:55:96:35:78:a0:
5d:e3:e9:3c:09:9d:02:64:ea:4a:c3:9a:9c:6b:de:
2b:3d:bd:b2:17:7d:2a:b0:b3:93:5b:58:80:08:da:
cb:cf:8f:65:c6:41:97:93:cf:4c:45:d7:08:20:ba:
04:c6:71:b2:05:32:6b:71:f0:c7:da:56:f2:83:2d:
10:d4:bc:27:59:4b:cd:f8:be:33:5d:da:6d:77:cd:
f8:d3:33:ca:d3:c8:08:db:4c:20:ec:97:dd:b3:05:
32:17:51:b6:34:46:87:33:1f:c8:24:7b:f4:d3:89:
23:10:be:89:90:dc:f9:3d:06:96:cf:53:1c:38:98:
4c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:99:9B:10:60:F9:CD:47:C1:41:88:07:D6:07:99:1C:50:DF:64:4C
X509v3 Authority Key Identifier:
keyid:26:88:EF:37:3F:8F:00:E0:1C:25:CF:92:4B:4F:2E:8E:C6:A2:19:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/upmbEGD5zUfBQYgH1geZHFDfZEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.130.140.0/22
IPv6:
2a00:7380:feed::/48
Signature Algorithm: sha256WithRSAEncryption
72:4e:b2:1f:c3:f9:d7:f0:a8:ab:b2:94:ca:4b:74:34:24:bf:
fb:cc:4f:7b:42:68:31:69:47:3c:89:4a:7d:a2:1b:23:ab:d5:
c7:b9:87:22:8d:d5:d9:15:a2:0d:ba:cd:1f:2c:31:b9:2d:66:
7c:89:b5:f1:4e:a6:1c:96:3c:c5:34:16:b3:34:bb:4a:9e:e5:
bb:77:4b:4c:30:01:36:da:b4:a7:cb:03:66:30:7c:61:a4:10:
fa:50:64:88:be:99:bc:6d:51:e1:38:38:9d:6b:26:4d:77:8e:
19:df:06:dd:7a:0a:0f:66:5a:e5:a3:c7:ce:16:a5:c2:75:ff:
77:f1:79:d8:b2:19:46:08:06:45:05:23:b2:67:0b:3d:9f:c8:
86:d4:c4:a1:41:3d:12:0c:d6:35:9f:62:19:08:2e:09:db:56:
a1:96:fe:94:ce:63:e0:33:c9:b2:0c:ec:f8:85:7b:ce:d7:7d:
ce:08:ca:92:01:ca:cc:2e:d6:e2:20:29:21:41:af:7c:eb:c3:
c8:ec:c7:41:4f:53:bc:93:4e:00:69:14:a0:e8:d3:a4:29:7f:
38:46:fa:e9:9a:71:5e:30:ff:a3:c5:b6:18:2c:7c:17:93:34:
1f:d6:a2:8e:e7:02:8f:ab:b2:77:42:ed:9a:63:48:de:9a:a2:
f9:6b:41:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:41:02 2025 by rpki-client