Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/bo0zIYgOZRQFcnHnX7yxavbqVsA.roa
File: bo0zIYgOZRQFcnHnX7yxavbqVsA.roa (raw, json)
Hash identifier: 5LtCSbDtBDhbebcOPoP1mOQokJUX1U+Y+8MoQ/UoU5M=
Subject key identifier: 6E:8D:33:21:88:0E:65:14:05:72:71:E7:5F:BC:B1:6A:F6:EA:56:C0
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 0182FF952C8DFC92FF24E927EA042B6BF72E
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/bo0zIYgOZRQFcnHnX7yxavbqVsA.roa
Signing time: Fri 02 Sep 2022 19:02:22 +0000
ROA not before: Fri 02 Sep 2022 19:02:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 37.251.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ff:95:2c:8d:fc:92:ff:24:e9:27:ea:04:2b:6b:f7:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Sep 2 19:02:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e8d3321880e6514057271e75fbcb16af6ea56c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:26:f3:05:c1:c5:75:16:47:e7:0c:0d:43:30:
01:3c:b3:7b:1f:a8:98:3c:e6:17:0f:2f:45:56:8d:
cb:17:61:a9:27:ae:4d:63:ac:37:01:46:11:3e:ab:
11:6a:63:fd:bf:c6:a3:19:22:2f:7a:d8:ee:21:a0:
6a:b0:0f:13:00:e4:4b:fc:e5:d3:0f:af:54:53:5d:
e9:6c:03:14:de:cf:5d:e3:f0:23:62:c7:22:2b:bf:
60:54:88:ef:89:f2:15:3f:0b:89:91:6f:6b:aa:26:
4a:b9:5b:78:d6:8d:4a:bb:b9:ef:f8:ef:28:bd:6d:
7c:b0:c3:55:3c:4e:f4:08:22:da:5f:cb:81:d1:e0:
ea:c5:6d:df:b4:01:33:38:f0:48:20:5a:6a:78:cd:
c6:0f:ff:e4:8f:74:66:86:0e:da:a9:8a:fc:0f:79:
92:bb:65:a9:c9:08:49:65:c7:28:bb:3a:dc:28:aa:
28:e5:13:ba:b3:83:9e:82:6c:8f:ba:d0:4c:b5:1f:
7e:d4:f2:b9:c1:64:e6:44:5b:b5:a2:f5:de:02:ac:
c0:34:18:8c:82:0f:b2:15:37:bc:95:6e:22:e3:f9:
f0:61:db:6b:d5:7e:09:6d:08:e1:de:01:92:16:fe:
79:72:a7:85:e0:34:75:39:8f:f7:9e:a2:77:f0:31:
76:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8D:33:21:88:0E:65:14:05:72:71:E7:5F:BC:B1:6A:F6:EA:56:C0
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/bo0zIYgOZRQFcnHnX7yxavbqVsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.251.176.0/20
Signature Algorithm: sha256WithRSAEncryption
48:5f:e6:7c:c2:ae:f8:69:8d:c3:dd:cc:55:43:c0:a9:47:8c:
3c:81:6b:90:98:3b:93:6b:7a:a0:35:87:d7:b9:59:90:25:6a:
79:33:7b:a8:d7:2b:6f:f3:9b:53:d4:53:42:96:b8:f2:08:7f:
c3:6e:12:3b:64:fd:f7:cc:8b:1d:af:c1:8a:f8:73:f0:75:7c:
e2:7e:03:36:a9:fe:bc:9c:47:23:09:be:f7:8b:94:58:e4:75:
7c:9c:b6:e0:a8:e0:f8:6d:aa:83:cd:33:32:19:9e:89:3a:a8:
8c:e3:c9:88:f4:6b:42:53:23:6f:53:2f:45:a3:48:22:01:32:
f8:f0:be:e3:63:50:68:2d:8e:49:30:fc:0d:ea:43:d6:6d:68:
5a:c7:93:3b:eb:b5:28:ce:9b:e7:44:45:dd:ad:75:a2:b0:17:
76:87:a8:97:ff:46:ff:1e:eb:39:ef:de:4b:48:ce:7b:24:6e:
34:f4:9b:37:b2:4f:88:1c:c7:35:e2:bd:f0:3b:fd:21:50:bb:
52:6d:a0:c1:0b:8b:99:0a:e6:ab:20:b5:61:b5:9b:6a:ee:e2:
7f:5d:61:04:e8:09:d9:3a:90:2d:38:cf:3d:a5:7d:40:7c:55:
85:53:06:30:a8:5b:3f:c4:f8:32:b6:e6:bb:ef:64:22:76:30:
37:9b:17:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 06:57:10 2025 by rpki-client