Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/apVhYj18Bs_r1Q931zVqcqi5yvI.roa
File: apVhYj18Bs_r1Q931zVqcqi5yvI.roa (raw, json)
Hash identifier: /gXE2P6qUcVxgRclWTrINQ6lVlcjG0089HciFUVuRsI=
Subject key identifier: 6A:95:61:62:3D:7C:06:CF:EB:D5:0F:77:D7:35:6A:72:A8:B9:CA:F2
Certificate issuer: /CN=ce56aa0e21558c92a48654244e05961a1fcfa0f2
Certificate serial: 019473BA247484CDFA6AC1917EB164915646
Authority key identifier: CE:56:AA:0E:21:55:8C:92:A4:86:54:24:4E:05:96:1A:1F:CF:A0:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlaqDiFVjJKkhlQkTgWWGh_PoPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/apVhYj18Bs_r1Q931zVqcqi5yvI.roa
Signing time: Fri 17 Jan 2025 10:06:06 +0000
ROA not before: Fri 17 Jan 2025 10:06:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1103
IP address blocks: 137.224.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:ba:24:74:84:cd:fa:6a:c1:91:7e:b1:64:91:56:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce56aa0e21558c92a48654244e05961a1fcfa0f2
Validity
Not Before: Jan 17 10:06:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a9561623d7c06cfebd50f77d7356a72a8b9caf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4d:d5:78:50:a5:dc:f6:3e:15:95:1c:4e:82:
f9:ef:b6:01:6b:1e:b6:3d:e1:03:00:74:7d:50:fb:
16:b9:32:0d:b9:4a:92:9c:f7:31:0e:a3:0f:fb:10:
7d:e8:13:00:80:bc:f9:fb:ed:3e:68:ee:eb:7c:68:
eb:d0:f9:1e:1e:bb:33:f2:57:7a:23:eb:01:16:f9:
75:5d:d9:d5:93:9f:4a:58:29:3d:1d:a5:a6:59:09:
31:e6:e7:56:d3:74:da:bd:e1:70:77:46:c4:f2:58:
4d:4b:6b:24:5a:3d:84:b8:07:04:af:8b:44:1a:c0:
68:fc:70:cf:1e:d7:94:22:37:ef:52:7c:5c:86:20:
81:63:fe:4a:a6:65:a8:06:16:d6:41:6b:80:75:a9:
71:7a:58:cc:51:d6:7a:d6:85:49:09:22:2e:d6:c1:
b9:bc:65:21:01:ab:a8:5b:64:b8:e8:24:c0:f1:c5:
6f:14:83:7b:c9:18:8a:47:7c:0a:26:12:78:1e:c3:
b7:2a:9c:2f:05:d3:1b:e7:8d:86:48:db:f9:26:f0:
6d:95:21:43:84:35:0e:9e:ad:6a:6c:02:5d:90:80:
5c:e8:34:0a:4d:7b:ab:78:d5:bc:a0:50:1c:37:72:
4d:72:6c:9c:ce:96:7d:74:f9:cf:e2:3b:64:e5:72:
c6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:95:61:62:3D:7C:06:CF:EB:D5:0F:77:D7:35:6A:72:A8:B9:CA:F2
X509v3 Authority Key Identifier:
keyid:CE:56:AA:0E:21:55:8C:92:A4:86:54:24:4E:05:96:1A:1F:CF:A0:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlaqDiFVjJKkhlQkTgWWGh_PoPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/apVhYj18Bs_r1Q931zVqcqi5yvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.224.0.0/16
Signature Algorithm: sha256WithRSAEncryption
56:64:f3:96:30:ef:8b:21:b2:2a:c8:52:d0:3f:cf:19:99:e0:
b3:af:01:95:d5:b1:37:86:f5:f0:9f:5b:56:3a:c7:b0:05:26:
34:c4:aa:cf:bd:f1:ad:1b:8f:5b:35:12:55:ba:42:aa:49:f1:
2a:f9:1a:1c:b0:a5:86:80:74:73:f0:c6:ae:3e:f7:9d:05:b4:
57:1a:fc:78:db:af:73:51:22:79:2b:3e:f8:7e:05:2c:90:09:
44:bc:6d:6c:15:75:dc:fd:46:0c:ec:26:2a:c4:d5:2e:58:74:
05:ff:d1:24:75:0f:83:34:4a:03:47:5f:17:4e:0d:be:9c:11:
3e:e8:1e:6a:99:b3:c8:ee:94:47:b8:c6:3a:3e:ee:44:0c:42:
fa:c6:cb:4b:92:d6:b8:50:ec:8e:10:64:16:59:4e:ce:7a:b3:
09:90:3b:d8:6d:0f:4b:f2:3c:18:18:1a:58:e8:5a:ae:23:20:
d3:71:de:a9:d8:1f:22:be:a9:bb:ed:a6:09:df:c4:e0:23:65:
e9:9b:a9:c2:28:71:77:34:7e:11:49:36:47:f7:e1:33:bf:4b:
31:64:a0:3f:75:97:a5:c7:1a:67:94:f0:35:a4:41:57:43:a9:
5f:df:e0:1d:90:08:69:93:a2:ee:de:4f:fe:57:f3:6f:7e:a1:
f0:7e:34:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:00:54 2025 by rpki-client