Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/eBLjgP6QOLHPEHfrPD5twygIeZU.roa
File: eBLjgP6QOLHPEHfrPD5twygIeZU.roa (raw, json)
Hash identifier: JBGkxKIicuoXximDsbTGL6FHqL8hJgTiNa9S88568yo=
Subject key identifier: 78:12:E3:80:FE:90:38:B1:CF:10:77:EB:3C:3E:6D:C3:28:08:79:95
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 0194228D638CB535B597D212B67D03929000
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/eBLjgP6QOLHPEHfrPD5twygIeZU.roa
Signing time: Wed 01 Jan 2025 15:47:58 +0000
ROA not before: Wed 01 Jan 2025 15:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43333
IP address blocks: 37.252.6.0/23 maxlen: 23
37.252.10.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:63:8c:b5:35:b5:97:d2:12:b6:7d:03:92:90:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Jan 1 15:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7812e380fe9038b1cf1077eb3c3e6dc328087995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:27:06:e5:b7:e7:43:e8:78:ee:b7:14:14:2b:
47:97:17:ae:6d:bc:1b:a7:4b:0e:b9:29:47:99:c6:
0f:f4:d1:77:bd:d7:25:cb:36:bb:67:73:2c:e7:5d:
79:11:ab:34:c4:41:0d:67:12:d6:b3:33:13:3e:cd:
a4:14:b1:80:47:f4:64:17:72:70:b8:aa:91:57:11:
30:7a:94:cd:02:3d:c4:04:bd:5d:40:14:94:d4:4a:
3c:8d:b4:83:1d:74:94:a0:94:ab:5f:28:ca:d7:15:
48:c5:70:83:b2:81:7c:c7:fd:ce:7b:d2:1a:b4:63:
44:aa:3f:aa:55:5f:b9:a5:7d:6d:cd:58:8b:37:7d:
45:66:42:67:bf:53:f2:06:5b:c8:a2:80:c8:7f:27:
56:ee:f1:b7:87:ec:5d:6e:41:70:74:0c:a7:8e:1c:
88:bc:72:5b:db:ff:89:96:80:8d:2c:74:55:b5:99:
71:6f:21:e8:9e:f5:8f:4c:27:41:82:a3:88:33:62:
e9:66:77:b0:3a:35:81:e2:75:14:90:15:72:86:97:
9d:49:35:cf:79:c8:47:e3:cc:ca:06:8f:a5:ed:79:
f8:db:d7:6f:20:06:62:8f:05:be:e2:4f:43:fa:72:
00:c7:9e:6e:3c:5c:28:93:8d:ef:a5:18:79:15:bd:
8a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:12:E3:80:FE:90:38:B1:CF:10:77:EB:3C:3E:6D:C3:28:08:79:95
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/eBLjgP6QOLHPEHfrPD5twygIeZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.6.0/23
37.252.10.0/23
Signature Algorithm: sha256WithRSAEncryption
25:a6:19:32:78:d0:30:80:5d:9f:86:2d:f8:33:1b:dc:e4:29:
6d:19:b6:96:16:0c:b9:a8:b7:10:0e:20:15:0d:d6:1f:64:54:
43:34:46:6c:0d:9b:2d:da:45:e3:45:b9:f8:34:6b:51:27:74:
f2:55:fc:f5:86:ea:c7:36:34:f6:97:f0:14:87:80:b8:10:08:
f2:d8:93:b8:7b:64:f2:88:c6:39:92:44:3b:66:39:00:18:72:
80:8f:e6:57:03:31:5a:d6:90:18:a4:af:9b:94:8d:0e:09:80:
de:44:0e:41:dd:78:61:6d:cb:15:de:4b:99:9b:2e:d3:50:15:
07:8b:97:c1:74:83:1b:8c:63:5e:96:c2:c1:32:83:57:20:27:
00:88:44:f4:43:44:2f:9c:40:67:fb:10:60:71:19:79:51:24:
27:a8:01:d0:4c:d0:23:67:3f:d1:c3:fc:26:4f:85:e4:b3:44:
a8:9c:fe:49:26:85:6a:f3:b1:6f:e3:19:12:91:1c:77:ff:db:
02:31:21:30:e2:1a:24:c6:dd:f3:f8:85:c2:57:a3:45:46:25:
e8:b1:2a:2c:49:5a:02:1a:3c:bb:1b:65:fe:70:51:ca:7a:5d:
de:eb:ee:cb:f8:a8:de:dc:57:9e:f7:a7:17:7c:49:b5:21:9d:
6a:93:f7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:24:37 2025 by rpki-client