Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oU8jOuJCWyZ6J12EBaNUpL8ETSQ.roa
File: oU8jOuJCWyZ6J12EBaNUpL8ETSQ.roa (raw, json)
Hash identifier: gRq29X9RknsapXVkX5US3QxMDOIPVXyrwYgBY1VB4fw=
Subject key identifier: A1:4F:23:3A:E2:42:5B:26:7A:27:5D:84:05:A3:54:A4:BF:04:4D:24
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019423D7B5195E6AE832F660B515B4B66582
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oU8jOuJCWyZ6J12EBaNUpL8ETSQ.roa
Signing time: Wed 01 Jan 2025 21:48:46 +0000
ROA not before: Wed 01 Jan 2025 21:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400909
IP address blocks: 37.202.214.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:b5:19:5e:6a:e8:32:f6:60:b5:15:b4:b6:65:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 1 21:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a14f233ae2425b267a275d8405a354a4bf044d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1c:80:fb:76:be:73:ca:ff:be:c4:03:23:f6:
66:1e:b6:72:70:7f:3e:c6:fe:42:93:e9:c9:8f:bb:
fc:ea:65:97:0f:7e:58:47:9e:f1:42:29:51:b2:5b:
c9:1e:6a:4a:e8:90:a1:28:af:d2:48:ae:bd:19:74:
84:bf:f2:2a:cf:23:5a:d9:b7:3d:46:2d:cb:5d:44:
6e:0c:41:9f:22:e0:c8:f8:78:cb:d2:ca:4e:f5:dc:
3d:bd:59:fc:3a:06:70:10:0b:1f:36:df:f5:20:a0:
4b:c7:91:52:7b:74:40:ae:ca:01:e4:ac:1a:bd:88:
2d:95:e4:40:55:f7:ae:a6:b4:da:7c:12:bd:ba:e7:
79:67:2a:32:ea:a7:81:7e:a1:4a:bd:06:31:65:af:
f3:e7:13:90:94:05:be:55:ff:62:aa:ce:5e:90:55:
eb:a3:0d:8a:65:96:65:64:d4:98:93:fa:79:e9:1d:
31:d5:e2:0b:37:f8:5a:d2:ef:b0:af:10:cd:e7:98:
19:d9:9e:f6:cf:c9:be:08:94:12:f2:f2:96:16:fa:
07:7c:06:1a:8a:b8:94:3e:94:61:bb:3a:b3:23:c6:
2f:5d:a5:e4:e0:9f:a8:d1:0b:ae:66:86:9f:ca:a7:
1f:91:11:37:58:20:52:8c:f4:3f:11:07:95:27:d8:
bf:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4F:23:3A:E2:42:5B:26:7A:27:5D:84:05:A3:54:A4:BF:04:4D:24
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oU8jOuJCWyZ6J12EBaNUpL8ETSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.214.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:9d:12:81:fd:cd:ea:f1:7a:21:a7:77:9d:c7:45:33:c5:da:
c6:44:9e:69:50:ff:6f:94:b5:97:f1:31:a8:2a:73:fc:8b:e3:
de:fb:38:2a:ca:88:8f:e4:8b:4e:af:76:a5:be:18:89:a3:ea:
66:35:51:d3:0a:68:e7:38:75:13:e7:02:73:9c:6f:f8:83:e3:
15:86:90:dc:48:cb:f6:b6:e5:55:59:e1:b8:46:c0:17:10:6a:
d2:1a:c3:4e:a7:9f:87:50:5c:3c:c4:6b:91:bb:7e:cd:9e:a0:
f1:13:96:cc:99:a5:85:ad:41:c0:9a:bc:07:55:6a:48:24:19:
32:81:2f:6f:d8:c0:73:23:3a:21:ba:bc:4c:57:47:97:43:d2:
e2:98:b7:9b:2f:b9:02:9f:25:e9:e4:3f:ce:25:6e:f9:fc:e9:
6a:9e:eb:59:c5:18:b9:62:b2:bb:97:a4:3e:de:20:0e:2b:92:
85:08:bf:82:83:60:02:21:6e:33:57:1b:9f:44:1e:12:59:f4:
aa:b0:e6:81:04:1a:92:68:68:58:80:42:98:db:92:cf:be:a1:
b9:11:a5:92:a5:27:8b:93:35:68:04:a3:76:30:7f:93:55:f6:
70:fc:2b:63:c0:ad:ce:81:d0:57:a8:f5:4c:02:ed:8f:da:80:
8f:71:dd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:43 2025 by rpki-client