Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/NOYpdId-JNJf9_sRuwA-DUzQlYs.roa
File: NOYpdId-JNJf9_sRuwA-DUzQlYs.roa (raw, json)
Hash identifier: eZi7sfmH9LgjRlcvnNcPttx33RWbBfBnGD1dU/ZoYek=
Subject key identifier: 34:E6:29:74:87:7E:24:D2:5F:F7:FB:11:BB:00:3E:0D:4C:D0:95:8B
Certificate issuer: /CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
Certificate serial: 019478B48F1C1375D86DD64D121B8E2412B2
Authority key identifier: 24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/NOYpdId-JNJf9_sRuwA-DUzQlYs.roa
Signing time: Sat 18 Jan 2025 09:18:06 +0000
ROA not before: Sat 18 Jan 2025 09:18:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62068
IP address blocks: 37.153.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:78:b4:8f:1c:13:75:d8:6d:d6:4d:12:1b:8e:24:12:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
Validity
Not Before: Jan 18 09:18:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34e62974877e24d25ff7fb11bb003e0d4cd0958b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c0:62:2f:85:5c:fc:c1:75:52:d0:f9:87:a2:
ef:11:56:92:d8:c8:31:21:1c:75:4e:f4:f6:1a:b2:
e2:65:4e:fc:e0:e5:1c:cd:83:c5:ad:af:b6:a5:b7:
5e:70:3b:bf:dd:39:7b:1c:6d:69:5f:0d:6c:c4:d2:
4f:03:4a:43:d5:69:ca:ee:b7:90:0c:9e:6f:70:57:
0b:60:a9:72:be:47:48:c5:52:ae:5a:3e:e6:31:8d:
12:27:3a:49:67:40:cb:69:32:39:44:43:d6:de:59:
ca:4b:75:2c:6d:b4:fd:35:37:da:c1:62:2d:52:a9:
de:5b:7c:c6:f7:67:8c:ea:9e:0e:6d:5f:33:c3:87:
f6:23:b7:8f:35:9b:20:c2:c0:f0:b5:e1:d7:2d:be:
0a:1f:8c:3a:30:c9:0f:79:59:77:6e:22:75:31:83:
89:b4:5a:91:0e:bc:7d:31:12:aa:97:ae:43:d6:cf:
2a:60:7e:02:06:42:be:51:ce:be:9e:1f:ee:08:49:
a5:9e:a7:3d:7f:e6:53:f4:0b:9b:93:ea:de:fc:2d:
62:6f:85:47:77:e9:31:5e:79:9b:68:84:f2:52:68:
cd:f3:e4:b2:f6:fc:02:5f:2a:5d:b4:c7:81:0d:9f:
4a:0e:61:0c:13:0d:9b:f0:c5:34:23:87:5a:f5:67:
44:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E6:29:74:87:7E:24:D2:5F:F7:FB:11:BB:00:3E:0D:4C:D0:95:8B
X509v3 Authority Key Identifier:
keyid:24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/NOYpdId-JNJf9_sRuwA-DUzQlYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.154.0/24
Signature Algorithm: sha256WithRSAEncryption
24:f1:ab:e8:b5:e2:82:f6:86:1e:73:f5:77:1e:50:9d:86:ae:
85:18:61:75:77:9c:0b:f2:81:80:39:b1:97:86:6a:d7:cf:77:
e8:a7:b6:11:a1:00:85:74:41:f5:23:1e:7c:43:fa:f8:7e:57:
bb:00:d5:b7:38:64:45:35:33:1f:c8:16:2c:3d:44:bb:9a:6c:
25:50:7e:f8:47:19:b8:4f:e4:23:4d:10:af:58:c6:0a:4c:71:
86:9c:01:12:56:ee:1e:b0:aa:05:33:af:e4:e0:0b:33:f2:77:
2f:c1:62:96:31:24:f7:ba:db:61:41:75:87:34:b4:b9:09:17:
8f:90:0d:08:f8:fb:05:f8:94:e0:91:60:8f:e6:95:c7:5c:0a:
00:06:44:f1:bf:8f:38:39:e6:55:9a:30:84:e1:af:5b:5f:85:
2f:60:bf:f4:82:74:a0:20:c7:b5:22:df:3a:04:9f:43:fc:a1:
8b:f7:e2:34:95:77:3c:d7:86:24:10:5e:f5:05:42:97:49:53:
7c:8d:b6:79:fb:10:52:93:e1:a3:90:0e:05:30:9b:0d:64:00:
f2:6a:69:d4:f0:13:ab:3e:24:68:7a:ca:9f:72:0f:13:7e:ff:
1e:29:7d:d6:31:09:b0:b0:e3:43:80:b6:cd:10:73:64:0d:18:
d7:7b:b8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:10:09 2025 by rpki-client