Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/785f4c-26a6-4c82-85f8-f6b0eaac4758/1/U1yk2ySBKlpe_h7HsLTd2nj-5a8.roa
File: U1yk2ySBKlpe_h7HsLTd2nj-5a8.roa (raw, json)
Hash identifier: CSuKG58c65sWcIEQR516NyaspB/tvVQ7PVAztk9Qcgc=
Subject key identifier: 53:5C:A4:DB:24:81:2A:5A:5E:FE:1E:C7:B0:B4:DD:DA:78:FE:E5:AF
Certificate issuer: /CN=76d85543445ec6d670cba7cb1ba981f09f588b83
Certificate serial: 0187347ABEF5236D97CE612CD6E70033EBF1
Authority key identifier: 76:D8:55:43:44:5E:C6:D6:70:CB:A7:CB:1B:A9:81:F0:9F:58:8B:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dthVQ0RextZwy6fLG6mB8J9Yi4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/785f4c-26a6-4c82-85f8-f6b0eaac4758/1/U1yk2ySBKlpe_h7HsLTd2nj-5a8.roa
Signing time: Thu 30 Mar 2023 21:44:32 +0000
ROA not before: Thu 30 Mar 2023 21:44:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206995
IP address blocks: 37.140.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:34:7a:be:f5:23:6d:97:ce:61:2c:d6:e7:00:33:eb:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76d85543445ec6d670cba7cb1ba981f09f588b83
Validity
Not Before: Mar 30 21:44:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=535ca4db24812a5a5efe1ec7b0b4ddda78fee5af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:22:60:11:fd:c4:7c:aa:f9:03:0d:73:79:72:
44:65:f2:08:fd:40:b8:03:c2:29:10:02:38:08:2f:
c1:c6:e0:e7:f6:b5:d3:2b:ad:ed:2f:37:0a:be:96:
07:47:5c:f8:db:82:eb:1a:22:ec:6d:eb:4e:75:4a:
20:11:5b:19:30:8d:59:36:48:b2:d4:a3:55:47:f3:
9e:16:50:7a:b6:80:c4:7b:0e:e4:7c:f9:c3:e2:be:
f1:30:5f:0b:79:3c:4a:e2:d4:cd:15:49:b6:1a:b6:
ea:2c:6e:7b:80:d0:9b:d4:b9:eb:8d:d3:c3:77:b4:
2b:93:af:7b:01:37:51:8b:04:77:f1:ee:b2:6f:e3:
26:09:e5:3c:6f:0f:89:9a:dc:44:9d:ce:18:23:ae:
18:34:fc:b7:b4:7b:21:4e:ee:54:32:02:fc:4e:a8:
de:f8:c9:43:6a:d0:65:a9:26:35:6b:c4:68:73:8a:
a9:94:c8:f8:f4:59:bd:0e:2c:b5:69:b5:70:67:3f:
5c:eb:50:72:16:99:06:c8:0a:2d:8c:73:e5:e5:ce:
34:ad:8f:3e:60:11:99:a0:fb:3d:e3:64:31:1c:e6:
47:56:8f:1c:79:47:50:dc:20:0d:d3:97:36:2f:21:
4e:78:73:2a:31:a3:21:63:57:47:84:27:29:98:b7:
aa:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5C:A4:DB:24:81:2A:5A:5E:FE:1E:C7:B0:B4:DD:DA:78:FE:E5:AF
X509v3 Authority Key Identifier:
keyid:76:D8:55:43:44:5E:C6:D6:70:CB:A7:CB:1B:A9:81:F0:9F:58:8B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dthVQ0RextZwy6fLG6mB8J9Yi4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/785f4c-26a6-4c82-85f8-f6b0eaac4758/1/U1yk2ySBKlpe_h7HsLTd2nj-5a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/785f4c-26a6-4c82-85f8-f6b0eaac4758/1/dthVQ0RextZwy6fLG6mB8J9Yi4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.242.0/24
Signature Algorithm: sha256WithRSAEncryption
03:01:07:63:5b:19:c2:f1:05:e9:97:3d:43:1d:cd:59:14:aa:
c9:0a:74:f6:19:59:e4:10:08:84:0d:1f:cf:cb:82:0e:d6:25:
d3:59:3c:51:b7:b8:ae:c5:ce:32:93:0d:41:f2:dd:71:dc:43:
25:ed:0c:4d:6b:7d:0f:fa:8a:52:b9:21:c3:83:77:80:ac:4c:
a3:8d:17:79:8d:3b:cf:42:6c:16:3f:74:21:7d:3a:89:9a:5c:
d9:90:83:78:3f:4a:88:d6:c0:d8:eb:43:d6:97:fd:58:94:db:
77:14:70:62:78:8a:9b:4f:d7:ab:d3:0c:9f:d8:92:66:69:24:
12:44:e3:f5:38:18:36:ae:d1:9c:25:8e:83:e5:fd:f3:e5:94:
b1:19:b2:1d:91:f5:a2:78:45:52:55:da:bc:e2:f1:ba:27:b2:
3c:c2:40:c5:b0:cc:48:7b:d4:2f:65:a2:06:e3:49:d8:5a:9d:
00:06:c9:4d:2f:5d:cd:b9:1b:9d:ac:fa:c6:2d:33:6e:1e:e4:
ef:9b:8f:df:2d:5f:21:3e:7c:28:b3:8e:18:f3:a2:7b:ad:8d:
a4:ff:35:56:92:08:7c:cf:b3:72:75:8c:b3:3d:b5:1f:30:29:
0c:dc:84:85:dc:4b:db:98:41:a7:95:2d:a4:40:41:b6:8a:6c:
cf:51:32:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:20:10 2025 by rpki-client