Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/DH9htlq0hiwldp4q07DNTkVZOf8.roa
File: DH9htlq0hiwldp4q07DNTkVZOf8.roa (raw, json)
Hash identifier: J0KU22uieTNYBq4unRpzKgHyqTQbyJRKS4kqQcbzVVo=
Subject key identifier: 0C:7F:61:B6:5A:B4:86:2C:25:76:9E:2A:D3:B0:CD:4E:45:59:39:FF
Certificate issuer: /CN=37915673b28bdfadb2c2019ac68d0464fd21b71a
Certificate serial: 019425FCB00DF74501C39FFB99F5AA1867FF
Authority key identifier: 37:91:56:73:B2:8B:DF:AD:B2:C2:01:9A:C6:8D:04:64:FD:21:B7:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/DH9htlq0hiwldp4q07DNTkVZOf8.roa
Signing time: Thu 02 Jan 2025 07:48:24 +0000
ROA not before: Thu 02 Jan 2025 07:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 702
IP address blocks: 145.32.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:b0:0d:f7:45:01:c3:9f:fb:99:f5:aa:18:67:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37915673b28bdfadb2c2019ac68d0464fd21b71a
Validity
Not Before: Jan 2 07:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c7f61b65ab4862c25769e2ad3b0cd4e455939ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:32:2f:e8:7f:e0:dd:3d:6f:ff:cb:00:3b:ee:
fc:a7:ff:92:88:87:a6:a6:13:82:a1:16:f7:5e:fd:
a9:f9:0a:4f:ab:fd:15:c1:f7:61:d6:66:b8:d9:bd:
c8:f5:f4:4a:42:e4:4d:11:24:f9:f2:6d:12:31:1d:
54:f3:7b:8b:c9:0d:f1:2a:95:6e:de:a2:9d:1a:62:
de:4b:04:64:a8:af:9d:41:28:ab:57:1b:61:03:83:
f1:71:e5:fa:c4:9c:df:bc:0b:e2:a0:fe:f1:7c:96:
7c:a2:b5:e7:3c:d3:53:d1:a6:a1:b5:dd:cf:2b:f8:
3e:ca:bb:d7:46:f2:c3:ab:b6:ea:59:58:95:bb:de:
ea:ab:c2:a9:cf:ad:25:ba:28:d9:36:ac:d3:03:86:
95:ef:d6:99:f9:a4:d4:fb:ea:6b:38:43:50:03:5f:
68:03:57:a2:4f:6e:ee:7d:3a:d7:93:ad:b5:bb:41:
50:15:b6:35:70:82:3c:69:1e:38:3a:28:76:49:45:
21:8a:bc:be:8e:2b:d3:25:e2:74:15:1d:5c:09:1f:
23:cd:c6:5a:75:18:97:f9:9b:00:36:8a:7f:a7:ed:
78:02:bf:48:23:58:0c:55:5c:2e:23:35:dc:d3:3e:
86:23:4a:90:24:11:c8:db:43:0b:8b:16:ac:57:c7:
fa:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7F:61:B6:5A:B4:86:2C:25:76:9E:2A:D3:B0:CD:4E:45:59:39:FF
X509v3 Authority Key Identifier:
keyid:37:91:56:73:B2:8B:DF:AD:B2:C2:01:9A:C6:8D:04:64:FD:21:B7:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/DH9htlq0hiwldp4q07DNTkVZOf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.32.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1b:2b:2f:87:a9:a1:2e:b3:7f:ec:4f:9e:cd:31:10:12:b7:8d:
b5:4d:a5:88:d4:68:39:a0:d7:4b:a5:a9:e4:c0:5b:48:61:38:
36:41:6d:90:b4:34:b9:28:33:ab:1a:11:28:a2:88:a1:85:92:
60:76:7d:67:e2:89:74:4c:bf:25:cf:67:2c:fc:e5:ba:84:c9:
a2:71:3e:63:96:78:c4:c6:08:9f:1f:90:2b:fc:27:c3:2e:7b:
20:1d:70:cf:fe:16:7a:fd:83:dd:08:7a:14:2e:48:3d:39:4f:
14:4a:ac:20:f3:5e:c0:f8:46:b4:02:29:cd:f9:20:bd:6d:a3:
bb:80:34:4d:48:55:07:a2:b2:5b:b0:9c:5c:b2:a9:a5:eb:f5:
d2:10:2e:0f:60:30:b5:51:13:2b:81:11:a9:37:b0:19:d8:ca:
6d:04:67:0e:7a:ff:31:14:6e:0f:60:eb:8d:8f:18:1e:93:89:
58:d0:46:b5:7b:75:88:48:e0:45:89:f6:0b:55:e2:6e:2c:a0:
0e:9e:90:38:b1:5f:b6:2d:a4:25:23:1f:ed:88:fd:92:44:bc:
af:81:fa:53:61:13:36:f2:f4:ef:0c:45:03:1d:45:2a:5d:90:
10:45:45:e7:6e:d8:e7:91:0b:68:cb:45:ac:21:05:e6:90:18:
12:e6:d6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:01:01 2025 by rpki-client