Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/moYZTBKvPSG4btrjulSkg5IFyz0.roa
File: moYZTBKvPSG4btrjulSkg5IFyz0.roa (raw, json)
Hash identifier: 6aUdQOfwMXy22wY7pvBt6ynhj6U7FZPNFhYHyrILLNI=
Subject key identifier: 9A:86:19:4C:12:AF:3D:21:B8:6E:DA:E3:BA:54:A4:83:92:05:CB:3D
Certificate issuer: /CN=954a2aee086174b01272fae779ad431eb092aeb7
Certificate serial: 0194258E5F6A106FA8FD815C0CA222F7B2CB
Authority key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/moYZTBKvPSG4btrjulSkg5IFyz0.roa
Signing time: Thu 02 Jan 2025 05:47:55 +0000
ROA not before: Thu 02 Jan 2025 05:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47447
IP address blocks: 37.247.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:5f:6a:10:6f:a8:fd:81:5c:0c:a2:22:f7:b2:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a2aee086174b01272fae779ad431eb092aeb7
Validity
Not Before: Jan 2 05:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a86194c12af3d21b86edae3ba54a4839205cb3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:52:4b:3c:28:2d:f8:70:f3:e6:cf:05:96:bd:
5f:f5:6f:88:49:4b:ce:05:25:c9:08:56:f7:56:64:
7a:a4:ad:8d:9a:2f:d3:76:b1:88:58:58:6f:47:7a:
aa:8a:a5:32:81:d1:6b:11:f1:f0:92:f5:81:6e:22:
46:2b:a9:70:71:d3:2c:c2:80:c0:6a:3d:fa:6e:b4:
67:11:e9:40:44:c1:c4:af:73:cd:17:3e:03:e2:67:
c3:b7:77:dc:7b:8b:06:15:23:c0:0b:a7:a8:05:0a:
27:9d:cc:39:31:f6:96:b5:d8:55:b1:d9:20:0f:5c:
f6:00:70:ee:ce:ec:6a:89:77:81:f9:8f:2c:b9:91:
7b:60:88:2a:bc:58:f8:09:c5:5e:fb:ec:69:55:7f:
28:f3:d0:c8:9c:fd:6b:11:30:4b:66:0c:01:2c:a2:
75:b3:35:5b:4d:44:db:c4:a4:93:5b:b3:7e:bd:e9:
ab:54:4f:d7:c6:19:47:2f:65:41:88:5a:8c:1c:62:
9d:f3:53:50:59:a2:99:5d:9a:9a:cc:1f:eb:af:f2:
ea:f8:58:05:cc:38:49:69:51:cd:69:fd:ae:25:d3:
ea:e5:52:85:31:a3:bf:61:d3:93:6e:ab:c9:65:1a:
ef:36:e0:1d:5c:64:06:f2:a9:06:e3:22:5d:44:22:
c2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:86:19:4C:12:AF:3D:21:B8:6E:DA:E3:BA:54:A4:83:92:05:CB:3D
X509v3 Authority Key Identifier:
keyid:95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/moYZTBKvPSG4btrjulSkg5IFyz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.247.119.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:15:ce:aa:08:40:69:b9:b7:5d:44:0e:ef:83:ac:b8:ca:01:
36:ba:25:9f:a6:19:e1:37:cf:b7:a2:50:99:b0:77:ca:9f:df:
a7:7c:cb:00:f0:c5:ce:b3:67:bc:a6:fc:34:20:b5:e9:7c:0f:
79:d2:3a:0d:32:1d:6d:46:b2:6f:49:b2:e5:73:bf:cb:3a:6e:
db:70:60:e6:93:fd:3c:db:cc:48:b3:fe:69:f2:dd:2f:e5:18:
f1:b4:c3:64:2d:cc:fe:92:df:d7:c5:de:86:8a:07:d0:25:f3:
6e:a0:3f:76:53:d1:6d:46:99:37:98:04:68:09:5e:8a:31:a0:
c4:5c:4a:bb:d1:3f:ec:14:ba:15:53:d6:56:2b:cb:57:20:9b:
9b:e7:f1:9d:5e:0e:44:cb:4c:21:db:2f:3e:c6:c6:de:f7:72:
18:8f:9d:a2:c3:d3:2d:7b:98:e1:06:44:0b:37:b6:cd:ee:d0:
d4:4f:8d:f7:e2:71:3e:66:7d:90:71:37:fe:cd:64:49:0e:cd:
70:6e:c7:cd:71:6a:95:05:b7:0b:3e:16:06:e4:de:86:08:5f:
d6:c7:9b:b3:b7:59:a2:e4:8d:11:59:94:16:52:b2:f5:15:e5:
a7:d7:ee:79:d2:55:a6:ff:e8:b8:54:19:f5:29:c7:56:e7:76:
10:53:c8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:10:51 2025 by rpki-client