Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a4d3f6-1e46-47d3-a5d0-ff89917d40d0/1/GRD4AjERSqq0uQfiJD5V6nacJy8.roa
File: GRD4AjERSqq0uQfiJD5V6nacJy8.roa (raw, json)
Hash identifier: EfvKUwzKGCjk70byj2PdG54ebVix6AIbrfojep9tvJo=
Subject key identifier: 19:10:F8:02:31:11:4A:AA:B4:B9:07:E2:24:3E:55:EA:76:9C:27:2F
Certificate issuer: /CN=147ced88a406124c8c4df166c5740509e6415d2a
Certificate serial: E8FF28
Authority key identifier: 14:7C:ED:88:A4:06:12:4C:8C:4D:F1:66:C5:74:05:09:E6:41:5D:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHztiKQGEkyMTfFmxXQFCeZBXSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a4d3f6-1e46-47d3-a5d0-ff89917d40d0/1/GRD4AjERSqq0uQfiJD5V6nacJy8.roa
Signing time: Sat 01 Jan 2022 12:55:36 +0000
ROA not before: Sat 01 Jan 2022 12:55:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211193
IP address blocks: 37.140.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15269672 (0xe8ff28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=147ced88a406124c8c4df166c5740509e6415d2a
Validity
Not Before: Jan 1 12:55:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1910f80231114aaab4b907e2243e55ea769c272f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fd:e2:3e:12:b7:e2:e3:0e:4a:61:62:0e:fb:
ea:c9:97:31:f0:c0:76:40:75:0e:e1:9f:31:18:d8:
b7:2e:d5:0e:16:89:82:21:c9:8a:04:6d:5c:b5:c3:
f0:60:1f:d4:8d:7b:4f:60:b6:dc:20:0a:dd:6b:77:
f3:32:e5:b7:44:ba:4f:de:7a:68:91:24:e2:ea:68:
20:9a:57:97:72:7c:6c:4e:b9:80:00:fa:24:18:78:
27:b0:33:10:ea:10:57:bb:51:24:b4:4c:8d:19:2c:
ab:90:ee:a9:40:54:f2:c8:ac:de:53:04:b7:82:a8:
b0:24:11:4e:e9:ca:c9:f2:13:51:94:a7:63:70:84:
63:4d:e6:ab:c8:04:d2:22:96:8c:9a:9f:30:59:40:
23:9a:29:b5:4d:fa:06:b1:d2:8c:e8:c8:84:68:94:
a5:11:fc:af:69:3a:3b:04:b5:0e:62:72:bb:10:80:
82:27:8e:38:44:e8:45:7e:e3:50:a7:fa:d2:df:46:
3b:6c:81:5b:6a:34:ea:17:46:ba:d0:ac:2f:03:0b:
2b:96:cc:e6:60:a8:56:3f:18:24:cb:f8:ef:a2:44:
1a:7d:de:85:07:ee:87:dd:d7:09:f9:73:5b:3d:39:
a8:fa:73:68:78:6a:cb:43:d6:2c:10:21:f1:4c:4f:
a8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:10:F8:02:31:11:4A:AA:B4:B9:07:E2:24:3E:55:EA:76:9C:27:2F
X509v3 Authority Key Identifier:
keyid:14:7C:ED:88:A4:06:12:4C:8C:4D:F1:66:C5:74:05:09:E6:41:5D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHztiKQGEkyMTfFmxXQFCeZBXSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a4d3f6-1e46-47d3-a5d0-ff89917d40d0/1/GRD4AjERSqq0uQfiJD5V6nacJy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a4d3f6-1e46-47d3-a5d0-ff89917d40d0/1/FHztiKQGEkyMTfFmxXQFCeZBXSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.247.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:de:53:d8:60:b9:dc:b0:2f:5c:07:67:96:4c:c7:8f:df:85:
ba:35:b5:23:c7:74:ed:7d:d2:67:17:61:95:8e:f7:f9:86:9a:
a4:48:90:2e:1e:b5:d8:43:3e:e2:2d:fc:d0:58:ff:08:e1:16:
81:64:51:6a:fa:bc:89:32:70:75:f9:82:6c:1e:6a:8b:79:cc:
dc:e1:ba:e8:db:4f:e2:23:f2:da:05:28:4b:8b:44:3e:66:cf:
64:fa:61:ea:01:cd:5f:a5:15:82:9c:e6:36:3a:54:28:29:cc:
ec:be:e1:d0:7f:c9:4f:28:40:e4:fb:81:99:74:e9:a9:91:e3:
01:df:06:f6:f4:61:0d:6a:67:41:64:47:38:6c:ea:3b:73:9b:
37:36:3a:13:d8:c5:6f:42:16:3d:3c:06:9a:0f:fd:13:ce:ba:
46:16:f3:be:62:83:a2:77:bf:8d:ed:4a:76:91:16:8b:41:f1:
19:99:62:d0:ed:3d:91:09:aa:f3:46:4a:0b:60:c3:16:6c:25:
66:a0:10:a7:8f:80:ee:de:31:21:e2:72:21:97:42:22:87:53:
02:be:59:89:34:d6:6c:1d:a3:95:4c:3d:2b:56:6b:91:c1:2c:
7a:a7:6a:09:19:8f:17:02:42:0c:77:1a:c4:99:d2:88:0d:9d:
92:96:58:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:30 2025 by rpki-client