Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/136R0tURrHxVcUrSKIGcdd7UErI.roa
File: 136R0tURrHxVcUrSKIGcdd7UErI.roa (raw, json)
Hash identifier: 9NDJI5ecDEnPdNBvfwqB3DjOfPCAsRCNBtujpxwnGBk=
Subject key identifier: D7:7E:91:D2:D5:11:AC:7C:55:71:4A:D2:28:81:9C:75:DE:D4:12:B2
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 0A3978CA
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/136R0tURrHxVcUrSKIGcdd7UErI.roa
Signing time: Sat 01 Jan 2022 11:58:11 +0000
ROA not before: Sat 01 Jan 2022 11:58:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62255
IP address blocks: 37.114.96.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171538634 (0xa3978ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: Jan 1 11:58:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d77e91d2d511ac7c55714ad228819c75ded412b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a0:40:1a:a0:8e:dc:81:4a:1c:b4:64:cc:68:
1c:f5:f7:65:28:99:1d:9d:d5:8f:81:b7:6c:83:21:
c8:cb:c4:6e:77:79:b6:6a:fd:9f:99:bc:27:1b:a0:
af:02:38:33:bf:47:19:dc:0a:a2:7a:39:4c:bc:19:
6d:15:4b:9a:66:10:f3:de:ab:53:85:90:ac:a9:aa:
52:d3:0a:4a:fc:eb:44:8d:bb:83:de:91:86:cf:5c:
0b:3b:fa:86:7c:27:f8:c3:55:85:57:46:1e:be:21:
bb:32:02:4f:ca:97:6f:6a:ec:44:83:df:7d:6b:be:
6f:cc:0c:0b:39:8c:9d:0e:d7:a9:ec:b9:96:3e:dd:
0c:28:84:70:90:44:48:83:88:bf:d8:80:bb:61:9e:
23:ac:ca:a5:13:66:e1:92:73:0f:46:70:35:a8:38:
a4:87:9d:73:89:50:9e:e9:02:04:28:a9:40:7a:25:
ef:51:7b:b4:ca:c1:6f:4f:4e:76:76:2f:3f:79:18:
4e:00:b9:bf:91:f1:ef:17:43:f1:84:a9:47:d7:7f:
40:57:e6:7e:d5:43:c1:f9:07:01:e2:fe:c8:59:72:
32:d2:6c:69:ec:7e:d2:4d:d2:71:0a:7c:87:5d:9f:
81:ff:9c:1a:f6:6b:ee:0b:4f:5c:00:30:17:23:b9:
de:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7E:91:D2:D5:11:AC:7C:55:71:4A:D2:28:81:9C:75:DE:D4:12:B2
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/136R0tURrHxVcUrSKIGcdd7UErI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.96.0/19
Signature Algorithm: sha256WithRSAEncryption
3d:4f:fe:4e:7c:96:10:f3:7d:5f:cc:93:a7:f2:4f:68:3b:e0:
a8:9e:62:83:3e:f9:83:78:39:b4:49:f3:44:59:61:07:c6:57:
c9:72:08:83:c5:56:5d:a2:a6:e0:36:f1:9c:7a:f9:fe:31:07:
ca:14:b4:df:18:b9:a7:c1:f0:85:83:a8:83:75:05:5b:db:68:
8c:34:40:46:7c:2b:cd:38:17:89:b8:3c:99:97:ff:04:72:19:
21:93:11:b0:22:45:51:0a:41:28:51:f9:46:0c:51:50:ef:68:
7d:f4:25:ec:3b:7b:21:ef:b5:f9:63:b1:3d:82:47:d8:a5:56:
6b:c5:a3:e1:77:e4:47:a1:1b:6b:96:53:47:56:28:db:2e:d2:
1b:fc:aa:68:1e:cb:17:09:c1:d8:31:1b:f1:ed:e6:08:96:ad:
ad:0a:7f:f4:d9:8e:48:ab:cf:0c:93:36:73:d0:0f:a7:7a:04:
05:76:a0:f8:80:d3:a9:3c:05:1a:ef:d9:21:e5:fc:65:55:59:
02:c0:ea:f5:45:6a:9e:95:2f:8f:4a:6b:7e:99:5a:cd:4b:f7:
94:56:7a:54:d3:87:bd:bf:65:4a:1b:37:35:ea:a1:87:f5:f6:
f6:18:c0:a8:81:d9:d3:bd:46:6d:33:50:6e:fa:5d:80:6a:11:
bb:98:67:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:27:11 2025 by rpki-client