Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/EBmgons8smLjSy_pC81B7nZjG3w.roa
File: EBmgons8smLjSy_pC81B7nZjG3w.roa (raw, json)
Hash identifier: zpgv0UbTTPAH0iIRbzl1hsN1Wy449Ae/Kgm8XxlzuA4=
Subject key identifier: 10:19:A0:A2:7B:3C:B2:62:E3:4B:2F:E9:0B:CD:41:EE:76:63:1B:7C
Certificate issuer: /CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
Certificate serial: 019427487356C1E3D205F6488C98D789D52C
Authority key identifier: E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/EBmgons8smLjSy_pC81B7nZjG3w.roa
Signing time: Thu 02 Jan 2025 13:50:47 +0000
ROA not before: Thu 02 Jan 2025 13:50:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57811
IP address blocks: 37.247.235.0/24 maxlen: 24
37.247.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:73:56:c1:e3:d2:05:f6:48:8c:98:d7:89:d5:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
Validity
Not Before: Jan 2 13:50:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1019a0a27b3cb262e34b2fe90bcd41ee76631b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cb:41:19:f8:44:32:ce:74:05:98:6c:30:cb:
23:da:35:ad:a4:34:ad:6e:f3:08:c1:9f:39:99:6f:
99:06:d8:04:0a:8c:39:5b:95:56:26:39:80:52:21:
cf:cd:98:4e:4e:c9:38:28:f2:1c:15:b3:13:10:5f:
49:2e:75:ba:cb:d7:4a:df:41:da:12:0f:bb:85:db:
1a:9d:f6:ee:86:db:93:69:99:f5:65:93:92:00:8a:
3c:a2:69:e6:99:62:5b:98:70:f7:c2:fa:07:ad:3d:
7c:67:43:a3:60:69:8e:04:4d:20:cc:08:40:b9:21:
e5:f7:c1:54:26:18:19:50:6b:2f:d7:98:22:53:72:
52:c7:d5:7b:72:b6:40:00:02:1f:7e:68:c8:db:fc:
ab:31:28:af:4d:ba:b1:f6:3f:4a:a7:49:61:59:dd:
bb:56:3c:82:8b:a0:7d:8b:7d:d6:c9:04:ff:84:5b:
04:40:ba:81:46:be:01:af:7a:ea:7d:e2:e2:44:54:
f7:f6:3c:7a:c6:b4:3e:f2:20:30:51:77:bd:e3:8a:
ac:e4:a5:1a:a6:dc:83:43:9b:99:a1:82:dc:8b:ea:
6b:f1:71:ed:a9:ba:51:a5:18:a0:a0:1c:83:09:d9:
00:bd:35:25:1f:c3:32:35:4b:bd:72:4d:60:d7:21:
b1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:19:A0:A2:7B:3C:B2:62:E3:4B:2F:E9:0B:CD:41:EE:76:63:1B:7C
X509v3 Authority Key Identifier:
keyid:E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/EBmgons8smLjSy_pC81B7nZjG3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.247.235.0-37.247.236.255
Signature Algorithm: sha256WithRSAEncryption
36:e4:72:5d:a3:70:43:f0:59:f2:de:9b:c1:fb:67:33:18:03:
d2:87:13:fc:fc:56:e0:b1:90:45:6a:bb:50:11:80:e2:c3:d8:
8f:2c:fc:74:cc:6e:aa:3f:fd:fd:86:06:3b:41:eb:c3:81:1b:
0b:ca:4d:99:fd:56:8f:56:bc:04:0e:e1:1f:45:15:70:f4:ac:
82:4d:fe:0f:c7:36:52:cd:2d:79:a9:a5:79:5c:46:c9:2f:15:
ff:f3:05:01:60:b6:f8:1b:b6:06:ea:b8:ef:27:9f:89:82:79:
27:1a:79:c2:eb:82:d9:8d:ba:89:8d:e3:09:28:fe:28:26:39:
67:31:fd:c7:94:ea:68:ca:5f:89:d6:7f:90:5a:99:54:84:a2:
9e:be:d5:50:5f:ad:c8:64:f9:c9:3c:25:c5:e9:67:a3:ca:04:
fe:72:48:5b:9b:f2:6a:53:08:cb:d2:9d:b2:2d:fa:15:56:56:
f0:7f:1f:b0:29:2e:81:51:a8:ed:8b:54:90:42:f7:33:88:1c:
3d:d8:87:d1:1f:c1:39:6e:a0:7b:60:c7:38:7a:ac:72:40:72:
f1:c2:49:a6:e2:61:b5:c4:5b:38:26:0f:00:ad:6f:e4:1b:3f:
69:46:30:37:2c:cb:b7:dc:f8:3f:25:2c:62:df:65:be:9d:f9:
f8:ac:19:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:05 2025 by rpki-client