Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e535b9-a25c-4d7b-b916-574b018bc895/1/S9fqf-awtQhiRIq3qXqJICPR2OQ.roa
File: S9fqf-awtQhiRIq3qXqJICPR2OQ.roa (raw, json)
Hash identifier: xvlhQdXWA+5Y0AroXusP6CRx5QjftQtMosjc3ZeW88I=
Subject key identifier: 4B:D7:EA:7F:E6:B0:B5:08:62:44:8A:B7:A9:7A:89:20:23:D1:D8:E4
Certificate issuer: /CN=4d850c23a73f0c6dd0954fb982518b7e323e817d
Certificate serial: 018570429F5E962BADE8ECF2BD62CDFEEDA7
Authority key identifier: 4D:85:0C:23:A7:3F:0C:6D:D0:95:4F:B9:82:51:8B:7E:32:3E:81:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYUMI6c_DG3QlU-5glGLfjI-gX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e535b9-a25c-4d7b-b916-574b018bc895/1/S9fqf-awtQhiRIq3qXqJICPR2OQ.roa
Signing time: Mon 02 Jan 2023 02:14:52 +0000
ROA not before: Mon 02 Jan 2023 02:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198705
IP address blocks: 37.72.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:9f:5e:96:2b:ad:e8:ec:f2:bd:62:cd:fe:ed:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d850c23a73f0c6dd0954fb982518b7e323e817d
Validity
Not Before: Jan 2 02:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bd7ea7fe6b0b50862448ab7a97a892023d1d8e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dc:b6:4e:d5:07:55:b2:5d:7c:7c:ad:e3:c1:
c3:c6:db:9f:5d:76:ad:68:09:6c:47:d6:3e:5e:5e:
d4:1b:2a:22:94:0d:02:ff:06:7f:01:fd:82:c8:ed:
2b:73:35:87:6f:11:0f:e0:77:7f:22:8e:5e:02:3f:
7b:db:30:81:81:92:12:1e:f3:66:2d:41:82:c8:fe:
9e:50:a9:c0:7f:d6:5f:bc:42:05:ee:c6:09:06:f5:
3a:5e:9b:3c:a4:45:cc:5f:2d:20:5f:cc:db:d2:e3:
54:22:a4:4a:17:e2:5b:ea:10:76:16:5a:12:05:22:
72:b5:fd:c1:52:62:7c:68:8c:79:04:a5:ed:a1:7c:
0f:c9:79:81:c7:32:e4:b4:e2:da:cb:a6:82:40:71:
67:51:81:cd:7a:4f:ee:e4:8d:7e:5b:73:c0:b8:c5:
d1:1b:7a:1a:e2:06:4c:51:f7:35:61:42:7a:12:65:
ff:35:21:dd:ed:a1:c0:a3:06:f7:39:44:f6:84:aa:
7f:65:42:01:c3:86:4e:05:7d:2b:dc:69:60:3d:d9:
52:09:9f:57:2a:5d:1f:f7:60:3d:26:1f:02:c4:53:
a3:0c:a3:8d:53:9a:58:02:36:96:e1:77:bf:36:1d:
2e:d5:e0:25:57:c5:c1:47:c0:7c:af:1c:80:4c:40:
a3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D7:EA:7F:E6:B0:B5:08:62:44:8A:B7:A9:7A:89:20:23:D1:D8:E4
X509v3 Authority Key Identifier:
keyid:4D:85:0C:23:A7:3F:0C:6D:D0:95:4F:B9:82:51:8B:7E:32:3E:81:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYUMI6c_DG3QlU-5glGLfjI-gX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e535b9-a25c-4d7b-b916-574b018bc895/1/S9fqf-awtQhiRIq3qXqJICPR2OQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e535b9-a25c-4d7b-b916-574b018bc895/1/TYUMI6c_DG3QlU-5glGLfjI-gX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.143.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:e1:98:df:44:80:64:f2:29:95:02:1f:81:96:8b:d3:3c:dd:
66:33:6f:fc:e8:b5:0d:09:0a:ec:63:33:79:98:f8:1a:55:ee:
d0:1f:f7:cf:07:a9:b5:6c:44:d3:70:9f:24:da:0b:e5:b8:58:
f2:1d:37:0f:71:89:5c:ef:87:fa:29:66:da:d6:57:75:ab:2b:
1d:d8:3b:2d:1d:1e:08:b9:45:ae:ce:aa:c6:9d:b8:d3:fe:16:
d8:4f:1a:84:92:1b:4c:9a:2e:e4:68:0c:8b:8a:8a:bc:65:4c:
41:41:96:ee:52:75:22:b8:3e:9c:c1:d4:25:0c:3d:67:57:5e:
fd:85:13:fa:2a:21:d2:14:a7:8a:78:a9:86:83:84:25:b8:0c:
93:1d:e0:d7:1f:ee:90:31:dc:2c:b9:1c:8c:88:2d:92:7d:23:
85:19:5d:1a:25:d8:ff:80:f7:6e:b9:29:40:c6:25:29:55:05:
01:00:7e:2b:55:8f:cb:e4:08:e0:5d:6c:57:3e:89:04:28:72:
b6:b7:a6:8e:64:b6:de:2a:17:af:70:82:e9:20:b2:1e:4f:12:
55:3b:fe:05:f2:5a:cc:87:8e:e5:e7:68:77:cd:f0:93:82:1a:
ce:75:4b:b5:d9:a0:84:1b:a5:b4:49:00:21:68:1f:4b:31:38:
60:ef:47:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:12 2025 by rpki-client