Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e535b9-a25c-4d7b-b916-574b018bc895/1/ZCvXizmyJxWqNcZAJ6EQU9AopgU.roa
File: ZCvXizmyJxWqNcZAJ6EQU9AopgU.roa (raw, json)
Hash identifier: w9Of/BrlMYV3ljyBrUrGxp0sBCZ9MjkyL+VfMGDrUe8=
Subject key identifier: 64:2B:D7:8B:39:B2:27:15:AA:35:C6:40:27:A1:10:53:D0:28:A6:05
Certificate issuer: /CN=4d850c23a73f0c6dd0954fb982518b7e323e817d
Certificate serial: 0183AE5D4DE4F8E3F54FDBEF230E806FFCCA
Authority key identifier: 4D:85:0C:23:A7:3F:0C:6D:D0:95:4F:B9:82:51:8B:7E:32:3E:81:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYUMI6c_DG3QlU-5glGLfjI-gX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e535b9-a25c-4d7b-b916-574b018bc895/1/ZCvXizmyJxWqNcZAJ6EQU9AopgU.roa
Signing time: Thu 06 Oct 2022 17:34:53 +0000
ROA not before: Thu 06 Oct 2022 17:34:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198705
IP address blocks: 37.72.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ae:5d:4d:e4:f8:e3:f5:4f:db:ef:23:0e:80:6f:fc:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d850c23a73f0c6dd0954fb982518b7e323e817d
Validity
Not Before: Oct 6 17:34:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=642bd78b39b22715aa35c64027a11053d028a605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:95:8f:ca:aa:35:66:a0:e3:d5:d2:82:b4:34:
59:a5:b4:50:e1:7a:e8:e7:34:40:c9:dc:20:14:e9:
cf:a6:ea:d9:be:aa:c1:79:f7:3b:74:5c:21:d1:6e:
17:3c:81:12:50:cf:a2:27:7e:21:e9:97:28:11:92:
3c:fa:f8:b9:4a:fd:e7:91:4c:cc:7c:52:86:a5:d2:
c1:0a:ea:c5:5d:13:21:3f:e7:72:db:72:53:88:34:
32:6e:dc:61:ce:75:9b:a1:10:bc:38:7c:5b:ba:5b:
7a:37:02:03:1b:b5:3e:60:90:93:05:7c:28:77:59:
14:75:84:26:ba:6a:b7:62:54:ad:a7:57:49:4d:48:
3b:2c:b8:f4:db:1e:1a:5a:20:99:e8:55:26:68:2e:
3e:11:3b:1b:d1:f7:b5:e3:33:47:52:75:85:9c:d4:
5c:fe:2e:66:77:29:e0:98:7b:4b:cd:1b:d1:67:22:
89:30:54:c6:8c:86:4b:a9:48:83:f4:a8:80:90:b7:
88:d8:40:e2:2c:2d:45:4c:55:38:9b:2b:c5:67:15:
c6:4a:5c:95:ad:9f:39:9b:8b:82:64:2c:85:b2:5c:
6b:eb:49:15:f9:7b:e7:e0:24:fb:75:38:11:5b:d2:
f4:5c:b3:64:49:86:13:75:65:29:17:71:52:94:37:
b4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2B:D7:8B:39:B2:27:15:AA:35:C6:40:27:A1:10:53:D0:28:A6:05
X509v3 Authority Key Identifier:
keyid:4D:85:0C:23:A7:3F:0C:6D:D0:95:4F:B9:82:51:8B:7E:32:3E:81:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYUMI6c_DG3QlU-5glGLfjI-gX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e535b9-a25c-4d7b-b916-574b018bc895/1/ZCvXizmyJxWqNcZAJ6EQU9AopgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e535b9-a25c-4d7b-b916-574b018bc895/1/TYUMI6c_DG3QlU-5glGLfjI-gX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.143.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:c5:f1:ef:3d:37:59:50:b1:dd:4b:82:59:88:bc:35:15:f5:
67:3f:2f:42:70:06:77:84:76:9f:50:e4:18:67:a6:7e:01:d4:
4f:76:a9:93:45:4a:ef:c2:41:86:6f:d5:47:3c:8f:61:6c:2c:
f9:fb:c8:d5:52:7d:77:4f:61:86:35:10:1a:fd:d7:61:f6:c7:
33:fe:38:a2:6a:f9:98:a9:b8:58:ba:cf:15:0c:d6:13:3f:19:
d0:eb:d4:7b:29:51:08:15:81:cd:2d:24:02:c5:e9:0d:f4:47:
cb:7f:25:83:b3:f4:0d:20:0d:c3:ef:6f:42:0b:13:59:a8:33:
d3:3f:7e:8c:e9:4a:1a:6d:29:fa:81:30:f1:0b:c9:e7:8d:47:
a5:65:98:f4:58:b5:14:83:0b:08:d0:2b:13:42:d5:ce:e0:be:
f7:61:c0:a3:b8:28:60:e4:9d:7c:f8:9a:10:ff:bc:29:ba:8b:
03:e4:ba:c2:f3:46:00:20:6e:a1:06:36:db:84:e5:d8:d5:c7:
ff:00:fb:52:04:f8:5a:77:43:4b:35:33:62:f2:e6:f2:29:c0:
fb:f8:49:9e:b4:34:8a:3a:7b:e7:c1:97:ff:8b:e1:c9:10:f3:
c2:af:17:e1:4f:d3:ca:bc:78:6f:0a:74:17:aa:8c:a0:9e:77:
39:35:3c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:34 2025 by rpki-client