Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/5f063f-100d-4310-a046-3f6568b59589/1/iGHjDEc4xlyGuUYf9NSAqQxYJK0.roa
File: iGHjDEc4xlyGuUYf9NSAqQxYJK0.roa (raw, json)
Hash identifier: bnkEwQ0Qn8mW0hCzabCGhlt8xqzyb6CZATyPlYzp9Rw=
Subject key identifier: 88:61:E3:0C:47:38:C6:5C:86:B9:46:1F:F4:D4:80:A9:0C:58:24:AD
Certificate issuer: /CN=97ac47b51244ef49c52378aecd29c58cfb72089b
Certificate serial: 018CB574E5C108D5055C8D176A527B0CFAB6
Authority key identifier: 97:AC:47:B5:12:44:EF:49:C5:23:78:AE:CD:29:C5:8C:FB:72:08:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6xHtRJE70nFI3iuzSnFjPtyCJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/5f063f-100d-4310-a046-3f6568b59589/1/iGHjDEc4xlyGuUYf9NSAqQxYJK0.roa
Signing time: Fri 29 Dec 2023 12:03:06 +0000
ROA not before: Fri 29 Dec 2023 12:03:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49434
IP address blocks: 37.44.236.0/24 maxlen: 24
185.157.246.0/23 maxlen: 24
2a09:ca00::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b5:74:e5:c1:08:d5:05:5c:8d:17:6a:52:7b:0c:fa:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac47b51244ef49c52378aecd29c58cfb72089b
Validity
Not Before: Dec 29 12:03:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8861e30c4738c65c86b9461ff4d480a90c5824ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c8:42:43:58:02:20:7f:11:9b:c4:6a:20:ad:
20:4d:04:b3:e0:fc:94:f5:42:00:03:2f:ae:60:0b:
32:95:ee:74:9a:a6:33:36:6f:da:0d:06:44:ae:5c:
60:b3:9f:94:de:6c:a4:60:fb:23:02:52:82:ea:5e:
cb:66:81:89:1c:e7:a9:83:42:a2:93:5f:54:95:e3:
45:fa:a5:80:8c:ef:bb:83:a5:6a:ff:d6:62:57:dc:
b9:ff:a9:b6:52:9e:8e:cd:36:79:54:27:92:15:98:
0e:2a:be:61:56:92:5b:ea:12:0f:c4:32:a3:4c:32:
52:c7:ce:ec:07:1e:ce:60:5a:fa:e2:63:f4:d6:46:
56:c6:dd:1a:64:10:36:79:38:f7:64:2c:a2:9e:1d:
4c:ba:76:09:5d:c9:60:fd:03:32:6f:3e:27:db:5b:
e8:ca:88:28:69:3c:7c:69:f0:b5:33:1d:d4:04:06:
da:6e:1b:13:4a:0f:8e:c1:d9:8d:86:14:0c:c2:3a:
6a:20:96:81:45:7f:8b:da:8c:5b:52:fa:52:b9:22:
ae:d0:63:fc:f4:f0:82:32:b3:85:fe:15:25:af:29:
72:2b:16:6d:0a:c2:02:ca:eb:18:75:76:01:41:87:
78:3f:24:18:13:d3:ba:aa:42:b0:d1:d0:c2:9a:04:
ad:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:61:E3:0C:47:38:C6:5C:86:B9:46:1F:F4:D4:80:A9:0C:58:24:AD
X509v3 Authority Key Identifier:
keyid:97:AC:47:B5:12:44:EF:49:C5:23:78:AE:CD:29:C5:8C:FB:72:08:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6xHtRJE70nFI3iuzSnFjPtyCJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5f063f-100d-4310-a046-3f6568b59589/1/iGHjDEc4xlyGuUYf9NSAqQxYJK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5f063f-100d-4310-a046-3f6568b59589/1/l6xHtRJE70nFI3iuzSnFjPtyCJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.236.0/24
185.157.246.0/23
IPv6:
2a09:ca00::/29
Signature Algorithm: sha256WithRSAEncryption
8d:87:6e:63:57:30:33:72:a3:2b:10:c7:85:8c:8e:62:58:1c:
b7:55:ed:be:9d:99:f5:33:ca:81:04:1c:d9:54:b5:dd:b7:3b:
3b:93:bb:d5:04:4e:a5:20:3a:29:4e:51:76:a6:1e:c1:7b:63:
68:cd:66:b2:bf:87:e4:d8:e5:b9:d9:9f:3e:a8:2e:bf:3c:c1:
fa:94:eb:cb:c8:e5:5e:f7:a7:d3:bd:79:bf:1b:87:1d:c4:89:
04:ee:31:c1:1f:36:e1:8d:81:fe:46:70:7f:d1:f9:53:84:20:
91:ea:90:d7:2c:52:5d:cb:48:6f:98:84:13:ce:d9:7f:7d:2c:
bc:b3:b1:6c:91:5f:66:61:ef:d3:21:d0:98:b5:45:5d:4f:83:
e7:33:78:7f:39:9e:05:e6:97:e2:43:9a:e5:7b:ad:37:10:95:
e2:53:30:2b:27:de:bd:54:58:0d:99:e3:c5:d2:e7:62:61:00:
a1:0e:3d:ec:8f:9b:84:e6:24:21:87:a6:3e:e1:8e:52:93:0f:
a4:6d:4b:7f:47:3a:21:60:ac:33:ad:c8:90:28:ca:40:b8:0b:
9f:c5:8b:89:08:a5:a4:b2:62:da:33:99:2c:30:31:96:60:f6:
9d:35:9d:47:30:2e:2b:a6:94:7a:00:8e:35:44:99:1c:b1:86:
45:ac:38:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:48:00 2025 by rpki-client