Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/5f063f-100d-4310-a046-3f6568b59589/1/pB2lfvB7gQO7Df-ZSPaBHKUkzpw.roa
File: pB2lfvB7gQO7Df-ZSPaBHKUkzpw.roa (raw, json)
Hash identifier: KrXkLQ9xu9mu2V4hQD1Tb9q0PH84wlWfQmD+ovNB4Gs=
Subject key identifier: A4:1D:A5:7E:F0:7B:81:03:BB:0D:FF:99:48:F6:81:1C:A5:24:CE:9C
Certificate issuer: /CN=97ac47b51244ef49c52378aecd29c58cfb72089b
Certificate serial: 09E32AB0
Authority key identifier: 97:AC:47:B5:12:44:EF:49:C5:23:78:AE:CD:29:C5:8C:FB:72:08:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6xHtRJE70nFI3iuzSnFjPtyCJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/5f063f-100d-4310-a046-3f6568b59589/1/pB2lfvB7gQO7Df-ZSPaBHKUkzpw.roa
Signing time: Sat 01 Jan 2022 11:00:41 +0000
ROA not before: Sat 01 Jan 2022 11:00:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49434
IP address blocks: 37.44.237.0/24 maxlen: 24
37.44.239.0/24 maxlen: 24
37.44.236.0/22 maxlen: 24
185.157.246.0/23 maxlen: 24
2a09:ca00::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165882544 (0x9e32ab0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac47b51244ef49c52378aecd29c58cfb72089b
Validity
Not Before: Jan 1 11:00:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a41da57ef07b8103bb0dff9948f6811ca524ce9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9c:95:23:f6:b2:68:c1:a6:0d:12:6a:0a:0a:
01:1f:9f:ad:1a:25:d5:7e:00:73:f0:30:07:c1:f6:
d5:8f:0c:40:fd:9a:4f:2b:d1:e3:18:6e:ce:91:43:
3e:6a:85:c9:61:f1:b6:e2:c6:b5:d6:a0:ce:c2:88:
ee:ad:0e:48:ef:1a:d7:20:25:2b:c5:6c:9f:44:8b:
9d:2f:9a:ff:4d:03:a2:50:e4:13:38:9e:67:42:21:
05:29:9f:d2:86:35:d4:1f:5c:1e:45:ab:49:1a:07:
9a:a2:67:7f:0f:33:e0:3c:ed:c7:d1:85:cf:a7:b5:
a5:7d:40:87:3d:bc:52:e6:49:6d:83:cc:22:c3:cf:
2d:48:eb:2d:af:9e:e8:50:e2:a3:ce:ce:3b:69:48:
29:61:83:70:dc:01:f8:1b:d5:9c:d3:86:c8:c9:88:
88:6c:df:98:28:0f:97:65:31:47:36:9f:8f:c7:60:
08:0f:dd:1c:dd:2c:c4:08:85:23:b3:c6:25:75:5b:
98:0f:4e:62:ce:94:e1:59:8d:4a:ee:df:5b:ce:46:
2f:81:6a:96:de:82:d4:e5:ab:65:06:5b:cb:7e:f2:
9c:b9:cb:31:d8:64:56:94:9d:df:29:ce:28:28:45:
94:77:81:4d:4b:7c:44:1b:11:4d:75:4c:58:f8:9f:
8a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1D:A5:7E:F0:7B:81:03:BB:0D:FF:99:48:F6:81:1C:A5:24:CE:9C
X509v3 Authority Key Identifier:
keyid:97:AC:47:B5:12:44:EF:49:C5:23:78:AE:CD:29:C5:8C:FB:72:08:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6xHtRJE70nFI3iuzSnFjPtyCJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5f063f-100d-4310-a046-3f6568b59589/1/pB2lfvB7gQO7Df-ZSPaBHKUkzpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5f063f-100d-4310-a046-3f6568b59589/1/l6xHtRJE70nFI3iuzSnFjPtyCJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.236.0/22
185.157.246.0/23
IPv6:
2a09:ca00::/29
Signature Algorithm: sha256WithRSAEncryption
81:c0:b4:88:1a:62:9b:c8:2a:62:f3:ac:dd:a8:f7:ea:66:96:
3c:63:a8:08:77:2b:cd:bf:92:c9:96:53:1e:6a:91:16:a5:05:
26:07:c4:d6:ea:c8:cc:60:6e:59:a9:81:5b:e7:9a:95:36:e9:
fc:37:19:99:96:cf:ff:b7:1e:22:1a:01:86:23:84:30:13:e3:
3e:34:a2:fe:73:2b:43:0c:2b:08:d9:3b:7e:5f:9e:f1:c0:b5:
9a:cd:9e:c6:88:fb:8a:b8:e6:ab:94:e4:ca:e0:c4:47:7c:a0:
94:bc:0c:4e:b4:b5:aa:d3:86:b3:c5:41:d7:7f:a2:31:2b:ba:
5f:2f:99:e8:b4:7a:62:8d:3c:29:50:da:a4:16:2e:3a:1d:a0:
54:0a:54:a4:27:b7:39:ba:e1:b7:07:a3:49:06:2a:b8:79:b5:
83:d1:99:39:e5:ca:b4:9e:62:db:35:af:ad:53:12:ac:9a:5c:
9c:d3:76:9e:4f:bf:a5:32:fd:72:83:66:ad:da:b2:45:a4:0c:
a9:bc:af:ed:2f:9e:b4:41:8e:73:41:29:35:18:e5:de:ab:df:
53:04:28:9d:ca:2c:1f:45:60:34:67:c8:8f:86:3e:e2:3a:49:
78:c3:e1:89:09:47:eb:c7:11:5b:5b:91:d7:5c:cb:e6:23:36:
5c:a1:8e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:27:46 2025 by rpki-client