Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/fJ45lgJz2d7Xcm9NZctM9bxkI28.roa
File: fJ45lgJz2d7Xcm9NZctM9bxkI28.roa (raw, json)
Hash identifier: 4jHWLqAy3LnirN6Om685u8jARUWSH6XJKcE+oK3renw=
Subject key identifier: 7C:9E:39:96:02:73:D9:DE:D7:72:6F:4D:65:CB:4C:F5:BC:64:23:6F
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01841311502F6B59451D8CE834CBA23E54C3
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/fJ45lgJz2d7Xcm9NZctM9bxkI28.roa
Signing time: Wed 26 Oct 2022 06:53:32 +0000
ROA not before: Wed 26 Oct 2022 06:53:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198728
IP address blocks: 37.16.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:13:11:50:2f:6b:59:45:1d:8c:e8:34:cb:a2:3e:54:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 26 06:53:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c9e39960273d9ded7726f4d65cb4cf5bc64236f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4c:ef:cc:c6:b8:53:2c:11:19:32:36:6e:01:
7d:4b:fb:02:4b:64:6a:ce:e0:fa:bb:a2:14:b2:2f:
2a:9a:6c:ba:6b:6d:c6:be:89:e0:d3:a2:a8:d8:ac:
aa:2e:61:e5:16:8a:af:de:2b:76:8f:16:02:46:a0:
e7:ef:a1:de:27:cf:4c:f3:de:e7:85:85:d4:74:61:
95:09:47:1d:18:4f:84:cf:82:fe:32:13:9a:37:d3:
7d:44:22:ac:b4:bb:70:a4:af:e4:5f:ed:ff:b1:5e:
d3:6f:a0:c5:b4:dc:44:6f:35:22:2a:35:ea:21:0f:
47:0a:2d:16:b7:8a:04:56:7c:99:81:5a:43:49:8c:
24:69:6d:f4:78:fe:fa:3b:f9:8f:9d:06:91:dd:61:
83:e6:c4:36:11:ba:d3:7d:4f:c2:7b:4d:45:61:54:
7b:c3:2d:16:62:c4:33:f4:cc:0a:71:52:21:0d:4a:
4c:05:1b:cc:e9:5b:f4:09:b6:51:48:e3:c9:8a:67:
50:ab:4e:8f:73:f7:7e:e1:1f:21:7c:e7:6c:96:b1:
38:90:ce:65:42:63:18:62:4b:82:eb:e9:5a:89:f6:
81:2e:46:ca:b3:ac:68:a3:46:61:5d:6a:b4:b3:77:
d7:c9:8a:0d:25:a6:82:75:91:19:37:ad:b0:f0:00:
8f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9E:39:96:02:73:D9:DE:D7:72:6F:4D:65:CB:4C:F5:BC:64:23:6F
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/fJ45lgJz2d7Xcm9NZctM9bxkI28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.84.0/24
Signature Algorithm: sha256WithRSAEncryption
05:38:bc:0a:35:bd:c1:e5:0b:06:8a:40:38:fb:aa:03:68:88:
6f:cf:6f:5a:b0:bc:6c:04:59:69:38:a7:52:59:b9:41:60:da:
50:58:2f:a7:7a:af:0e:c4:f4:43:44:4f:69:76:88:5a:ff:6b:
75:ec:30:e6:5a:f6:2f:89:ed:cf:1a:cb:64:4b:11:f0:7e:98:
61:fb:59:55:f2:38:eb:16:be:8d:b0:4f:1a:ed:e7:10:6f:27:
46:0d:93:f3:05:63:f7:2e:d1:e6:b7:c5:f2:fc:62:f3:82:e7:
1c:b2:86:dc:1b:60:c1:eb:58:17:15:0f:92:bb:c2:76:1f:cb:
ab:40:5a:93:97:3e:ee:0d:98:c1:d5:41:bb:4e:7a:fe:01:65:
8c:75:ba:3b:ab:0e:4c:5f:b3:e2:3a:61:32:f0:eb:28:09:ac:
b6:c9:ec:da:a1:93:3c:d5:28:75:1a:c6:3c:38:a3:2f:0e:b0:
3a:cf:af:65:7c:88:29:6d:28:40:f1:36:c0:60:93:3d:ee:af:
f7:93:f4:c7:b1:ae:18:17:f9:1e:fb:c7:33:ac:17:e0:13:95:
a2:4c:20:8e:5a:c6:21:79:42:fe:fb:0d:85:e0:0b:30:b4:0c:
db:30:a1:8b:f8:59:2d:1f:e8:63:c2:ba:41:01:fa:7f:09:1f:
90:bf:45:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:02:54 2025 by rpki-client