Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/_eU7wK7pdUxRG2CXsHdjbv2SOXc.roa
File: _eU7wK7pdUxRG2CXsHdjbv2SOXc.roa (raw, json)
Hash identifier: ZAIXppKunQur0KGtFLAbnwIeXUabVYHwA+qIIq12IRo=
Subject key identifier: FD:E5:3B:C0:AE:E9:75:4C:51:1B:60:97:B0:77:63:6E:FD:92:39:77
Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819
Certificate serial: 0194228DE1D4E81F564922405E20D7E14FB0
Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/_eU7wK7pdUxRG2CXsHdjbv2SOXc.roa
Signing time: Wed 01 Jan 2025 15:48:31 +0000
ROA not before: Wed 01 Jan 2025 15:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211092
IP address blocks: 37.157.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:e1:d4:e8:1f:56:49:22:40:5e:20:d7:e1:4f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819
Validity
Not Before: Jan 1 15:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fde53bc0aee9754c511b6097b077636efd923977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:58:9e:7d:2c:f0:3c:81:60:fe:c5:fd:ee:1c:
91:63:a9:31:42:b8:ef:03:d5:90:5f:dd:23:19:87:
1e:64:76:19:e2:22:8a:46:f8:22:22:f2:fa:52:8b:
a1:c9:84:23:f7:6a:1c:bc:53:80:22:50:de:5c:f7:
8f:b5:32:da:dd:74:d6:80:b3:b4:5a:1d:b0:e0:df:
08:c7:42:eb:ba:58:c5:19:37:c8:ac:d4:ba:69:02:
14:af:10:a5:6e:ae:2d:aa:2d:7f:b0:16:0a:45:08:
40:70:a5:8d:40:07:bf:64:5d:c8:c4:82:73:fb:1a:
2d:1b:35:89:15:0f:b5:a0:c8:5e:c9:6d:6d:b0:ed:
a0:fd:e0:c3:90:78:8e:f7:10:f7:1a:d8:31:70:c0:
1d:3f:07:ae:0f:77:eb:23:ff:db:5a:2f:ae:88:00:
81:27:36:e3:8b:da:56:d2:47:f9:1a:be:5e:58:8a:
5c:07:b2:70:2a:59:f1:9e:d3:a8:e8:7e:90:b6:b8:
28:69:5d:1a:a4:3a:0f:4e:b8:77:8e:fc:9b:76:db:
78:2f:f4:e3:f1:1e:10:3a:c5:3a:96:84:df:7c:7b:
dc:3f:2a:5d:0e:4b:34:84:ac:f8:77:54:ec:71:9e:
f9:62:df:bd:5b:1e:10:0a:83:dd:d8:b7:cc:30:5a:
f9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E5:3B:C0:AE:E9:75:4C:51:1B:60:97:B0:77:63:6E:FD:92:39:77
X509v3 Authority Key Identifier:
keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/_eU7wK7pdUxRG2CXsHdjbv2SOXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.211.0/24
Signature Algorithm: sha256WithRSAEncryption
97:e6:86:b8:6f:d0:45:01:dd:fa:d5:00:7c:73:87:b4:26:2c:
f6:3f:d5:be:2a:e8:b8:99:33:f7:f1:05:3e:3b:ab:c1:94:91:
19:02:7b:29:e6:96:61:0b:20:66:31:8d:8e:f0:a4:15:29:b5:
39:87:df:71:b2:88:4b:5e:0e:8a:6d:ea:b2:84:42:c0:cb:ea:
0a:ce:f9:3d:8e:d5:25:8d:91:de:b3:36:d3:6c:ee:a1:c4:bb:
48:0e:8d:58:ba:4a:89:a1:16:e0:43:31:93:25:0b:99:67:31:
dc:ed:a4:b7:5c:e0:8c:a3:df:d5:61:66:b0:48:40:40:fa:ff:
8e:c1:59:9b:8f:e3:81:42:fb:8f:9f:89:b1:83:67:e6:03:d7:
d1:54:d2:65:df:7e:4a:42:45:d3:a1:21:9f:83:1e:b5:42:b8:
df:06:44:2e:e9:33:96:83:72:53:4f:60:f0:77:b7:41:9d:60:
00:08:73:fd:f8:52:b4:d1:35:42:76:81:e0:9c:46:6a:f2:19:
69:e6:70:4d:8d:8d:76:58:10:30:5d:87:4d:20:70:17:52:0e:
b3:2b:61:33:db:f0:7e:0d:94:c9:4b:7a:2a:23:3c:d5:29:ed:
74:a8:ad:94:3f:1b:02:54:fe:11:33:ed:6d:56:fa:1d:93:b8:
6b:f7:f8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:12:04 2025 by rpki-client