Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/2GKa1vIOkhpOPczR8W34x1NEGEE.roa
File: 2GKa1vIOkhpOPczR8W34x1NEGEE.roa (raw, json)
Hash identifier: 8Q04xt13Xxm5ppiJkcNE3EUUs6iw/E7n8W4XdRTD/QU=
Subject key identifier: D8:62:9A:D6:F2:0E:92:1A:4E:3D:CC:D1:F1:6D:F8:C7:53:44:18:41
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 01942521513F291D95423FCB732836D0CB5D
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/2GKa1vIOkhpOPczR8W34x1NEGEE.roa
Signing time: Thu 02 Jan 2025 03:48:47 +0000
ROA not before: Thu 02 Jan 2025 03:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61294
IP address blocks: 37.220.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:51:3f:29:1d:95:42:3f:cb:73:28:36:d0:cb:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jan 2 03:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8629ad6f20e921a4e3dccd1f16df8c753441841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:40:37:d1:77:12:6c:2f:f1:20:4a:7e:2e:a0:
d5:1d:a9:d3:16:d8:76:4e:2c:22:e8:7e:1b:ef:d0:
00:49:b8:f9:92:59:c8:03:88:c0:e2:49:d9:ea:e6:
af:be:e3:af:8c:37:12:25:ed:5c:48:d2:d9:70:5a:
8c:d0:2a:47:41:ed:92:62:ba:33:14:48:a8:89:14:
dc:4a:ec:16:b6:13:9e:b0:61:94:6a:13:80:9b:15:
79:26:3c:68:af:c5:0f:a0:3f:54:d3:74:e3:91:c7:
bc:e3:af:1a:c6:f3:a1:81:2a:54:df:90:43:8c:71:
f3:68:5f:18:1a:bb:60:87:12:3f:8d:44:8f:83:59:
f8:60:82:c5:9b:7c:04:0d:f9:b7:ff:5a:49:13:46:
30:c4:0b:f4:20:37:a1:fd:32:12:ca:5c:f3:df:20:
74:82:5f:a3:a3:08:d9:2a:d7:4e:d3:13:bf:b4:08:
53:6e:c7:e1:4c:6a:9f:cf:99:12:3e:3a:44:9e:83:
96:12:43:47:4c:0d:35:df:14:15:cd:df:0c:2f:76:
25:d9:b1:08:64:22:d0:59:bf:6e:d3:51:86:8e:8f:
2c:8c:82:49:c7:a0:9c:56:c5:da:67:70:0d:31:d7:
97:a4:0a:cd:fe:a0:fb:8a:74:c7:12:f9:f5:08:84:
b5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:62:9A:D6:F2:0E:92:1A:4E:3D:CC:D1:F1:6D:F8:C7:53:44:18:41
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/2GKa1vIOkhpOPczR8W34x1NEGEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.220.142.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:11:32:93:a8:b6:2d:37:09:a0:98:95:37:69:5a:c8:6e:f0:
3a:a3:23:d2:00:e5:da:da:d8:ce:fb:47:6b:6c:a2:e1:bf:57:
9f:16:dd:be:e7:43:32:ce:ad:5a:f0:5d:ec:01:a5:7d:df:c8:
78:bb:32:09:ed:ec:9a:ca:32:8f:54:44:32:a5:0b:de:3a:8c:
45:ec:2f:28:fc:9e:3d:98:25:8c:58:f0:9a:91:9e:59:bf:5e:
73:a2:12:2c:86:1a:94:57:b3:e3:24:a1:75:93:27:fa:0e:8b:
f1:8f:e4:8d:34:0b:e2:e0:cd:44:e4:c6:74:d3:e6:44:0c:1a:
1c:65:df:e7:2f:c7:4d:16:cb:4f:d3:9e:cc:97:6a:1a:d3:e8:
76:a0:11:d1:1b:0b:01:c2:b3:49:7b:ab:83:35:b7:5c:87:a8:
ca:53:b2:d6:1c:b6:a9:48:6c:3d:6e:23:f1:3a:17:f8:4a:72:
5e:b1:23:0d:f3:c2:10:60:23:55:2d:f1:38:03:0a:45:1c:59:
37:65:41:14:e0:58:e8:f1:97:19:96:15:cf:d4:df:90:f6:07:
ea:d2:79:e7:da:74:aa:0c:3e:9d:21:b2:fb:ba:aa:2a:18:96:
1e:e1:70:c4:39:75:e9:a4:37:c0:30:53:28:4b:83:90:03:4f:
c3:c0:db:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:47:54 2025 by rpki-client