Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/0dZuTVI8Td6vXZ_M7JHFy8X1O5c.roa
File: 0dZuTVI8Td6vXZ_M7JHFy8X1O5c.roa (raw, json)
Hash identifier: F7QdZ0RB8p70yz/o07QNKl2zYYJpUZcQmbMtrrlchjc=
Subject key identifier: D1:D6:6E:4D:52:3C:4D:DE:AF:5D:9F:CC:EC:91:C5:CB:C5:F5:3B:97
Certificate issuer: /CN=c7e8d959f1c9564a33f28fe44ab614b8f62b001b
Certificate serial: 019427480308249F4BB2CD8CDD1348A2BC2D
Authority key identifier: C7:E8:D9:59:F1:C9:56:4A:33:F2:8F:E4:4A:B6:14:B8:F6:2B:00:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/0dZuTVI8Td6vXZ_M7JHFy8X1O5c.roa
Signing time: Thu 02 Jan 2025 13:50:18 +0000
ROA not before: Thu 02 Jan 2025 13:50:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207539
IP address blocks: 37.60.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:03:08:24:9f:4b:b2:cd:8c:dd:13:48:a2:bc:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7e8d959f1c9564a33f28fe44ab614b8f62b001b
Validity
Not Before: Jan 2 13:50:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1d66e4d523c4ddeaf5d9fccec91c5cbc5f53b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:63:b9:cc:4e:23:e1:a0:eb:46:68:24:af:b4:
a2:d8:d1:fe:72:52:12:b0:7a:13:53:0d:15:26:f2:
ed:fe:52:26:38:3d:fb:21:b2:55:97:de:32:2a:58:
01:17:aa:1a:5d:59:7c:44:5f:72:d6:0c:d4:6f:7b:
b7:9f:f9:75:6c:f4:aa:3b:55:f0:31:05:e8:ac:a7:
a8:28:45:dd:b5:b3:44:fb:6d:eb:e4:28:f7:0e:f4:
ce:6b:47:8b:c1:5b:21:71:c6:05:38:2a:af:22:96:
65:1f:81:b9:9f:51:30:7f:fa:75:14:30:44:37:ac:
fd:6e:c7:d6:a3:6e:35:36:70:3a:b5:6b:c5:e3:b3:
87:d3:d0:1c:a0:94:27:b8:f7:5a:d3:a8:5b:ce:9f:
e9:04:b6:4e:0d:55:b4:72:18:37:20:c8:eb:d1:92:
87:5e:73:b2:8d:da:3c:54:28:51:41:d8:f7:8d:e9:
42:59:93:19:46:9d:ba:19:95:04:2b:0c:4e:de:68:
c9:c7:c4:1b:d2:61:60:7d:59:aa:69:65:51:dd:f9:
48:d7:99:30:7b:ed:72:4d:b0:1a:36:50:68:d7:a1:
d0:82:9c:ec:57:a2:21:87:36:82:7a:78:1b:b8:fb:
8d:98:2a:81:b9:86:f9:66:d2:eb:8a:bb:7c:81:07:
1e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D6:6E:4D:52:3C:4D:DE:AF:5D:9F:CC:EC:91:C5:CB:C5:F5:3B:97
X509v3 Authority Key Identifier:
keyid:C7:E8:D9:59:F1:C9:56:4A:33:F2:8F:E4:4A:B6:14:B8:F6:2B:00:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/0dZuTVI8Td6vXZ_M7JHFy8X1O5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.60.29.0/24
Signature Algorithm: sha256WithRSAEncryption
93:8d:c4:d2:04:08:75:ff:55:4b:c1:6e:ec:6b:65:ca:70:c7:
df:c8:ba:63:7f:30:b4:08:51:5a:19:d6:8a:a3:92:e0:27:94:
85:31:b3:63:9e:c2:df:9b:0c:32:24:66:b0:1c:e6:0a:b2:29:
93:f7:e9:9d:ac:22:dd:76:16:d1:64:0b:c7:67:05:0b:36:4b:
c9:07:47:5e:8b:77:3b:a9:a2:3a:dc:ed:46:64:72:9f:b2:f2:
1a:53:77:54:55:81:fa:17:b6:2f:45:96:ba:dc:d5:d1:b1:c5:
06:28:3a:46:8a:35:13:b1:e2:70:de:0c:87:51:2a:ba:48:15:
2c:fa:fa:2a:2d:1b:23:c9:be:80:69:45:e2:b7:ea:73:2c:5b:
ce:dc:e6:c1:2a:44:40:c6:28:0b:89:7e:ed:77:82:dd:36:f0:
38:ff:d4:17:73:47:9c:7a:94:ea:35:15:97:bc:8a:2c:ea:e6:
b1:9e:bd:37:6c:26:77:4b:a0:39:40:9e:7b:2a:33:f7:d8:d4:
a4:0c:95:95:b9:48:3b:35:5d:84:31:db:f9:b1:d3:3c:ae:16:
c1:e8:60:a5:7f:86:ad:e1:38:c4:92:33:3c:5f:97:58:e3:a4:
c3:ea:e4:60:c6:0f:61:ba:3c:ba:ff:b4:5d:31:ca:c3:a3:4a:
42:d6:d1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:34:42 2025 by rpki-client