Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/1-0HBv3Fd1KkBkj-DxZe8o1aVBLw.roa
File: 1-0HBv3Fd1KkBkj-DxZe8o1aVBLw.roa (raw, json)
Hash identifier: fHp5hUU8NEsF4hA+DQnUoKK+WZF2ycEP2oAVTR8mrkc=
Subject key identifier: FB:41:C1:BF:71:5D:D4:A9:01:92:3F:83:C5:97:BC:A3:56:95:04:BC
Certificate issuer: /CN=c7e8d959f1c9564a33f28fe44ab614b8f62b001b
Certificate serial: 0194274802ACD080846D880203437EFE6D0E
Authority key identifier: C7:E8:D9:59:F1:C9:56:4A:33:F2:8F:E4:4A:B6:14:B8:F6:2B:00:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/1-0HBv3Fd1KkBkj-DxZe8o1aVBLw.roa
Signing time: Thu 02 Jan 2025 13:50:18 +0000
ROA not before: Thu 02 Jan 2025 13:50:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198594
IP address blocks: 37.60.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:02:ac:d0:80:84:6d:88:02:03:43:7e:fe:6d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7e8d959f1c9564a33f28fe44ab614b8f62b001b
Validity
Not Before: Jan 2 13:50:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb41c1bf715dd4a901923f83c597bca3569504bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bf:3f:82:37:40:17:d7:fd:b3:be:8c:2a:d4:
e8:1e:a6:9d:47:ab:90:d4:1d:28:94:03:9a:82:4a:
e0:c8:82:be:38:ed:43:8f:b0:b3:b2:20:75:69:6e:
f8:ba:a7:9d:4f:e8:e6:83:d9:0c:2e:c2:e9:54:f1:
a6:2e:92:09:bd:87:c9:60:68:78:68:be:be:43:97:
74:65:df:51:dd:41:55:d7:fc:e9:d2:9b:ea:ba:03:
04:47:be:57:a2:41:3e:4c:a2:26:b7:9b:ab:77:b7:
0f:fe:d1:66:17:03:d3:ee:39:7b:24:1d:ab:f1:14:
6c:ab:50:dc:51:83:bc:5c:e6:c5:e7:6c:17:ff:bd:
75:81:f1:68:56:4f:17:0c:ad:84:a0:09:b6:f2:f4:
59:f4:52:91:c1:fa:e5:3c:6b:fd:38:a0:72:62:a3:
38:cc:53:dc:a9:bd:0a:9c:ca:24:6b:7e:37:2d:c3:
ca:4b:5b:21:79:a7:f7:1f:58:2c:04:5d:6b:3b:42:
47:5b:96:d5:b1:74:b1:e5:8a:cb:da:9c:5e:34:4c:
e7:d9:c7:c0:9e:9c:3b:f4:f6:8f:22:b2:5b:ac:7f:
69:53:2c:16:09:32:51:12:f3:3c:e9:0a:f1:ce:cd:
20:b5:a3:a4:a1:53:24:35:2c:2d:e5:c4:87:f6:37:
f7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:41:C1:BF:71:5D:D4:A9:01:92:3F:83:C5:97:BC:A3:56:95:04:BC
X509v3 Authority Key Identifier:
keyid:C7:E8:D9:59:F1:C9:56:4A:33:F2:8F:E4:4A:B6:14:B8:F6:2B:00:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/1-0HBv3Fd1KkBkj-DxZe8o1aVBLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.60.24.0/21
Signature Algorithm: sha256WithRSAEncryption
3e:e0:50:99:e0:f7:e8:d4:7f:4f:c6:b3:9a:0c:13:98:95:cf:
10:d3:03:90:83:51:99:43:8a:44:e5:c2:e4:00:95:d2:5d:a5:
4c:66:3c:40:64:92:a3:07:16:61:4d:e9:34:66:c4:3d:35:4b:
29:b5:cb:44:6e:70:b0:fe:d8:cc:77:c2:b8:fc:23:94:09:67:
95:b3:50:bf:4b:a6:4e:39:f8:8d:97:be:b5:06:be:2b:7d:aa:
2e:51:be:7d:1d:69:bb:cf:c9:85:56:c0:32:2b:38:59:ec:07:
1e:e8:d5:17:c5:f9:7b:28:73:1b:97:a2:f7:9e:03:92:ff:0a:
91:13:88:be:3d:12:ab:cc:6a:99:2f:d2:06:dd:cd:08:48:a2:
f4:aa:6a:68:91:f0:ed:4e:68:b1:24:dc:d5:1b:e0:ac:85:f2:
6a:78:64:fb:69:35:86:f0:d7:6c:fd:1c:d7:c2:80:3e:64:4a:
91:ba:5f:0b:e4:11:0b:b0:9f:85:18:35:0e:bc:c7:08:d0:80:
34:3d:de:ec:21:d8:71:f2:e6:c3:6c:e9:7d:56:9d:0f:35:f6:
1d:d4:eb:15:26:1c:45:4d:5d:b6:ce:e0:6a:9f:9a:28:90:f0:
5b:ee:52:2b:2f:3e:09:2a:1a:3e:ce:a0:c5:67:15:53:4a:e2:
72:b0:87:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:37:59 2025 by rpki-client