Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/S-Yjb4eozy3TXfv2IRjmsYO3X3c.roa
File: S-Yjb4eozy3TXfv2IRjmsYO3X3c.roa (raw, json)
Hash identifier: 5Sdpus0Ffzh+VbOC9y8nRnaSgxwGysE5TC3V4JwdK/g=
Subject key identifier: 4B:E6:23:6F:87:A8:CF:2D:D3:5D:FB:F6:21:18:E6:B1:83:B7:5F:77
Certificate issuer: /CN=c7e8d959f1c9564a33f28fe44ab614b8f62b001b
Certificate serial: 0194C0C385175C2C8907D6C6F73AD9CC8DF0
Authority key identifier: C7:E8:D9:59:F1:C9:56:4A:33:F2:8F:E4:4A:B6:14:B8:F6:2B:00:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/S-Yjb4eozy3TXfv2IRjmsYO3X3c.roa
Signing time: Sat 01 Feb 2025 09:07:06 +0000
ROA not before: Sat 01 Feb 2025 09:07:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198594
IP address blocks: 37.60.24.0/21 maxlen: 24
37.60.26.0/24 maxlen: 24
37.60.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c0:c3:85:17:5c:2c:89:07:d6:c6:f7:3a:d9:cc:8d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7e8d959f1c9564a33f28fe44ab614b8f62b001b
Validity
Not Before: Feb 1 09:07:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4be6236f87a8cf2dd35dfbf62118e6b183b75f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2f:b1:12:da:67:19:81:da:2f:b5:70:08:db:
a8:3b:dc:1d:29:25:53:17:d6:1a:10:e1:f7:0c:0a:
ed:77:06:17:fe:0e:08:73:f4:00:5e:ad:30:c4:3f:
9b:32:43:be:9b:3e:6b:2a:d4:11:7d:07:71:5f:a2:
ab:7a:ef:ea:a2:d2:9a:01:41:3a:cf:89:7a:18:20:
eb:e0:8e:86:73:3c:ee:4a:ac:59:82:5b:35:3a:03:
5b:c0:ff:7c:e2:0e:9e:8f:73:13:94:58:4d:af:1a:
77:b1:e3:a2:79:7c:07:a0:20:27:79:89:77:3e:c7:
a8:a3:f9:94:e1:d4:e2:0a:75:b5:7b:0f:68:31:d4:
90:f3:29:a1:eb:1c:07:cf:d4:47:d1:3c:b2:04:18:
82:7b:3e:a6:5d:b8:ad:7f:12:68:ed:21:01:34:6e:
49:71:c7:e5:c4:80:81:94:0b:09:e0:59:d0:60:2f:
82:68:03:d3:da:35:64:64:0f:26:7e:56:1e:d1:2e:
af:f9:41:7d:82:5f:c9:a7:b0:91:c7:f1:11:db:eb:
93:ed:e3:a3:df:14:83:13:36:4e:87:81:2c:23:48:
99:a9:08:a0:99:ee:83:55:72:ba:20:97:74:b7:6d:
c5:5c:bd:24:94:65:48:1c:94:ab:b5:01:90:4f:82:
8e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E6:23:6F:87:A8:CF:2D:D3:5D:FB:F6:21:18:E6:B1:83:B7:5F:77
X509v3 Authority Key Identifier:
keyid:C7:E8:D9:59:F1:C9:56:4A:33:F2:8F:E4:4A:B6:14:B8:F6:2B:00:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/S-Yjb4eozy3TXfv2IRjmsYO3X3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.60.24.0/21
Signature Algorithm: sha256WithRSAEncryption
64:d1:fc:34:8f:3c:57:0b:75:97:d0:52:7c:71:a5:1b:10:ab:
10:b2:ae:f1:c4:c2:31:2b:36:bc:4c:42:80:40:56:c5:57:b8:
fc:f9:13:0c:a0:da:c2:49:6f:77:e8:de:a6:6e:d1:01:22:f5:
a6:65:c2:1b:a5:69:6b:66:f5:81:02:19:1b:89:29:c5:cc:98:
ce:4c:68:2f:73:0c:ee:46:f8:64:59:1d:b7:c9:3b:94:6b:31:
aa:54:c0:a3:7f:3d:0d:de:48:3b:e3:b3:b9:05:15:6f:b0:42:
42:ed:31:35:4f:69:57:fb:60:8d:58:ff:68:21:e1:2f:69:08:
85:bd:ff:33:94:86:bc:f0:b4:c7:17:2e:71:4c:31:22:4d:f2:
5e:c1:24:f5:a3:d0:80:a8:d6:17:0d:f2:10:a9:08:8d:7b:b0:
8d:5f:4e:bb:ee:67:3b:55:45:f7:18:70:9f:4d:9e:be:f5:d9:
55:c0:e6:60:b2:17:82:8e:d0:0e:90:89:fc:7f:be:eb:00:ec:
7e:35:54:e2:e8:bb:61:d1:b2:db:14:c8:36:b9:90:5f:7d:80:
b1:0c:3c:73:fe:93:c2:bf:cf:e9:bc:87:a8:54:31:34:c8:15:
03:ec:6e:0f:1f:d3:58:f2:9d:f8:d9:ed:ee:91:5a:91:13:49:
01:f4:b6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:27:07 2025 by rpki-client