Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2095e6-6688-4582-bb20-437f1579494c/1/nvAGFcIQ3iArcAhdQQ63ytDcqdI.roa
File: nvAGFcIQ3iArcAhdQQ63ytDcqdI.roa (raw, json)
Hash identifier: 9Q5PKzuvkNG3bh0qrNsv8HKai0QVV4ripegmjGiR+Go=
Subject key identifier: 9E:F0:06:15:C2:10:DE:20:2B:70:08:5D:41:0E:B7:CA:D0:DC:A9:D2
Certificate issuer: /CN=be05fdc3bface13274c33a2b6b105f2e28a05535
Certificate serial: 1B07BAC8
Authority key identifier: BE:05:FD:C3:BF:AC:E1:32:74:C3:3A:2B:6B:10:5F:2E:28:A0:55:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgX9w7-s4TJ0wzoraxBfLiigVTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2095e6-6688-4582-bb20-437f1579494c/1/nvAGFcIQ3iArcAhdQQ63ytDcqdI.roa
Signing time: Sat 01 Jan 2022 12:00:52 +0000
ROA not before: Sat 01 Jan 2022 12:00:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35393
IP address blocks: 37.140.200.0/23 maxlen: 24
37.140.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453491400 (0x1b07bac8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be05fdc3bface13274c33a2b6b105f2e28a05535
Validity
Not Before: Jan 1 12:00:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ef00615c210de202b70085d410eb7cad0dca9d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:34:e3:0d:bc:8e:a9:07:57:62:d3:18:9b:22:
d3:08:fa:29:09:65:a1:e1:6d:20:24:ea:d3:8c:dd:
5c:87:0c:e3:2f:31:a6:1f:5f:71:30:54:15:a1:4f:
31:01:63:51:d5:16:7e:4c:62:91:a4:1c:5d:cc:58:
23:3e:8c:22:38:d4:17:01:1a:70:9d:84:7f:68:c1:
31:07:47:7d:4f:c3:b5:87:75:46:4a:ea:ab:66:cb:
71:f0:81:90:a2:d2:af:51:6f:b2:97:dc:57:7f:63:
24:58:df:79:30:71:23:46:1c:88:1f:b6:9b:35:3b:
89:51:27:80:6f:c1:64:b7:e7:41:f6:4a:6a:a5:25:
15:2d:02:38:25:7c:59:21:83:d5:57:95:5a:58:c1:
35:30:fa:11:94:9a:df:e2:11:77:b3:b6:87:9d:5b:
a2:14:67:2d:d9:ad:25:f6:2d:85:f1:18:81:76:78:
27:87:10:af:48:de:f3:64:e2:eb:a5:9a:7f:b8:75:
23:06:c7:c2:9a:94:6d:fa:5d:66:b5:30:34:6e:10:
1c:25:59:4a:0f:c3:c5:1e:4b:7e:d2:c9:dc:b0:f1:
14:50:39:61:32:ab:fb:93:a5:60:31:a8:9d:e1:7f:
98:c1:e2:35:06:e7:a0:be:f4:95:71:91:ff:c7:9c:
62:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F0:06:15:C2:10:DE:20:2B:70:08:5D:41:0E:B7:CA:D0:DC:A9:D2
X509v3 Authority Key Identifier:
keyid:BE:05:FD:C3:BF:AC:E1:32:74:C3:3A:2B:6B:10:5F:2E:28:A0:55:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgX9w7-s4TJ0wzoraxBfLiigVTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2095e6-6688-4582-bb20-437f1579494c/1/nvAGFcIQ3iArcAhdQQ63ytDcqdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2095e6-6688-4582-bb20-437f1579494c/1/vgX9w7-s4TJ0wzoraxBfLiigVTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.200.0-37.140.202.255
Signature Algorithm: sha256WithRSAEncryption
68:d2:5e:7a:92:bb:d4:c9:6c:c3:18:e2:a4:0d:2a:d3:d6:f0:
09:95:77:d3:f9:7e:cf:41:cc:0a:3f:1e:92:82:e2:44:62:9c:
b8:37:19:3e:4f:e8:08:52:18:82:2b:fd:8d:f5:9d:8c:c5:a9:
e8:8b:74:f3:85:a0:60:2e:d9:96:df:29:11:00:ce:fc:76:cc:
03:cb:10:89:5b:af:68:ba:c6:9b:c5:3c:b7:8a:ee:57:cd:8f:
77:ad:e8:3c:8a:54:a7:b3:af:37:8f:85:bd:4f:fa:11:e6:2a:
9e:40:f9:00:46:fe:f5:d4:3b:9b:1f:b6:1c:b3:2a:fe:0c:b8:
44:60:e9:0b:18:58:db:4e:de:39:70:3e:10:40:3e:90:f7:88:
e9:71:26:5d:cc:3e:9c:90:26:7c:28:ca:4c:e7:71:d9:e6:77:
ac:0c:8b:ff:3d:f6:3b:5a:63:9c:6b:93:d9:c2:5e:16:46:1d:
da:d0:79:63:62:a8:87:c5:b6:ed:f8:9a:16:23:f6:be:86:12:
fc:88:9b:3d:be:72:e6:4d:36:84:16:89:ad:3b:5d:d1:0c:03:
47:f8:8b:96:8a:0d:19:8b:e9:17:bb:e1:8f:7f:75:71:bf:5e:
af:24:e9:7a:67:fa:00:9b:5b:1a:4b:d1:54:e6:65:89:4c:ec:
a1:36:e1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:23:30 2025 by rpki-client