Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/CsM1Tab_IVjXnkGzn-PwfvJRum8.roa
File: CsM1Tab_IVjXnkGzn-PwfvJRum8.roa (raw, json)
Hash identifier: wdOCJx02c8KAu6BbK3u1hvYDgYH15s1JgslsnvBAork=
Subject key identifier: 0A:C3:35:4D:A6:FF:21:58:D7:9E:41:B3:9F:E3:F0:7E:F2:51:BA:6F
Certificate issuer: /CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
Certificate serial: 0194258EF016D8638E5EB374BC1232E24EA5
Authority key identifier: 78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/CsM1Tab_IVjXnkGzn-PwfvJRum8.roa
Signing time: Thu 02 Jan 2025 05:48:32 +0000
ROA not before: Thu 02 Jan 2025 05:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3169
IP address blocks: 37.140.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:f0:16:d8:63:8e:5e:b3:74:bc:12:32:e2:4e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
Validity
Not Before: Jan 2 05:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ac3354da6ff2158d79e41b39fe3f07ef251ba6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:08:f5:be:78:ed:66:26:06:cc:3d:9f:5f:3a:
eb:e4:39:63:ed:6f:66:cd:b9:a2:2d:7f:73:3e:06:
53:9f:c7:27:ad:31:b4:1c:1d:0c:2b:82:ff:e2:76:
44:7e:ce:81:91:3d:5c:86:b1:4f:4c:6f:1e:b1:31:
0a:68:5c:e6:6c:59:02:50:6e:dc:42:55:c4:2d:db:
71:ce:41:cd:8e:14:c6:f4:ab:10:86:db:9e:d9:b4:
a9:99:b8:ee:05:94:a1:b6:0a:3a:16:82:00:f6:69:
88:cf:02:d3:75:8c:69:06:2d:23:a2:44:18:f5:1d:
e1:3e:1a:88:d6:1f:58:c7:84:88:7f:75:b2:b5:54:
08:73:d4:62:d2:c4:c2:3c:91:be:a9:76:13:65:70:
0a:c4:a0:29:f6:12:a6:ae:84:63:1f:57:a2:78:00:
97:ad:6d:1c:43:8f:4f:77:19:3f:2d:e3:32:7f:10:
57:20:7f:88:e9:a0:0e:4d:2e:7c:aa:d1:2a:55:a9:
2b:fe:03:b5:03:78:e7:94:7f:c0:19:56:4c:a9:c3:
a7:1f:06:9f:29:95:6e:39:b3:7e:6b:cc:50:e4:7e:
da:f0:35:e0:dd:70:29:d8:1f:cb:57:fc:8a:00:d9:
00:f1:0e:ef:a2:b5:65:ab:1c:c0:b7:fd:6c:7d:91:
f5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C3:35:4D:A6:FF:21:58:D7:9E:41:B3:9F:E3:F0:7E:F2:51:BA:6F
X509v3 Authority Key Identifier:
keyid:78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/CsM1Tab_IVjXnkGzn-PwfvJRum8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.217.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:21:f0:07:5a:28:0d:43:8c:4d:50:06:29:d2:65:41:dd:b1:
57:a3:a7:0d:95:a5:b9:db:2b:2c:0a:92:ff:7f:aa:01:9c:74:
8d:33:5b:04:a4:28:0d:37:b6:30:1f:5f:2d:ad:79:96:da:71:
12:cf:f0:9b:fa:4e:4e:3c:9a:f9:81:fc:12:dc:ed:1f:94:7d:
57:47:2c:36:e5:ef:3f:39:97:3d:17:a1:c0:c1:0e:36:75:10:
52:f5:5b:a6:c1:c6:4f:f8:1f:e5:8a:fa:35:a7:3a:8a:0f:1f:
72:ab:1b:bc:7a:4f:bd:a5:ce:e0:1b:79:08:0d:d0:69:82:09:
ba:d2:28:9d:23:65:c9:da:9f:96:e5:c4:c9:d3:a2:ef:91:dc:
78:c6:5f:21:1a:1c:2c:33:f9:5b:0e:82:b2:9f:71:ed:61:a2:
95:3f:d9:7e:6e:85:b0:75:90:6f:33:1e:5b:49:da:a6:9b:13:
b2:71:af:35:43:53:2a:b5:ea:ef:24:a1:87:a3:ed:f6:a5:cd:
0e:43:1d:a2:3c:50:0d:0a:fd:c1:3f:98:22:2b:56:c2:78:ce:
e1:5c:0e:a0:8a:61:0c:b6:b1:86:0c:cf:d3:ae:7b:26:66:92:
05:c4:a7:98:3d:b1:05:be:e3:82:9b:57:28:57:a7:33:71:7c:
f0:81:e4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:47 2025 by rpki-client