Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/9653e5-79bd-48ae-86ed-f9bd384f6215/1/8-H_Xnse6DkKKV5QVMjL0B3ZXjI.roa
File: 8-H_Xnse6DkKKV5QVMjL0B3ZXjI.roa (raw, json)
Hash identifier: 3v8AitCNdlXGY0ukzq0fi0zpEISNdAAVNRxa2OJEidg=
Subject key identifier: F3:E1:FF:5E:7B:1E:E8:39:0A:29:5E:50:54:C8:CB:D0:1D:D9:5E:32
Certificate issuer: /CN=893cfadc6dbc1dd9ba0e47406cedb306c6a85957
Certificate serial: 01856C53A08EA6872588CA3F4B2C00A07D97
Authority key identifier: 89:3C:FA:DC:6D:BC:1D:D9:BA:0E:47:40:6C:ED:B3:06:C6:A8:59:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTz63G28Hdm6DkdAbO2zBsaoWVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/9653e5-79bd-48ae-86ed-f9bd384f6215/1/8-H_Xnse6DkKKV5QVMjL0B3ZXjI.roa
Signing time: Sun 01 Jan 2023 07:54:57 +0000
ROA not before: Sun 01 Jan 2023 07:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49453
IP address blocks: 37.72.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:a0:8e:a6:87:25:88:ca:3f:4b:2c:00:a0:7d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893cfadc6dbc1dd9ba0e47406cedb306c6a85957
Validity
Not Before: Jan 1 07:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3e1ff5e7b1ee8390a295e5054c8cbd01dd95e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ee:ec:02:8b:65:20:05:f2:1f:a6:38:9e:db:
2c:29:dd:07:8e:93:85:0b:e2:04:bc:de:0f:25:58:
10:75:17:e9:00:a3:1d:d8:38:b4:8c:cb:72:ca:d8:
25:41:2a:46:ed:e0:30:e1:fa:05:4e:1a:35:51:a8:
c6:33:22:8e:c7:ea:1f:eb:8f:63:95:33:d4:44:fd:
70:35:3d:e8:f8:db:36:11:43:34:1b:9c:8c:00:52:
43:c5:cb:04:0a:90:81:06:11:e1:32:d5:dc:2b:de:
c6:32:a5:21:c4:c8:ff:87:a1:90:95:7f:25:2c:87:
32:e9:db:42:34:a5:e6:8a:c2:f6:34:0e:2e:f5:ba:
1f:ac:2f:db:fd:9e:e0:d7:f5:b4:6a:3e:6f:4e:eb:
d7:1e:8b:fc:db:53:ee:f5:ec:f9:af:e3:a7:61:79:
9e:8b:b0:09:c4:f7:b4:92:0e:01:62:b9:f8:9a:d8:
dd:e8:13:eb:ed:70:77:b8:63:23:e0:10:0c:1e:f7:
a6:1b:91:e8:67:f8:90:98:ed:93:09:33:6f:36:05:
5f:bf:08:76:a6:83:2a:de:0a:37:95:12:a3:ce:0e:
0d:d8:23:5c:33:46:0f:c9:40:46:3c:d8:2f:39:45:
90:29:df:d1:a1:01:a8:be:74:17:88:d4:83:34:4a:
0f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E1:FF:5E:7B:1E:E8:39:0A:29:5E:50:54:C8:CB:D0:1D:D9:5E:32
X509v3 Authority Key Identifier:
keyid:89:3C:FA:DC:6D:BC:1D:D9:BA:0E:47:40:6C:ED:B3:06:C6:A8:59:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTz63G28Hdm6DkdAbO2zBsaoWVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/9653e5-79bd-48ae-86ed-f9bd384f6215/1/8-H_Xnse6DkKKV5QVMjL0B3ZXjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/9653e5-79bd-48ae-86ed-f9bd384f6215/1/iTz63G28Hdm6DkdAbO2zBsaoWVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.141.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:e8:2d:9b:89:84:b9:8e:fd:81:1e:41:a0:53:6c:03:8d:d4:
49:3b:ec:d5:55:1e:d9:c0:1b:65:44:6f:a0:97:6b:7b:68:70:
5d:b6:53:bb:fb:a3:9f:3a:11:af:b6:9f:e0:dc:9b:2f:9d:cd:
9c:4a:33:0f:51:82:ec:8d:36:00:d4:33:bf:b5:d7:27:55:76:
76:8b:26:5a:b7:e1:c3:b9:ed:e2:d8:ee:4a:cd:23:7b:2b:2f:
d5:a8:8d:c3:e9:12:c9:11:3f:7c:cc:f4:36:63:56:e2:8f:97:
b1:4e:1c:75:b7:5f:7b:1e:e2:cf:16:cf:ad:ca:80:97:5e:07:
f3:60:be:6d:12:3b:04:d4:da:f7:53:9c:01:0c:0f:c7:fe:fd:
bd:7a:80:f1:cb:6e:28:81:94:8a:56:03:c2:f3:ce:54:0a:4a:
35:3c:c2:f9:b1:3a:3a:f2:f3:89:31:ad:83:72:5f:80:c1:0a:
c1:de:43:79:cc:bf:c5:88:ec:a3:44:b8:b0:b1:65:f5:a6:61:
3e:43:78:78:86:64:ba:5e:92:54:fa:6d:80:74:e5:cf:0f:53:
62:a7:d0:5d:13:d2:9d:9a:6b:e1:9e:a1:00:f9:e9:44:a4:2d:
7c:0a:02:58:3b:a1:65:9b:62:2e:6d:d4:f5:f0:3d:d9:75:70:
2a:b1:f5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:32:41 2025 by rpki-client