Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/9n71thzCB-BsmEWVorRlQ2s0Ww8.roa
File: 9n71thzCB-BsmEWVorRlQ2s0Ww8.roa (raw, json)
Hash identifier: 7OL3OuOpNwOt2dUw5M7qOvmFpZUEjpVRtDseEPllsYo=
Subject key identifier: F6:7E:F5:B6:1C:C2:07:E0:6C:98:45:95:A2:B4:65:43:6B:34:5B:0F
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 019420D5D9AEAC4AE8EE2D110D5E2944C451
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/9n71thzCB-BsmEWVorRlQ2s0Ww8.roa
Signing time: Wed 01 Jan 2025 07:47:53 +0000
ROA not before: Wed 01 Jan 2025 07:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42532
IP address blocks: 37.128.204.0/22 maxlen: 22
188.64.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:d9:ae:ac:4a:e8:ee:2d:11:0d:5e:29:44:c4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 1 07:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f67ef5b61cc207e06c984595a2b465436b345b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8b:33:25:0d:02:3e:70:24:13:aa:af:00:60:
0a:65:cb:70:d3:d3:5c:f0:b3:1b:2f:82:1f:e3:b5:
de:cf:e2:3a:db:5d:fa:73:98:99:a1:c8:36:cc:4a:
6b:64:c1:d7:b6:56:f4:a6:43:de:bc:47:8f:66:31:
b7:e3:0b:6e:9a:73:f6:1c:bd:a0:27:bf:18:21:1c:
88:49:f2:9b:50:89:8c:df:ff:46:7b:78:93:53:db:
a5:50:eb:b5:88:b0:c7:99:ab:5a:95:8d:da:ef:99:
a2:dc:cc:0e:8a:75:ed:6c:4c:03:c0:02:5b:f7:b8:
ab:cf:a3:fd:0a:eb:db:3e:6e:c9:08:aa:c2:f2:89:
58:3f:35:73:d9:f3:97:66:b5:5f:b6:7c:a7:db:af:
10:2a:8f:fb:22:c2:28:0b:05:a2:74:49:ef:dc:e4:
43:ea:c8:f3:32:47:3e:e3:a5:8f:72:eb:20:cd:9e:
f4:a5:3f:00:d9:95:8b:a6:15:a1:3a:77:88:64:7a:
2c:74:90:e3:6e:5f:c7:4f:26:6d:8e:a4:21:95:66:
bc:8e:32:e1:24:52:35:0e:1b:12:8b:f9:1c:df:08:
f3:42:e8:f9:c0:f8:aa:31:83:44:50:24:28:f6:c2:
d3:06:78:94:e3:6f:d4:d6:a1:0c:47:2c:dc:31:21:
5b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7E:F5:B6:1C:C2:07:E0:6C:98:45:95:A2:B4:65:43:6B:34:5B:0F
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/9n71thzCB-BsmEWVorRlQ2s0Ww8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.204.0/22
188.64.12.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:ea:e2:cf:0d:fc:13:af:20:ab:4d:e1:df:10:a3:81:4e:42:
84:c9:3d:4c:81:35:41:5c:69:70:0c:66:e5:4d:1d:a1:57:eb:
2b:5d:ae:ff:52:c7:1a:d6:af:65:0a:3c:10:ee:db:79:c2:07:
e8:5e:e2:eb:52:a0:bf:de:ca:3a:b6:fb:25:b0:3a:48:47:cf:
36:e0:19:09:06:f5:c7:1b:38:bc:b5:00:5e:ea:ec:de:95:44:
c3:32:b0:c7:c7:2d:3f:50:da:90:01:c6:51:85:82:76:c2:d2:
40:47:fe:ce:a1:ba:6f:5d:dc:52:1b:38:44:10:b2:64:09:40:
f6:7a:cc:3b:e4:92:8e:77:c9:11:81:63:c5:ef:63:c8:60:51:
3f:31:97:85:f6:2f:4d:b4:01:3b:d7:f1:d5:d0:c8:8b:3f:59:
17:31:31:39:dd:ab:13:52:9a:fa:41:bb:18:c1:42:77:f8:28:
06:e5:b3:2e:24:d4:d7:96:de:60:d9:1d:a3:50:8a:0a:aa:ca:
b4:f8:09:3e:22:a9:7e:c0:d2:54:33:b9:d0:b7:ff:a4:67:b2:
ff:fa:e4:b1:89:8c:f1:80:da:ef:c2:9f:a5:bd:9d:76:40:8c:
1d:6c:85:77:db:38:29:bf:cf:f9:43:e0:20:62:0f:59:6d:dc:
07:19:39:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:21 2025 by rpki-client