Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/FF1uAY6vEqJIQS2w1ewTMFauI8o.roa
File: FF1uAY6vEqJIQS2w1ewTMFauI8o.roa (raw, json)
Hash identifier: xTL/wcflg1TdYpE/WWLCO33zDk8L1rsI0HaJ0U+PE9U=
Subject key identifier: 14:5D:6E:01:8E:AF:12:A2:48:41:2D:B0:D5:EC:13:30:56:AE:23:CA
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018A44FB2688DC944F1C727E7A66D7019559
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/FF1uAY6vEqJIQS2w1ewTMFauI8o.roa
Signing time: Wed 30 Aug 2023 05:47:04 +0000
ROA not before: Wed 30 Aug 2023 05:47:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42532
IP address blocks: 37.128.204.0/22 maxlen: 22
188.64.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:44:fb:26:88:dc:94:4f:1c:72:7e:7a:66:d7:01:95:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Aug 30 05:47:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=145d6e018eaf12a248412db0d5ec133056ae23ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d9:35:93:70:8d:6c:94:0c:03:f0:10:43:bc:
9a:68:8e:de:07:d5:4f:50:aa:93:7b:40:fd:7a:e4:
09:df:4f:fb:d2:34:98:6e:70:f2:93:cb:9f:d5:7d:
39:c7:61:3d:8a:df:ab:dc:08:8f:d7:50:17:43:f0:
ac:71:96:55:8b:e7:a1:c5:61:25:1b:eb:22:47:b2:
08:be:c6:f6:b1:c8:20:77:48:70:d5:26:35:f9:b0:
db:9c:3c:c1:98:4c:7f:90:d3:c8:6b:2d:4e:35:39:
0f:93:4a:88:6b:02:b0:58:c9:1a:3d:69:99:57:ee:
3a:e7:6e:ba:ce:b3:a2:22:40:f0:f1:ea:17:ca:40:
94:ed:ba:d3:3b:48:fd:3b:88:9c:2b:7a:a9:7d:dd:
dc:a8:9e:98:21:8f:37:c3:80:8d:33:88:a7:7a:7c:
22:d3:f2:30:09:70:12:8b:f7:20:92:5f:ef:a9:a1:
1c:87:64:d9:80:12:da:99:05:68:41:23:8d:7b:fe:
84:f9:73:9b:a8:b6:08:e5:5f:3d:a0:9f:b1:04:98:
4e:6e:0d:76:0e:77:12:5f:53:f3:07:c6:34:2c:50:
4a:b8:45:53:03:23:f8:05:77:49:7d:6e:9b:15:9e:
8a:44:1a:35:43:ef:66:63:db:6b:23:ce:53:89:1e:
69:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5D:6E:01:8E:AF:12:A2:48:41:2D:B0:D5:EC:13:30:56:AE:23:CA
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/FF1uAY6vEqJIQS2w1ewTMFauI8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.204.0/22
188.64.12.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:9f:a6:c4:31:6e:33:ba:77:8c:79:3b:82:64:eb:59:52:9f:
b1:7e:55:8c:f6:b5:52:3e:3a:d4:36:c9:43:be:09:93:b1:de:
15:97:48:08:c2:ea:55:51:21:01:83:54:3b:57:41:f1:cb:e8:
a4:b8:93:f5:74:fd:06:45:a5:af:92:48:87:27:1f:4a:12:1b:
b5:7b:86:93:48:6d:27:c2:25:e1:f4:a0:b3:a3:a6:ea:ec:78:
4d:b9:83:ee:e7:42:48:bf:54:8c:b4:43:b9:d8:6a:d4:07:14:
7b:e6:37:3b:77:de:a0:c6:5c:ff:05:d3:e3:a4:0c:af:05:ca:
75:00:c1:d7:a0:a5:e2:ec:69:b2:fd:bc:e4:e5:ea:a6:46:a5:
d9:a5:6a:7e:d1:a3:49:58:a9:a5:69:c3:31:bb:f0:bd:3d:8c:
f0:ac:ce:21:15:57:0c:21:ed:d7:c4:f8:ba:d9:e2:36:a0:f7:
ce:62:2a:13:c0:ff:5d:e1:be:56:23:39:52:16:82:d3:11:b7:
5d:4b:17:f1:7e:70:fe:66:54:10:b0:1f:9c:cc:99:2c:62:b2:
12:cd:6b:2f:5e:65:d1:46:41:c2:bb:1c:ad:d1:70:bd:9d:38:
c3:1f:7c:fd:c0:9b:74:fe:4c:34:d9:a5:b2:f5:19:54:2f:14:
af:a1:b6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:06 2025 by rpki-client