Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/06c090-b0e2-4544-9338-4c3126a59c2f/1/c37BZ7o_vaXIG_2vp2ZIEFBEO_g.roa
File: c37BZ7o_vaXIG_2vp2ZIEFBEO_g.roa (raw, json)
Hash identifier: RwC//F5wqhEVxJDcPpnmXm9v2jiWBEJ5Il2o+NjxoYg=
Subject key identifier: 73:7E:C1:67:BA:3F:BD:A5:C8:1B:FD:AF:A7:66:48:10:50:44:3B:F8
Certificate issuer: /CN=9f4846f7f258b2956c7865c5b9956a80f6b89d9d
Certificate serial: 0712E6B1
Authority key identifier: 9F:48:46:F7:F2:58:B2:95:6C:78:65:C5:B9:95:6A:80:F6:B8:9D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n0hG9_JYspVseGXFuZVqgPa4nZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/06c090-b0e2-4544-9338-4c3126a59c2f/1/c37BZ7o_vaXIG_2vp2ZIEFBEO_g.roa
Signing time: Sat 01 Jan 2022 12:06:12 +0000
ROA not before: Sat 01 Jan 2022 12:06:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43652
IP address blocks: 195.200.252.0/23 maxlen: 24
185.83.248.0/22 maxlen: 24
2a05:a040::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118679217 (0x712e6b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f4846f7f258b2956c7865c5b9956a80f6b89d9d
Validity
Not Before: Jan 1 12:06:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=737ec167ba3fbda5c81bfdafa766481050443bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:75:75:67:a5:78:b2:d1:8f:9a:a7:bd:75:04:
5a:1e:b9:43:a3:77:ad:0b:0b:13:de:0a:8f:ba:cc:
9e:b4:8f:d9:0b:97:af:1c:de:48:41:4d:6d:5f:52:
77:3f:be:52:3d:55:42:b6:59:93:e6:6d:4f:17:99:
62:d5:1b:21:6f:87:6b:aa:fa:e2:7a:3a:77:03:20:
16:67:b0:ee:69:d3:06:e7:58:66:ba:af:7e:8c:a2:
e1:98:cf:d7:51:2e:d6:14:18:ce:04:0d:3e:82:70:
1e:2d:b9:1e:6a:82:bd:b0:23:4a:c8:57:4f:66:7a:
57:7a:32:dd:de:ec:1a:af:84:4a:ac:0b:2c:22:99:
9b:81:be:e9:05:e6:99:cc:18:12:07:53:d7:71:89:
6d:a6:73:79:6a:a2:05:32:26:7f:28:7d:83:8f:77:
02:97:52:64:5c:af:87:12:80:a4:69:d1:5b:8a:82:
d3:41:6a:fb:08:db:33:ac:74:ee:38:87:75:45:e5:
ca:36:21:db:51:22:e9:d3:ae:69:be:c8:f1:cc:b8:
69:d6:d1:82:19:81:fd:e4:70:59:6d:f3:df:25:db:
e6:53:88:93:99:9a:21:37:9c:b7:79:07:58:09:98:
09:e0:02:2d:70:65:52:90:a9:3a:be:79:1f:e1:25:
73:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7E:C1:67:BA:3F:BD:A5:C8:1B:FD:AF:A7:66:48:10:50:44:3B:F8
X509v3 Authority Key Identifier:
keyid:9F:48:46:F7:F2:58:B2:95:6C:78:65:C5:B9:95:6A:80:F6:B8:9D:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n0hG9_JYspVseGXFuZVqgPa4nZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/06c090-b0e2-4544-9338-4c3126a59c2f/1/c37BZ7o_vaXIG_2vp2ZIEFBEO_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/06c090-b0e2-4544-9338-4c3126a59c2f/1/n0hG9_JYspVseGXFuZVqgPa4nZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.248.0/22
195.200.252.0/23
IPv6:
2a05:a040::/29
Signature Algorithm: sha256WithRSAEncryption
7e:45:6c:e2:8b:97:26:b4:8c:34:bc:95:67:e9:ce:ff:84:41:
2b:ef:55:42:98:5a:4b:b4:4a:21:91:30:54:47:71:fb:75:4a:
bf:a0:d0:29:ed:fa:c7:c7:70:db:f4:88:7d:aa:24:a5:0b:81:
75:01:90:7d:c3:d0:f5:12:58:17:79:68:b9:32:4b:0b:d3:ff:
bf:2c:96:e5:ba:88:a6:3c:28:55:91:21:35:43:bb:b9:1a:36:
9c:be:2f:11:b9:34:f1:35:c9:12:f4:b6:57:7d:5f:3a:73:23:
64:c9:18:38:df:14:d3:b7:97:6e:e8:d9:1c:5b:41:0b:a5:b8:
a1:a3:89:d7:f9:8e:51:ab:6c:d4:a9:de:5c:34:f0:60:c6:ec:
d0:3b:18:37:95:e4:e1:d8:71:b7:1b:5c:b4:1b:fa:4f:b8:9d:
67:f1:62:f0:b5:d1:0d:91:b6:e1:37:e5:e2:d5:f4:4d:d1:f3:
88:86:b9:80:bf:d6:f1:84:36:a9:fd:ce:39:a8:5c:e8:31:0c:
4b:c5:89:8c:f0:6f:27:8b:79:5a:20:77:e8:af:df:a1:5e:92:
26:9a:ab:85:fa:96:9a:90:87:c0:c7:63:ae:13:94:73:fc:4d:
a4:34:65:03:a8:1d:d5:e7:bb:ed:ce:63:1b:20:51:db:9f:c7:
b6:25:fb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:05 2025 by rpki-client