Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/4nO5UaFn2LZuHWwUizWEV-o8RXU.roa
File: 4nO5UaFn2LZuHWwUizWEV-o8RXU.roa (raw, json)
Hash identifier: ySrfSHLGkex+WKAvlxJcDZl3c2p7KjY4kTKLzEdlu9A=
Subject key identifier: E2:73:B9:51:A1:67:D8:B6:6E:1D:6C:14:8B:35:84:57:EA:3C:45:75
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 0190984FA3C6CA462DBDA39C626295B2D2CC
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/4nO5UaFn2LZuHWwUizWEV-o8RXU.roa
Signing time: Tue 09 Jul 2024 16:24:34 +0000
ROA not before: Tue 09 Jul 2024 16:24:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 37.153.132.0/24 maxlen: 24
89.42.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:98:4f:a3:c6:ca:46:2d:bd:a3:9c:62:62:95:b2:d2:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Jul 9 16:24:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e273b951a167d8b66e1d6c148b358457ea3c4575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:39:16:97:9b:df:87:53:b2:4f:0b:5e:43:ab:
09:d2:ec:7e:3d:a8:8d:84:65:fb:b5:1c:bc:97:14:
d8:e6:03:7d:12:9a:14:42:07:98:f5:03:ca:83:8c:
c6:e2:c9:a5:1e:cd:cf:34:b2:4c:f9:6d:a0:2c:18:
d7:bb:a3:58:6d:fb:62:a3:61:32:ca:6d:65:34:08:
70:63:95:7a:2c:09:08:ab:57:d7:14:52:b5:39:6b:
29:9a:ea:03:e5:cc:95:ce:0f:b7:2b:0d:bf:de:c5:
b1:64:b9:04:a9:d4:6d:e3:ee:23:2f:a6:50:7a:17:
16:5c:0d:e4:58:ea:48:ae:3f:03:15:8d:c4:7a:b3:
38:3a:66:f2:b7:50:9c:c1:3b:e6:b4:cf:a3:2b:8e:
21:a3:a0:0c:4b:56:e2:76:79:ef:a7:39:e5:a2:ac:
7f:0b:fd:a3:5b:39:19:f4:e0:f8:e8:c8:35:b2:3d:
63:fe:4a:bb:e6:bd:3e:e6:f5:11:61:31:21:fd:eb:
53:4e:d9:a7:4e:6e:8c:47:19:74:6b:11:14:ad:8b:
c6:3e:75:c3:fc:27:25:28:33:35:45:21:6b:52:4c:
04:65:c8:51:be:6b:c9:f3:1f:5b:79:fc:92:70:41:
c0:33:99:73:20:f2:70:14:dc:e6:7f:e1:38:fd:66:
07:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:73:B9:51:A1:67:D8:B6:6E:1D:6C:14:8B:35:84:57:EA:3C:45:75
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/4nO5UaFn2LZuHWwUizWEV-o8RXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.132.0/24
89.42.213.0/24
Signature Algorithm: sha256WithRSAEncryption
48:93:f4:92:8d:7f:53:b9:90:8e:8a:6e:6f:33:8f:1a:be:98:
62:a5:40:e2:0a:c3:2d:5d:49:c0:04:02:33:75:29:a4:7c:88:
be:68:d6:d4:74:f9:e7:98:9a:77:3d:b6:c0:94:5a:9d:65:0e:
a4:2c:82:8a:e1:47:de:d7:32:76:8d:db:de:bb:0c:35:36:b8:
19:9b:19:59:19:09:b5:5d:d0:83:cd:c7:5a:c7:54:08:cb:a5:
02:bc:b8:84:f6:b9:a7:eb:a2:03:79:48:b8:29:56:05:06:30:
5f:f2:03:f8:68:b0:24:9f:f4:38:ac:e3:25:7d:e6:77:97:e7:
92:8a:ad:fd:5c:ed:a7:4b:d6:d8:3c:40:ce:0b:be:b7:1e:66:
93:89:d2:09:f1:3a:93:d7:80:8e:3c:78:e9:a1:69:3c:0e:ad:
ca:6e:16:88:7c:d2:ee:0e:de:d0:bf:08:26:77:e1:f8:1f:de:
40:07:b7:76:85:52:c1:34:d7:24:59:41:13:5e:63:c8:8d:7e:
7f:26:d7:b8:22:2d:2f:25:56:f5:26:a8:72:c0:99:87:77:29:
ac:80:c6:82:3c:25:f9:51:ff:dc:8e:72:d8:0c:b9:f4:ed:21:
96:41:da:23:7e:77:24:a3:b7:2b:a7:e2:81:dc:28:ed:f7:3c:
71:89:3d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:26 2025 by rpki-client