Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/8H7G6t8rvDnHsh2gwBsuRnGhfkA.roa
File: 8H7G6t8rvDnHsh2gwBsuRnGhfkA.roa (raw, json)
Hash identifier: zjoz6wwqFQqboViumJSQcrhzjgNK/S/QN33OLFWSWHU=
Subject key identifier: F0:7E:C6:EA:DF:2B:BC:39:C7:B2:1D:A0:C0:1B:2E:46:71:A1:7E:40
Certificate issuer: /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial: 018B1E37CF3CC5E5A840EE7DFD7BB62655A5
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/8H7G6t8rvDnHsh2gwBsuRnGhfkA.roa
Signing time: Wed 11 Oct 2023 10:10:55 +0000
ROA not before: Wed 11 Oct 2023 10:10:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 37.1.229.0/24 maxlen: 24
77.75.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:37:cf:3c:c5:e5:a8:40:ee:7d:fd:7b:b6:26:55:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Validity
Not Before: Oct 11 10:10:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f07ec6eadf2bbc39c7b21da0c01b2e4671a17e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:57:68:e7:ea:72:e7:52:58:1e:23:63:0a:79:
78:b7:77:83:48:fd:e6:8a:cd:06:c6:1e:be:b0:e3:
bb:2b:dc:30:92:b2:b6:08:06:ee:37:34:dc:46:bb:
e9:02:f6:c1:ba:f1:04:6c:d5:7d:19:ed:07:eb:44:
ff:7f:45:f5:80:4e:e0:6c:83:ad:ed:ea:55:79:f2:
98:52:e3:29:74:d1:1b:b2:09:23:00:7b:a1:07:34:
2d:da:6a:e9:eb:6d:c0:b0:5c:d6:bf:e6:ed:dd:a2:
73:a0:11:ae:a2:4e:76:bd:1f:41:7f:70:6c:12:16:
5f:1f:a9:2b:e7:67:b3:df:18:b9:32:83:45:c9:4d:
02:65:59:5c:d4:2e:51:4f:7f:6a:e7:13:91:33:5d:
6c:90:e7:70:99:96:9e:2e:30:9a:20:2e:55:4e:37:
4d:6b:00:b2:b5:b0:7f:21:03:be:46:67:2f:da:56:
ed:d6:b8:84:45:82:1e:91:e0:9c:63:e0:b7:70:c9:
e2:10:26:e9:0d:56:89:0f:e6:c3:73:31:99:1c:56:
67:5a:d3:bf:dc:be:75:50:a4:9d:89:d8:d4:04:2c:
ab:c0:28:c3:25:c7:f9:0f:6a:ec:9f:73:4a:ab:ff:
ed:ac:30:e9:9f:d3:d3:84:36:a4:d4:32:32:1b:18:
0e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:7E:C6:EA:DF:2B:BC:39:C7:B2:1D:A0:C0:1B:2E:46:71:A1:7E:40
X509v3 Authority Key Identifier:
keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/8H7G6t8rvDnHsh2gwBsuRnGhfkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.229.0/24
77.75.192.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:43:fe:ef:35:5a:9d:84:1a:16:9d:06:90:90:88:e2:64:b9:
ff:ca:b3:e2:6a:ce:67:3d:d8:b9:41:54:cb:a7:2d:5e:2f:79:
5b:d5:16:b7:89:36:f3:e3:50:21:e1:d6:37:68:db:bb:89:4b:
15:f8:07:f8:3c:bb:d7:ed:68:23:c5:35:e6:e7:fc:2c:2d:54:
99:a8:c5:e3:9e:c6:bc:ec:2d:20:78:6a:16:fc:0e:8f:1c:39:
8d:13:b5:f7:82:f2:0c:ec:c7:4d:fc:d8:01:dc:b1:5e:0a:c5:
c7:fc:f9:2f:6d:35:2f:11:8c:8c:30:ab:8c:08:5e:e5:14:2d:
f3:9d:1d:1b:f1:5c:ce:99:4c:45:cb:61:98:9b:5a:b5:78:62:
c8:23:be:9a:cb:be:08:de:6d:62:86:19:38:a4:49:cc:3c:c5:
2e:6a:2d:58:32:13:ca:f8:41:c6:5b:55:c7:cc:28:e8:24:e8:
d7:bd:04:d4:17:b3:e5:76:e5:44:e4:22:c5:52:52:ea:a6:11:
b7:80:8a:22:72:65:ba:56:b8:52:b1:97:73:45:36:16:99:83:
38:da:0d:11:07:3c:d2:53:93:0e:86:af:ce:53:05:f1:91:a3:
9f:10:86:42:93:48:ae:fa:64:96:ee:53:96:e1:16:f9:73:f8:
2a:58:13:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:34:34 2025 by rpki-client