Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8e44d1-a73b-45cf-b3d0-b8ab05f4ca65/1/awVXZjww8kmPsC_IbxAIhq9o6B0.roa
File: awVXZjww8kmPsC_IbxAIhq9o6B0.roa (raw, json)
Hash identifier: KNSPGNz0LJr9FbG37lwscYAH+uZQDj3bJRcKz54OCtY=
Subject key identifier: 6B:05:57:66:3C:30:F2:49:8F:B0:2F:C8:6F:10:08:86:AF:68:E8:1D
Certificate issuer: /CN=8cef626d4dd21d587d607134cc0f29847aae2732
Certificate serial: 018820867549CEFC4034ED382F308E9C5698
Authority key identifier: 8C:EF:62:6D:4D:D2:1D:58:7D:60:71:34:CC:0F:29:84:7A:AE:27:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jO9ibU3SHVh9YHE0zA8phHquJzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8e44d1-a73b-45cf-b3d0-b8ab05f4ca65/1/awVXZjww8kmPsC_IbxAIhq9o6B0.roa
Signing time: Mon 15 May 2023 17:47:42 +0000
ROA not before: Mon 15 May 2023 17:47:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 37.140.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:75:49:ce:fc:40:34:ed:38:2f:30:8e:9c:56:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cef626d4dd21d587d607134cc0f29847aae2732
Validity
Not Before: May 15 17:47:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b0557663c30f2498fb02fc86f100886af68e81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9d:1f:c3:65:57:5b:3f:e0:27:9d:93:80:33:
0c:e0:c1:98:1d:9c:3f:bd:c8:6e:c6:8e:7a:a5:dc:
59:f1:62:06:59:be:21:38:8b:fd:6e:fe:cd:fc:11:
c4:1d:d6:ea:7c:9a:52:60:66:14:28:fc:11:8a:6a:
60:54:eb:ce:4a:9e:e8:52:50:0d:ab:25:a2:bb:da:
6f:d6:4c:fc:5d:53:83:a8:cb:7a:37:b8:37:12:9b:
77:3b:e3:a8:0e:f9:12:d8:2d:6f:19:df:8c:73:ad:
4e:31:93:c8:5a:59:6f:8c:f5:2d:74:19:35:49:e1:
d1:de:61:96:e1:13:17:65:76:84:65:a2:d8:01:47:
b8:d6:fb:65:55:ce:17:ca:28:00:81:4c:18:fc:9d:
05:4a:6f:03:0d:f8:f8:f8:88:d5:bf:fc:b2:be:d4:
b7:3c:8b:b2:ad:db:0d:72:97:08:a0:a4:4f:73:5f:
8f:f2:7b:53:49:42:29:73:31:a3:b0:46:35:e4:39:
91:11:c9:80:24:d5:fe:89:87:82:f7:28:85:73:37:
ba:d9:b9:cd:61:6d:5f:62:80:e7:12:24:7e:a8:ec:
dd:e9:23:fa:d9:b3:de:9d:7c:69:d5:87:bb:1d:72:
08:3b:6f:c5:51:33:06:8f:1f:02:f4:79:cd:28:21:
18:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:05:57:66:3C:30:F2:49:8F:B0:2F:C8:6F:10:08:86:AF:68:E8:1D
X509v3 Authority Key Identifier:
keyid:8C:EF:62:6D:4D:D2:1D:58:7D:60:71:34:CC:0F:29:84:7A:AE:27:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jO9ibU3SHVh9YHE0zA8phHquJzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e44d1-a73b-45cf-b3d0-b8ab05f4ca65/1/awVXZjww8kmPsC_IbxAIhq9o6B0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e44d1-a73b-45cf-b3d0-b8ab05f4ca65/1/jO9ibU3SHVh9YHE0zA8phHquJzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.222.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:e1:45:18:02:08:40:fc:16:8c:2a:a1:2c:31:0f:dc:39:be:
2f:01:e2:1d:23:ac:93:d1:d7:31:12:1c:ee:2f:3e:fe:24:58:
60:ce:b4:a6:11:21:25:e8:83:d6:55:ec:53:9f:9c:5d:93:c0:
72:21:c6:40:63:7a:c3:36:2d:8b:58:52:3e:d6:5a:3e:58:fa:
b4:b6:a0:61:84:dc:29:13:99:e3:60:f0:38:94:15:8b:43:09:
b1:c8:1e:81:24:45:c2:7a:eb:24:2c:25:39:11:36:bf:16:37:
cb:46:a3:64:17:2e:e2:6d:5b:67:6d:cf:b9:b7:1d:87:bf:62:
3d:51:3f:81:b4:64:1d:05:23:d3:bf:3d:59:89:c6:b7:1b:9d:
f2:d6:7d:35:ba:ae:51:3f:14:32:16:84:ad:a5:66:d5:07:38:
0f:0d:de:08:56:ec:28:3b:99:11:82:69:60:35:73:54:4a:e0:
06:c8:3d:6e:4d:a6:22:16:2d:c6:9e:8a:61:fe:31:6e:21:9c:
f1:5d:39:3b:c9:9e:aa:d9:f2:5a:95:e9:57:fb:2f:0b:c9:d7:
17:22:17:7b:3f:89:09:c4:8d:cd:6b:76:bd:ba:c9:df:e4:bc:
8c:c1:11:49:8f:44:b2:2e:30:91:cb:09:a9:2d:ce:31:0b:1e:
f9:ea:00:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:14:56 2025 by rpki-client