Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/ac9a3a-4986-4708-a8b7-fe2b5e5fc8a1/1/1-m_3RFpQCAw4jTTQyaAb-oV2N1E.roa
File: 1-m_3RFpQCAw4jTTQyaAb-oV2N1E.roa (raw, json)
Hash identifier: kTAY786ulMAyPVbvgZlyetAoQ+YkeamwP2yDhB5mRkY=
Subject key identifier: FA:6F:F7:44:5A:50:08:0C:38:8D:34:D0:C9:A0:1B:FA:85:76:37:51
Certificate issuer: /CN=7fc8b286b9d1bdfbe715d6ee52337a302f177042
Certificate serial: 0194FE63D40BE22DA4081788877F056F60B6
Authority key identifier: 7F:C8:B2:86:B9:D1:BD:FB:E7:15:D6:EE:52:33:7A:30:2F:17:70:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f8iyhrnRvfvnFdbuUjN6MC8XcEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/ac9a3a-4986-4708-a8b7-fe2b5e5fc8a1/1/1-m_3RFpQCAw4jTTQyaAb-oV2N1E.roa
Signing time: Thu 13 Feb 2025 08:19:02 +0000
ROA not before: Thu 13 Feb 2025 08:19:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 37.252.192.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fe:63:d4:0b:e2:2d:a4:08:17:88:87:7f:05:6f:60:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fc8b286b9d1bdfbe715d6ee52337a302f177042
Validity
Not Before: Feb 13 08:19:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa6ff7445a50080c388d34d0c9a01bfa85763751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d9:36:82:69:bd:b6:2e:d3:64:a6:d4:a7:48:
10:0f:6d:bc:d7:ac:32:e3:60:d5:0e:dd:ce:7a:18:
dd:6f:a3:30:c5:b2:ad:4f:e2:72:d1:74:9a:9a:a8:
03:ab:25:84:40:74:36:fb:dd:98:ec:8c:77:ab:09:
5b:e0:8a:e3:e5:49:96:cc:a0:6a:12:b5:1a:aa:6e:
a9:d4:96:c8:9a:45:32:22:d6:0a:7f:6b:ca:f5:8e:
ad:d6:fc:7f:f5:07:7c:56:9e:7a:3b:c6:a5:4a:30:
a8:b4:6b:c1:6d:fd:36:c2:e2:3a:f0:96:6a:ff:65:
01:c7:0d:9f:c1:75:ce:d3:75:54:02:42:7c:30:80:
9a:12:77:4d:2f:47:b4:b0:13:bf:fb:48:cc:67:31:
90:e0:67:c4:10:07:d9:b9:20:b6:7c:51:3f:83:2d:
85:76:d9:14:33:6c:11:c9:bb:fc:32:a3:3b:c1:5d:
e6:fd:d7:60:e1:4c:3e:80:6c:e8:93:8a:31:e8:96:
df:63:a7:9e:ef:96:0e:60:9f:97:57:83:74:8b:21:
3c:ea:c8:51:92:9c:da:9b:38:19:e0:e0:cb:fd:e8:
0e:b0:f0:24:ee:a5:6d:55:25:47:0a:47:ef:53:8d:
ef:e5:e5:94:34:57:6d:33:a6:8e:bd:7d:06:ad:cb:
f1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6F:F7:44:5A:50:08:0C:38:8D:34:D0:C9:A0:1B:FA:85:76:37:51
X509v3 Authority Key Identifier:
keyid:7F:C8:B2:86:B9:D1:BD:FB:E7:15:D6:EE:52:33:7A:30:2F:17:70:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8iyhrnRvfvnFdbuUjN6MC8XcEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ac9a3a-4986-4708-a8b7-fe2b5e5fc8a1/1/1-m_3RFpQCAw4jTTQyaAb-oV2N1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ac9a3a-4986-4708-a8b7-fe2b5e5fc8a1/1/f8iyhrnRvfvnFdbuUjN6MC8XcEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.192.0/21
Signature Algorithm: sha256WithRSAEncryption
15:de:f8:e7:dd:7a:59:87:f9:de:9c:08:51:b6:c0:bc:c7:a8:
12:38:db:7d:d6:a7:f0:2b:0d:7b:b9:e1:ff:e0:f7:2f:18:1a:
96:a7:45:48:8f:5e:4e:05:a5:ce:b0:a4:cd:78:66:e6:cb:ae:
fa:6c:9a:9c:ad:15:d8:a0:cb:61:1a:48:a0:d5:b7:f4:31:3b:
e0:8e:7a:57:f0:35:75:6a:bc:ae:60:5f:f6:8f:1d:e5:b9:cc:
75:6f:b4:93:e5:99:3a:d3:f3:57:ae:1d:e4:01:66:21:04:18:
a6:08:94:a5:0e:d1:d0:f5:bb:e1:44:42:a0:b4:cd:d6:72:e3:
6d:ac:a3:3d:26:4e:32:d1:13:77:fb:ab:bf:8a:34:a8:c1:7f:
2d:fd:cd:d1:27:4e:72:33:19:af:fd:16:ae:17:4e:2e:b1:28:
50:80:65:2a:c7:fd:03:ae:80:0d:b4:44:9d:2b:85:ab:aa:32:
0c:9e:39:2d:31:68:98:12:6a:fc:36:f0:c6:e7:8e:18:78:5d:
4e:28:50:38:97:75:cf:24:05:b6:c4:e9:0d:b3:9a:85:e5:ea:
ae:b0:9e:98:f4:ba:bb:92:a8:76:97:2c:ac:bf:d0:b3:df:c2:
4b:a9:33:24:a0:a9:7d:7a:29:07:65:11:2c:c3:fa:6e:ec:9a:
95:e3:6b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:39:41 2025 by rpki-client