Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/ac9a3a-4986-4708-a8b7-fe2b5e5fc8a1/1/5bzfih1KpfUYs_mBIo4Uqo2so7A.roa
File: 5bzfih1KpfUYs_mBIo4Uqo2so7A.roa (raw, json)
Hash identifier: sKf8MeBydtsH+2/GrOGEj40FLyj41ErfCcWqRKTbzLA=
Subject key identifier: E5:BC:DF:8A:1D:4A:A5:F5:18:B3:F9:81:22:8E:14:AA:8D:AC:A3:B0
Certificate issuer: /CN=7fc8b286b9d1bdfbe715d6ee52337a302f177042
Certificate serial: 0194FE63D36E2DA643189C7E324665222C12
Authority key identifier: 7F:C8:B2:86:B9:D1:BD:FB:E7:15:D6:EE:52:33:7A:30:2F:17:70:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f8iyhrnRvfvnFdbuUjN6MC8XcEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/ac9a3a-4986-4708-a8b7-fe2b5e5fc8a1/1/5bzfih1KpfUYs_mBIo4Uqo2so7A.roa
Signing time: Thu 13 Feb 2025 08:19:02 +0000
ROA not before: Thu 13 Feb 2025 08:19:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 37.252.192.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fe:63:d3:6e:2d:a6:43:18:9c:7e:32:46:65:22:2c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fc8b286b9d1bdfbe715d6ee52337a302f177042
Validity
Not Before: Feb 13 08:19:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5bcdf8a1d4aa5f518b3f981228e14aa8daca3b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:21:44:26:92:73:6c:57:e9:e1:07:2d:2c:e4:
80:9c:ff:9c:94:eb:5a:5b:c4:2a:ef:15:82:d9:a9:
58:a3:36:dd:39:eb:f2:89:a2:0b:94:9a:90:ac:d8:
35:6e:f4:9c:5c:85:5e:a3:70:cc:8c:32:86:3c:15:
62:08:87:00:60:d5:1f:01:c8:18:48:88:c3:39:10:
00:11:e0:ea:f0:4c:b7:7b:3e:07:db:37:b7:2e:a4:
42:40:69:a6:15:a3:81:39:91:e6:9c:d9:6a:ca:df:
96:7a:e9:35:78:3e:84:ee:72:e3:e0:94:bf:e7:70:
9d:c5:19:44:26:9f:4b:1c:47:b0:74:6c:18:20:44:
ee:b4:49:56:44:2d:0e:65:92:1b:6c:22:62:81:99:
1a:05:2c:ba:95:70:37:dc:23:46:ee:32:e2:97:28:
e1:75:1a:6b:6d:a4:70:67:37:b4:be:dc:86:d5:f8:
1e:34:96:fb:a7:84:4f:a8:48:a9:7e:da:b8:25:f8:
0c:2f:91:6b:1b:f3:9e:96:8c:1a:dc:a9:29:a2:75:
65:d8:9f:33:2a:d6:44:47:0a:c0:79:0e:7f:dc:97:
43:7c:6d:42:ac:a0:c4:d6:65:2d:13:04:0c:da:b7:
7c:0a:2c:70:7a:68:1f:9b:5a:20:dc:4f:48:8d:ff:
9c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BC:DF:8A:1D:4A:A5:F5:18:B3:F9:81:22:8E:14:AA:8D:AC:A3:B0
X509v3 Authority Key Identifier:
keyid:7F:C8:B2:86:B9:D1:BD:FB:E7:15:D6:EE:52:33:7A:30:2F:17:70:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8iyhrnRvfvnFdbuUjN6MC8XcEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ac9a3a-4986-4708-a8b7-fe2b5e5fc8a1/1/5bzfih1KpfUYs_mBIo4Uqo2so7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ac9a3a-4986-4708-a8b7-fe2b5e5fc8a1/1/f8iyhrnRvfvnFdbuUjN6MC8XcEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.192.0/21
Signature Algorithm: sha256WithRSAEncryption
41:35:84:58:65:71:0d:0a:ed:91:11:3f:ec:b2:61:f6:55:c3:
df:2d:5f:a7:b4:b3:0d:17:09:5f:ab:9b:9c:44:5c:88:e9:1d:
1a:8f:e1:ff:dc:5d:0d:6a:b0:65:bd:f8:8d:9d:79:7f:c0:34:
7f:7c:20:4e:0a:75:5c:30:5a:46:58:8e:88:50:a0:8c:cd:07:
3b:a1:b8:5d:1f:7c:f3:1f:a2:8a:1e:1c:98:b8:5d:6b:ac:a0:
52:3e:19:b7:3b:ac:50:8a:15:20:43:91:12:58:aa:fe:81:36:
8c:79:ee:7e:58:3d:fb:9c:95:aa:31:5b:ef:2e:0d:b1:c9:9c:
76:83:ff:ea:6e:02:10:47:a7:5d:10:59:c6:42:29:74:82:53:
2e:fb:57:93:8f:36:a5:75:54:f8:4a:66:18:0f:60:7e:d0:c6:
2b:a9:b8:60:ab:41:75:60:c2:3b:79:04:29:48:64:4f:c3:42:
73:bf:08:11:74:75:e0:14:2c:6a:2b:48:e0:28:06:5b:ea:e1:
18:78:8f:42:95:b1:f0:32:b3:cb:80:59:95:5b:5b:21:eb:69:
f1:c9:00:3b:d3:ac:cf:9d:74:b4:40:e2:da:45:d3:40:fa:83:
11:02:13:e2:73:f7:36:13:35:d8:fd:b9:a2:e8:b3:32:5d:1f:
d1:d2:b0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:45:41 2025 by rpki-client