Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/_vwpsD168LEY10nOJscaCt-SnZQ.roa
File: _vwpsD168LEY10nOJscaCt-SnZQ.roa (raw, json)
Hash identifier: 7NgtBWVv0I0a+Kdc2+Zug4/EaSIg4zdeCZaxikfq4DA=
Subject key identifier: FE:FC:29:B0:3D:7A:F0:B1:18:D7:49:CE:26:C7:1A:0A:DF:92:9D:94
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 0194266C26BFF9839CACAC23B6D44C4DFB52
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/_vwpsD168LEY10nOJscaCt-SnZQ.roa
Signing time: Thu 02 Jan 2025 09:50:09 +0000
ROA not before: Thu 02 Jan 2025 09:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206092
IP address blocks: 37.140.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:26:bf:f9:83:9c:ac:ac:23:b6:d4:4c:4d:fb:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Jan 2 09:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fefc29b03d7af0b118d749ce26c71a0adf929d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:78:2c:04:2f:84:aa:32:29:16:da:fd:eb:a7:
c9:58:51:4c:ab:8c:70:dd:86:e5:6c:59:cb:0e:35:
fd:28:d6:43:36:a0:da:40:ca:d0:c6:11:7d:db:6a:
d8:3a:45:42:b5:ac:6c:b0:a2:77:9a:d2:5c:06:d5:
0e:5d:6f:7a:4b:58:44:f2:a6:41:c2:45:8b:5a:de:
e3:c1:0a:87:ec:17:57:ce:19:24:5f:f0:a9:bf:37:
ec:ac:44:16:ca:4f:46:b6:6b:fa:16:3d:be:3a:c9:
67:8c:21:61:ce:81:6a:c2:3d:a0:00:c8:2e:92:e0:
95:d8:91:d1:af:70:8b:be:3e:bc:99:b3:cc:50:c7:
05:37:1f:19:13:ea:a1:1d:94:67:91:f9:98:ae:5b:
67:24:91:6d:18:d1:f5:b0:74:7d:76:3f:fe:74:17:
a4:b8:4d:f8:46:52:18:d6:da:13:19:b9:72:07:56:
3a:1f:7a:0b:c4:ad:64:07:f7:df:5d:ce:97:da:2d:
31:63:36:5b:0b:92:8b:54:2b:23:d7:b8:16:20:32:
37:8f:a9:ca:b8:7d:9a:d0:23:cb:e1:44:b9:32:a4:
3d:23:87:c2:36:5c:db:e9:56:07:bb:44:df:12:ff:
a2:3a:e7:ab:e7:e9:d5:70:49:89:c9:db:42:b8:a3:
9e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FC:29:B0:3D:7A:F0:B1:18:D7:49:CE:26:C7:1A:0A:DF:92:9D:94
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/_vwpsD168LEY10nOJscaCt-SnZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.223.0/24
Signature Algorithm: sha256WithRSAEncryption
77:26:34:47:8c:61:90:a2:67:1d:a1:b9:57:d7:c3:14:2f:4e:
13:90:91:5b:f4:88:dc:41:e7:ad:48:9f:05:34:25:cf:db:c5:
0a:81:e9:2f:56:4b:5e:60:9e:5d:13:33:b1:5c:bd:06:2b:49:
82:be:df:78:2a:a7:01:b3:d7:af:63:6b:af:6b:ad:56:a0:5b:
db:da:12:93:42:97:e0:53:38:bb:9c:18:66:d6:d0:32:c8:9c:
49:60:53:ac:b7:d5:d8:54:4f:f9:d8:f8:ac:f7:db:91:93:74:
fa:21:1f:dd:d6:41:5e:dc:b9:39:fd:f5:4a:43:fe:f1:fe:e3:
f1:81:75:d1:56:28:a2:5c:d6:a5:9f:43:fe:d1:49:c8:38:29:
f3:ce:fb:3f:e6:17:1e:b0:76:0e:78:34:24:93:33:90:35:b3:
67:d4:fa:69:43:d2:58:3c:c4:f6:98:5e:2d:d7:aa:88:84:9f:
97:c3:ac:16:84:ff:2c:15:bc:93:34:1d:1f:ef:60:30:4f:2c:
aa:3f:00:13:bc:2b:b9:fb:fd:0e:b7:52:c7:d9:a9:c7:3e:66:
f1:c8:10:9f:41:d3:f8:55:ca:18:52:73:0b:eb:3c:8e:9b:35:
95:2c:94:03:29:ec:68:ff:66:50:31:18:ca:a7:16:7d:52:3e:
e3:4c:1c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:22:51 2025 by rpki-client