Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/UkLoRo0mP_K3Dh8gkYYP1OxkE_I.roa
File: UkLoRo0mP_K3Dh8gkYYP1OxkE_I.roa (raw, json)
Hash identifier: Q3D4Rh06gP+xE8oXAtIwLH3P2XhdWnZQyb1Lpy85O7s=
Subject key identifier: 52:42:E8:46:8D:26:3F:F2:B7:0E:1F:20:91:86:0F:D4:EC:64:13:F2
Certificate issuer: /CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c
Certificate serial: 019421B1F807E70B4FFEB776CF4B68C8E280
Authority key identifier: D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/UkLoRo0mP_K3Dh8gkYYP1OxkE_I.roa
Signing time: Wed 01 Jan 2025 11:48:18 +0000
ROA not before: Wed 01 Jan 2025 11:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57928
IP address blocks: 37.157.11.0/24 maxlen: 24
2a14:6c40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f8:07:e7:0b:4f:fe:b7:76:cf:4b:68:c8:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c
Validity
Not Before: Jan 1 11:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5242e8468d263ff2b70e1f2091860fd4ec6413f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:59:c6:10:1b:04:ba:72:3c:49:71:ba:85:d3:
c2:a6:f5:c3:f5:8c:d7:b3:34:51:64:2c:72:06:ca:
27:fa:39:e0:74:55:fd:6a:cc:06:77:13:18:48:33:
88:aa:89:b3:bf:d4:03:fd:74:5e:e2:18:f8:47:a1:
81:b0:69:35:b4:c2:57:ae:ef:ca:21:ef:56:32:95:
da:5c:37:37:42:7d:60:14:68:64:33:78:83:2b:a3:
59:d2:da:a3:8e:84:15:8e:98:4f:64:56:d3:01:86:
d5:98:bc:a0:de:68:cc:fa:6b:10:30:a8:9d:67:6a:
a7:36:85:36:2b:31:71:4a:27:b8:a4:2e:a0:a4:6f:
25:ab:c5:4b:5d:0a:c3:06:76:bc:3b:9b:46:0b:38:
ef:7f:72:bc:00:5a:5c:5a:18:c2:aa:cb:b0:96:d3:
35:a9:dd:d4:fa:94:80:21:ea:a9:b2:78:f4:9a:82:
2f:d9:96:c5:35:71:f3:db:90:c3:48:cd:37:ef:35:
67:9b:66:2e:db:96:8a:e3:9c:1c:95:3a:25:3d:f0:
ea:e5:67:3c:1b:05:38:29:a3:b3:ea:d9:d0:15:27:
a2:11:7a:68:db:ef:87:17:1f:c9:4f:97:3b:69:5a:
bb:4f:96:d0:13:70:cc:22:a1:2b:af:68:15:27:74:
83:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:42:E8:46:8D:26:3F:F2:B7:0E:1F:20:91:86:0F:D4:EC:64:13:F2
X509v3 Authority Key Identifier:
keyid:D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/UkLoRo0mP_K3Dh8gkYYP1OxkE_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.11.0/24
IPv6:
2a14:6c40::/29
Signature Algorithm: sha256WithRSAEncryption
8b:90:a3:c8:94:b7:55:d0:ca:cb:54:93:03:e6:b7:bb:4f:31:
bc:2b:2e:7c:e7:0a:9f:86:3b:d6:a6:62:f2:76:88:f3:32:2f:
fd:bc:24:24:57:e1:ea:33:f2:c0:c9:fb:48:9a:a7:01:5a:d7:
5a:9b:b2:dc:4e:2b:59:cf:e8:92:91:ad:56:e5:4b:2a:6d:01:
30:59:25:89:6d:54:3f:b8:1f:46:1d:41:32:bf:d5:12:d7:1f:
7c:a0:28:32:a8:ce:96:0b:ad:35:2c:48:36:95:8b:a3:c9:63:
3f:bb:b7:4c:8c:7e:1b:68:12:bd:5d:bd:65:ca:5a:2b:87:76:
c9:23:f1:ef:7a:5d:f0:17:34:17:96:ee:18:cf:77:2b:3f:79:
80:2a:8a:3f:b4:b3:ae:49:d5:2c:9d:4e:fe:34:1d:0f:d4:35:
38:39:a6:fa:d7:fc:46:2f:1c:33:41:3f:c4:c9:36:38:7c:ed:
ca:fe:3a:51:7e:49:05:b1:7c:c2:fd:e8:79:d6:0a:4d:c8:de:
fe:a4:57:5c:cd:71:5e:34:0f:60:d0:48:3a:2c:ad:f2:0f:48:
c6:52:7b:af:e0:06:70:ca:dc:7a:0d:6b:a6:cf:2e:a1:99:ac:
bc:b1:ba:3c:5f:f3:e3:94:13:a7:e5:56:54:db:c1:64:bc:2b:
a5:1d:7b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:01:01 2025 by rpki-client