Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/ZI4Q9kO1bTra3EedEOX8SFlE0uE.roa
File: ZI4Q9kO1bTra3EedEOX8SFlE0uE.roa (raw, json)
Hash identifier: ewlUFRb4YNwiqjWWGmDY++Dep/mg4M2HEOJdKGJhKsI=
Subject key identifier: 64:8E:10:F6:43:B5:6D:3A:DA:DC:47:9D:10:E5:FC:48:59:44:D2:E1
Certificate issuer: /CN=ecdf3696cf74ea955be383874e39a727aa6824f1
Certificate serial: 019422FB7013F7830895F95AEB5F77E04410
Authority key identifier: EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/ZI4Q9kO1bTra3EedEOX8SFlE0uE.roa
Signing time: Wed 01 Jan 2025 17:48:11 +0000
ROA not before: Wed 01 Jan 2025 17:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210733
IP address blocks: 37.72.137.0/24 maxlen: 24
2a11:3040::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:70:13:f7:83:08:95:f9:5a:eb:5f:77:e0:44:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdf3696cf74ea955be383874e39a727aa6824f1
Validity
Not Before: Jan 1 17:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=648e10f643b56d3adadc479d10e5fc485944d2e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:22:33:dc:db:ad:70:c0:d1:35:d9:38:95:11:
d1:17:36:0d:21:c9:7a:33:aa:93:59:a1:e1:26:ea:
d5:c6:ef:b6:78:05:bb:91:39:44:e2:96:ef:2a:51:
5a:c0:39:8f:ac:15:40:85:6e:ea:3c:5b:ee:c8:a2:
55:8b:aa:3d:12:40:0c:df:84:3f:7f:a4:0d:d0:82:
cb:ae:fc:14:d1:ca:60:20:ec:48:95:82:62:3f:4e:
ef:42:a7:47:da:20:12:ab:f4:d2:7e:84:51:11:c1:
b6:4b:3f:42:c5:93:77:d0:9c:34:f5:27:1f:52:e5:
a8:85:13:d0:9e:6f:93:06:28:b9:8e:06:6c:5b:68:
7b:30:46:0f:5c:c2:00:29:6e:0d:ad:27:df:78:89:
cd:ae:52:44:d4:59:4a:c2:46:6d:42:35:c9:2f:ee:
dc:5b:22:0a:0c:56:0d:01:c1:b0:9c:c2:96:37:fe:
49:e5:16:e8:b3:3c:91:dd:bf:2c:02:ee:54:1e:1e:
b2:7e:fc:8b:21:7a:56:dc:e1:8a:a9:ca:da:c6:83:
49:32:a8:0c:fb:a0:0a:71:c9:b5:a2:5e:71:9f:9b:
5e:71:4b:7d:20:2c:73:bb:3d:69:bf:2f:2d:fa:fe:
4c:1e:3c:a4:29:8b:74:b8:88:4d:bf:f3:c0:86:c3:
41:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8E:10:F6:43:B5:6D:3A:DA:DC:47:9D:10:E5:FC:48:59:44:D2:E1
X509v3 Authority Key Identifier:
keyid:EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/ZI4Q9kO1bTra3EedEOX8SFlE0uE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.137.0/24
IPv6:
2a11:3040::/29
Signature Algorithm: sha256WithRSAEncryption
62:fb:95:0c:4b:bf:84:49:55:d4:84:7b:16:ce:bf:fb:5b:59:
9b:bc:db:b5:ed:30:dc:ec:3b:0a:5e:4e:b9:27:7c:df:f2:81:
d2:10:b8:e4:c0:21:ac:3d:95:73:85:b5:3d:9a:9a:07:4f:76:
d3:30:08:9d:d0:ba:00:7a:fa:72:83:11:a2:26:be:03:1a:fe:
ce:b7:9e:7b:ef:2f:1c:ba:5a:5f:3f:3c:f7:57:27:d4:40:d0:
88:ed:a6:4f:5a:bb:7e:c8:cb:5a:c8:3f:ca:fb:35:ac:84:1e:
fe:f8:34:20:84:fd:50:89:e4:12:71:d2:fe:c5:85:d0:0d:eb:
ff:e5:19:cc:79:9c:39:51:3c:8e:3a:7f:53:14:bd:98:06:36:
b4:cc:a6:5b:0f:d3:c5:73:b7:39:b8:1b:68:43:c6:bd:68:20:
f6:7f:f5:c7:97:43:8f:a5:71:02:27:bb:ea:a8:4c:d8:51:64:
b7:3d:c5:a5:97:b9:27:78:bc:33:74:1d:e9:76:75:06:54:25:
e3:be:fa:7e:8d:ec:8c:41:2e:62:2c:91:9f:ca:bb:c2:b4:e3:
2c:2a:16:16:f1:b5:99:e4:3c:66:a3:b8:92:90:42:c9:0e:71:
74:80:2a:ee:42:e7:fd:89:66:3b:47:f8:c8:8c:6a:06:75:85:
d5:31:8f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:56:00 2025 by rpki-client