Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/389fpatMaLjGkJVaW-VmepTl2Vo.roa
File: 389fpatMaLjGkJVaW-VmepTl2Vo.roa (raw, json)
Hash identifier: e3TFBRXuxuNgl0j5Cw+BhrG6r3iRz3ft/yNjuYluKgs=
Subject key identifier: DF:CF:5F:A5:AB:4C:68:B8:C6:90:95:5A:5B:E5:66:7A:94:E5:D9:5A
Certificate issuer: /CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
Certificate serial: 0194228E386C468E64F996DF40EDD113152F
Authority key identifier: 2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/389fpatMaLjGkJVaW-VmepTl2Vo.roa
Signing time: Wed 01 Jan 2025 15:48:53 +0000
ROA not before: Wed 01 Jan 2025 15:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58002
IP address blocks: 37.208.64.0/20 maxlen: 20
77.247.232.0/21 maxlen: 21
92.241.0.0/19 maxlen: 19
2a00:c9c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:38:6c:46:8e:64:f9:96:df:40:ed:d1:13:15:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
Validity
Not Before: Jan 1 15:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfcf5fa5ab4c68b8c690955a5be5667a94e5d95a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d4:b9:bb:f7:8a:73:db:d1:40:27:40:a0:1f:
fb:be:60:e2:82:f5:69:fa:ab:3b:96:7b:d8:62:8c:
69:08:07:e3:39:25:84:15:7a:ac:5e:2a:c6:6e:ab:
92:5c:b6:4d:d2:ff:8f:67:b3:7c:b1:03:2c:6f:d4:
73:e5:e5:9a:0d:09:3f:56:ec:9d:b0:5f:10:e0:11:
85:5a:38:36:2c:93:e0:11:7d:b9:18:79:e0:95:d9:
e5:53:93:95:3b:5b:0c:aa:4c:e9:4f:86:27:15:21:
c0:a0:cc:e6:16:8e:75:59:7e:3f:af:51:ba:d1:cb:
80:a8:c4:82:60:09:16:c2:25:66:5e:ab:2b:ec:b0:
c1:d1:fd:22:b4:1d:4d:f2:97:4d:06:a9:9f:2b:8c:
4c:37:7e:0c:92:b7:58:29:bd:71:18:bc:8b:38:be:
09:65:41:d0:49:97:b3:c6:d7:9f:a6:75:ed:f7:cb:
04:6a:ba:4c:cd:34:77:0b:57:68:ea:b7:62:ef:a5:
64:32:f6:f3:7e:de:c6:0d:9c:26:50:c3:7b:38:f8:
2d:9c:2a:55:f9:47:cd:62:07:81:db:7d:8a:27:68:
28:41:9f:a0:b0:f0:21:36:40:50:1b:c8:7d:5e:e0:
ef:82:17:e4:30:75:22:79:1c:3e:12:53:2d:b6:cb:
97:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:CF:5F:A5:AB:4C:68:B8:C6:90:95:5A:5B:E5:66:7A:94:E5:D9:5A
X509v3 Authority Key Identifier:
keyid:2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/389fpatMaLjGkJVaW-VmepTl2Vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.208.64.0/20
77.247.232.0/21
92.241.0.0/19
IPv6:
2a00:c9c0::/32
Signature Algorithm: sha256WithRSAEncryption
5a:33:5a:3c:a2:a0:8c:07:6f:58:74:6d:af:ff:1a:0f:11:be:
4d:73:2f:45:17:44:1f:4d:51:84:1a:ea:93:9d:b9:b3:63:d6:
58:63:5a:8d:a4:55:59:a5:a3:17:a0:c7:52:76:ed:5b:09:9c:
44:95:77:03:75:52:bb:c1:a0:db:f2:f3:8c:19:d8:01:44:5d:
5f:da:f6:d7:a1:6b:9d:79:3e:92:fa:53:8b:7e:61:5d:80:4e:
59:92:b0:cd:0e:e0:38:19:0d:f5:e1:c7:a1:5f:e7:19:36:90:
83:88:20:d7:80:09:94:6b:48:64:76:a2:eb:f7:b7:83:57:2d:
e6:d1:82:d3:fc:85:ef:4e:04:26:7c:6e:ba:a0:75:07:f7:a2:
c2:ee:0c:35:8a:03:a0:51:6e:34:1e:10:05:1f:91:a3:4b:31:
65:9b:b4:25:b1:d5:c6:36:1a:e0:f1:1b:f0:71:c2:de:09:f2:
f9:d5:17:f8:c1:a8:32:b5:05:ee:0f:c5:a5:c2:45:9b:e0:36:
2e:01:6c:3b:b5:68:f2:79:89:bd:cd:be:2f:f1:65:b2:11:0a:
c7:28:b7:f0:d4:bc:e4:5e:d9:38:1b:58:1d:70:60:10:cb:c7:
d1:1c:02:a7:47:d4:bd:36:03:97:06:68:04:cd:5b:ca:f4:c9:
0a:f9:1b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:29:57 2025 by rpki-client