Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/2KuUzLCv3PyxebEYjGPgT5VXJ00.roa
File: 2KuUzLCv3PyxebEYjGPgT5VXJ00.roa (raw, json)
Hash identifier: XmhjXdQGkgD5j9EG5FisxLqYz1hfmvpPHcJGVDqYWyA=
Subject key identifier: D8:AB:94:CC:B0:AF:DC:FC:B1:79:B1:18:8C:63:E0:4F:95:57:27:4D
Certificate issuer: /CN=b61bc97b98276eb3babd9e7aa67e2705ae11e658
Certificate serial: 01941F8C4884F3CE42BE8AEE226FFD133387
Authority key identifier: B6:1B:C9:7B:98:27:6E:B3:BA:BD:9E:7A:A6:7E:27:05:AE:11:E6:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thvJe5gnbrO6vZ56pn4nBa4R5lg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/2KuUzLCv3PyxebEYjGPgT5VXJ00.roa
Signing time: Wed 01 Jan 2025 01:47:54 +0000
ROA not before: Wed 01 Jan 2025 01:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207630
IP address blocks: 37.32.103.0/24 maxlen: 24
194.76.156.0/22 maxlen: 24
2a04:55c0::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:48:84:f3:ce:42:be:8a:ee:22:6f:fd:13:33:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61bc97b98276eb3babd9e7aa67e2705ae11e658
Validity
Not Before: Jan 1 01:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8ab94ccb0afdcfcb179b1188c63e04f9557274d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:25:91:0d:6d:c3:50:a5:97:86:b6:39:0f:05:
50:1f:02:be:97:28:fd:38:1e:81:d2:9f:fc:21:5e:
a8:ce:0a:46:80:6e:2d:4e:4c:02:da:aa:bf:47:80:
3d:e4:01:e1:23:b9:08:b4:54:31:47:da:cb:18:a7:
61:06:5c:32:de:07:f8:fb:b1:a5:9f:8a:7a:f5:10:
ab:8c:dd:00:44:8f:8d:62:11:29:9d:98:21:70:9a:
fc:7e:e6:86:73:1d:e0:85:c0:bd:14:10:f4:27:95:
72:14:32:82:79:aa:16:eb:d2:04:1a:3b:42:82:e7:
99:a7:b4:4b:ec:6b:58:ec:b4:b4:26:6b:97:1b:09:
85:50:e0:ab:ac:a8:5f:64:fc:e2:1b:9a:23:23:69:
3b:42:f5:05:70:dc:ff:67:e8:93:da:c8:2e:8b:13:
d3:34:a6:38:e8:3e:e0:bf:4c:42:e3:cf:0e:01:ba:
0b:3e:f2:99:a3:b8:2e:1c:1f:c7:95:6f:b5:47:34:
c5:b7:7f:59:9d:ec:6e:ff:9b:8f:99:74:d8:f7:e5:
7e:19:ae:9e:84:c4:f3:1f:04:db:e5:46:a1:b6:61:
d4:fa:7e:97:03:b8:33:60:e7:d2:67:ac:0b:33:e1:
79:1f:df:86:c1:60:d7:7a:a6:dd:66:4e:86:b8:fb:
8e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AB:94:CC:B0:AF:DC:FC:B1:79:B1:18:8C:63:E0:4F:95:57:27:4D
X509v3 Authority Key Identifier:
keyid:B6:1B:C9:7B:98:27:6E:B3:BA:BD:9E:7A:A6:7E:27:05:AE:11:E6:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thvJe5gnbrO6vZ56pn4nBa4R5lg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/2KuUzLCv3PyxebEYjGPgT5VXJ00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.103.0/24
194.76.156.0/22
IPv6:
2a04:55c0::/29
Signature Algorithm: sha256WithRSAEncryption
31:52:66:ce:e9:ed:2e:0c:c6:80:5d:56:16:07:e7:2e:1c:c8:
ec:3d:05:92:19:a7:d5:91:37:6b:6d:36:ed:cf:b5:71:d8:7a:
c7:d4:9d:a5:00:02:ee:1b:90:32:7e:47:5b:53:15:41:a2:c1:
8a:45:00:58:ce:ed:57:c8:06:b3:75:54:0b:ce:71:b1:cf:74:
87:b4:f4:00:93:60:f1:eb:27:78:a0:20:ae:53:9d:2e:8e:79:
92:9b:0e:94:69:f6:15:8f:d0:4c:76:07:ba:f4:48:a4:54:e0:
e2:de:60:e3:40:86:1d:e5:65:6d:7d:dd:34:8f:0b:f5:93:89:
6a:67:a6:d2:f6:a9:24:51:49:de:21:3c:9e:74:ee:43:a4:cb:
32:13:20:1f:d9:1e:81:01:51:56:f0:5a:e5:0b:62:7f:be:1f:
b8:6e:ed:fa:69:41:5c:27:1d:be:4e:e3:23:7d:e2:76:5c:1a:
01:c6:9d:66:24:be:1f:da:9b:4a:e6:55:1c:90:28:a1:c6:64:
ba:eb:a1:38:b6:e2:f8:10:c1:c2:62:c8:da:ee:26:da:26:ff:
26:cd:d3:24:a7:20:f2:5b:19:89:6d:2c:8b:96:86:6b:b2:53:
79:f1:e9:a7:3d:a7:e8:49:44:c5:39:0e:ad:13:b9:43:2b:c5:
96:26:0f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:54:15 2025 by rpki-client