Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/9MVV1yAh59mTgEP_W258bMa49_o.roa
File: 9MVV1yAh59mTgEP_W258bMa49_o.roa (raw, json)
Hash identifier: iCN3glju44EdxjBrGRw+NZhFmqg56yUA7pS6/PNweyY=
Subject key identifier: F4:C5:55:D7:20:21:E7:D9:93:80:43:FF:5B:6E:7C:6C:C6:B8:F7:FA
Certificate issuer: /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Certificate serial: 019427481E41C36D4B425B56BEC45286F174
Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/9MVV1yAh59mTgEP_W258bMa49_o.roa
Signing time: Thu 02 Jan 2025 13:50:25 +0000
ROA not before: Thu 02 Jan 2025 13:50:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13099
IP address blocks: 37.32.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:1e:41:c3:6d:4b:42:5b:56:be:c4:52:86:f1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Validity
Not Before: Jan 2 13:50:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4c555d72021e7d9938043ff5b6e7c6cc6b8f7fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:21:e0:47:2e:14:a3:b9:e9:bd:ed:59:85:05:
48:7b:82:9a:db:ae:90:91:84:82:0d:df:74:51:8e:
8f:ca:5a:2c:c0:8b:f4:56:a8:6a:d7:32:07:0a:ba:
e5:36:86:1f:83:b8:a5:e2:4e:1a:92:32:39:59:ef:
4e:82:5c:a6:78:03:5f:08:23:4c:15:0d:50:02:45:
85:52:54:a9:7f:85:cc:27:92:cc:7a:c4:14:6c:97:
db:9a:01:a1:07:84:07:f8:ad:d1:62:7f:5a:c2:60:
0d:6c:14:35:5d:dd:50:db:32:c5:cc:04:81:11:ca:
40:5c:0b:b9:b3:32:b8:dd:91:42:6f:9d:27:6b:be:
ca:42:09:0d:27:99:91:17:73:c8:6d:1e:f3:20:a1:
84:23:51:ea:cc:6d:a5:66:53:a8:dc:19:75:54:57:
72:b4:f5:c6:29:7b:c7:cb:58:42:bb:d6:33:6c:2d:
c5:da:c6:1f:d4:7d:27:4b:a6:97:f4:37:15:e2:94:
76:c3:74:44:65:56:ee:d1:52:6c:7c:60:0c:79:77:
2d:f5:74:ef:37:e0:d6:7f:60:41:11:f3:ae:cc:3d:
8e:55:11:2b:b3:5c:45:11:e8:dc:4b:72:89:a6:e3:
b0:d1:38:b8:68:ab:e7:64:2c:9c:1d:4b:09:ec:45:
8b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C5:55:D7:20:21:E7:D9:93:80:43:FF:5B:6E:7C:6C:C6:B8:F7:FA
X509v3 Authority Key Identifier:
keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/9MVV1yAh59mTgEP_W258bMa49_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.75.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:cc:8b:53:f1:eb:40:86:23:f1:9d:d2:86:e3:f7:1b:3b:3a:
ad:78:eb:a4:56:ee:55:89:1d:17:7e:d1:ec:18:e1:6d:80:55:
24:2a:32:f9:8a:9a:3f:3e:f0:8b:43:6b:54:cf:bb:2b:5f:25:
65:9b:6e:0f:20:85:a0:9e:31:93:33:20:8c:20:b6:16:71:96:
b3:1e:92:be:f1:8f:64:60:ab:1b:30:a9:cc:d2:2b:b1:38:94:
93:dd:ad:9a:fd:d3:26:0c:34:57:2a:3f:60:d7:ef:7c:7c:1b:
a1:19:44:71:c5:16:53:a3:61:12:0b:43:f6:85:ba:cd:4c:13:
2e:08:2e:9f:60:b9:b6:3f:52:db:6e:21:59:e6:36:73:2f:70:
f3:52:e9:d9:f3:bb:c0:52:d0:3c:11:eb:98:7f:37:d1:d1:30:
9e:80:91:37:0f:f9:50:7e:10:db:f1:7e:90:c6:3c:46:6b:84:
76:24:77:9a:07:0b:9a:f2:cf:33:4e:e7:a2:4b:77:9a:c8:f7:
44:3d:f4:34:49:2e:c7:78:79:95:0a:28:59:20:2f:39:14:83:
9f:29:ad:36:76:39:66:58:05:66:d6:86:35:ac:31:2e:08:fa:
d2:f4:c6:47:51:9f:4e:59:8e:40:8b:cc:c2:33:b8:aa:58:cb:
7f:09:f7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:53:01 2025 by rpki-client