Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/8MA87xtZZH4blNN7ljK8ECsUe7c.roa
File: 8MA87xtZZH4blNN7ljK8ECsUe7c.roa (raw, json)
Hash identifier: x/OfLayawCptHxvyhoaHaoE0ADY/ycq4IXhQCadpAd0=
Subject key identifier: F0:C0:3C:EF:1B:59:64:7E:1B:94:D3:7B:96:32:BC:10:2B:14:7B:B7
Certificate issuer: /CN=bd9c80cbe5d57972345f5fa5eba35c86889e55ca
Certificate serial: 019427B3CB8D41E967741F2A3CC856D1DD9B
Authority key identifier: BD:9C:80:CB:E5:D5:79:72:34:5F:5F:A5:EB:A3:5C:86:88:9E:55:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/8MA87xtZZH4blNN7ljK8ECsUe7c.roa
Signing time: Thu 02 Jan 2025 15:48:01 +0000
ROA not before: Thu 02 Jan 2025 15:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61006
IP address blocks: 37.252.112.0/21 maxlen: 21
185.39.200.0/22 maxlen: 22
2a00:d740::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:cb:8d:41:e9:67:74:1f:2a:3c:c8:56:d1:dd:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd9c80cbe5d57972345f5fa5eba35c86889e55ca
Validity
Not Before: Jan 2 15:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0c03cef1b59647e1b94d37b9632bc102b147bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7d:f7:c0:ed:7a:bd:78:22:8b:04:57:d3:b8:
bf:11:1a:9e:b2:57:c8:f1:dd:02:5f:82:4e:3c:f7:
f5:ff:a5:64:eb:ab:0b:40:43:39:3b:a3:5a:de:67:
0c:33:d6:d7:bc:35:1a:e4:1b:e3:79:d3:85:5b:8a:
57:73:34:87:b2:1d:a6:8a:5c:60:7f:c3:b2:c9:64:
03:4d:09:6f:d4:c7:d3:ff:78:ed:6d:73:a9:e6:17:
8b:15:aa:61:93:f6:68:de:75:86:93:3d:8e:10:e5:
8b:85:33:f1:9f:18:b9:a2:6f:a3:d8:e6:65:52:3e:
27:88:42:4f:dc:7f:6e:14:e7:45:67:a6:57:21:15:
f5:3f:64:ca:56:10:ca:20:f7:3f:95:e3:d7:c2:45:
09:f5:a4:86:89:99:c9:44:e7:9d:4f:e4:0e:97:ad:
38:7b:60:38:ff:c2:21:1b:f7:23:12:bc:89:da:9d:
5a:2e:2f:5a:6a:be:3e:59:51:ff:b9:17:5d:07:ba:
49:d9:f6:3e:bb:c4:c6:12:ff:e6:e9:cd:a5:84:21:
54:81:dc:b5:6e:bb:07:5e:70:20:25:9f:2f:7b:2b:
22:fb:80:3d:34:8d:41:8e:52:f8:ca:92:77:fb:b8:
89:12:f6:90:5f:63:29:72:b6:32:b1:88:c5:41:3e:
25:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C0:3C:EF:1B:59:64:7E:1B:94:D3:7B:96:32:BC:10:2B:14:7B:B7
X509v3 Authority Key Identifier:
keyid:BD:9C:80:CB:E5:D5:79:72:34:5F:5F:A5:EB:A3:5C:86:88:9E:55:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/8MA87xtZZH4blNN7ljK8ECsUe7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.112.0/21
185.39.200.0/22
IPv6:
2a00:d740::/29
Signature Algorithm: sha256WithRSAEncryption
97:35:07:6a:d5:be:00:14:8a:ba:25:f8:dd:6b:ac:da:80:68:
76:3a:7a:1f:d7:fd:cf:d1:e3:a0:4e:06:2b:6c:af:a9:16:a1:
4a:6d:af:a9:51:c9:9e:fe:d5:d1:54:1e:7c:0f:b3:78:78:09:
10:0a:74:95:9c:7a:c7:c0:61:88:2c:fa:31:5c:d8:10:c5:d0:
38:2e:24:45:ce:2e:10:f7:99:46:f7:1b:14:93:7d:85:e7:84:
63:01:41:a7:00:fd:07:f7:29:48:51:6d:f1:b1:3a:ed:67:96:
d2:f8:d8:38:4e:d6:19:65:34:c2:08:9f:49:c4:97:3c:5f:8d:
1f:09:ba:e5:47:81:82:3f:78:c4:7e:cb:c6:32:d1:35:c1:1a:
7f:3a:f2:38:17:bc:85:49:7a:39:b7:99:79:4c:50:42:85:3d:
fe:25:b4:54:e5:6e:27:0f:3b:09:0c:59:f8:45:52:ef:8c:d0:
c9:7e:b9:fc:93:36:c5:1b:79:23:46:bc:10:65:8d:c9:55:cc:
47:6f:d0:0e:2c:1c:ae:43:19:76:38:3d:5f:ff:99:5d:db:24:
28:e3:f2:96:3d:a3:3c:6b:7f:bd:77:5d:c7:bb:43:8c:4a:d9:
5c:67:35:5a:73:02:2f:2e:b5:f9:dd:8c:1a:53:04:0c:12:0c:
d4:7a:19:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:18:50 2025 by rpki-client