Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/uuMH9xwnTCchffmAJa-oKrLfAYc.roa
File: uuMH9xwnTCchffmAJa-oKrLfAYc.roa (raw, json)
Hash identifier: gi00uqlY9uodrepVtMPHWYj2E0gYu71bOvNoVXlRiVk=
Subject key identifier: BA:E3:07:F7:1C:27:4C:27:21:7D:F9:80:25:AF:A8:2A:B2:DF:01:87
Certificate issuer: /CN=ef78bc969a8307336ef4044f3dfef1fe136382b3
Certificate serial: 0194228E2CD99D2597A404995E887088E19A
Authority key identifier: EF:78:BC:96:9A:83:07:33:6E:F4:04:4F:3D:FE:F1:FE:13:63:82:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/uuMH9xwnTCchffmAJa-oKrLfAYc.roa
Signing time: Wed 01 Jan 2025 15:48:50 +0000
ROA not before: Wed 01 Jan 2025 15:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8749
IP address blocks: 37.32.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:2c:d9:9d:25:97:a4:04:99:5e:88:70:88:e1:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef78bc969a8307336ef4044f3dfef1fe136382b3
Validity
Not Before: Jan 1 15:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bae307f71c274c27217df98025afa82ab2df0187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:23:b7:ab:c2:3e:78:ac:12:24:e7:ce:e9:4d:
b6:74:61:f0:f7:27:84:df:b0:e4:8b:61:90:6c:31:
78:ad:a1:fb:8c:28:3b:ff:1b:6c:cb:7f:6a:90:35:
f0:03:5d:23:de:96:f4:54:a9:a3:cc:8b:92:48:30:
9a:69:2d:26:a2:57:4d:69:a2:31:2b:4d:d8:75:c8:
1b:59:fc:ca:6c:62:4c:99:85:44:da:09:24:24:e9:
f8:8e:37:9e:8e:3d:33:0d:ea:dc:81:2b:25:97:12:
5a:b2:0a:33:36:3f:a1:65:8d:a9:36:af:1e:c0:6b:
aa:c3:f2:3e:3b:dd:cc:60:1f:f8:8e:50:6d:ac:64:
b6:da:d4:2e:5f:da:7e:25:fd:7e:52:26:7c:04:39:
46:49:74:64:da:40:a5:19:ee:a0:8a:22:1a:6c:90:
f7:79:a5:60:2c:45:1a:c7:ff:11:bc:11:d4:77:8c:
6a:1e:b6:b5:d3:92:67:ad:7c:e4:f0:41:d4:d9:9e:
a0:46:2a:57:77:3f:6a:d8:fd:cc:6e:46:9f:4c:88:
90:e4:87:d6:c1:b2:1f:2a:30:63:09:8c:96:33:b7:
ce:3c:f7:5f:4c:8d:32:83:d4:87:5a:bf:ef:f4:db:
ef:05:fb:6d:01:95:fe:03:d3:0a:5a:b0:21:1f:ed:
a0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E3:07:F7:1C:27:4C:27:21:7D:F9:80:25:AF:A8:2A:B2:DF:01:87
X509v3 Authority Key Identifier:
keyid:EF:78:BC:96:9A:83:07:33:6E:F4:04:4F:3D:FE:F1:FE:13:63:82:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/uuMH9xwnTCchffmAJa-oKrLfAYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.101.0/24
Signature Algorithm: sha256WithRSAEncryption
85:f0:f6:9a:0b:e8:7f:ee:f3:28:ce:f8:99:d1:f8:3a:3f:2a:
2e:7b:99:47:e0:f7:4d:a2:9b:c0:ce:ea:22:d3:3b:cc:55:96:
4a:26:d5:a7:85:06:a4:30:b7:18:41:d4:f0:5d:8d:6b:64:cb:
b0:96:1c:48:2d:6b:41:fb:c3:5d:98:04:33:81:86:41:84:cf:
9f:88:eb:3b:0c:19:49:6c:a9:07:18:4c:2a:06:95:df:24:56:
86:4b:4b:db:c9:75:33:3c:d5:b0:a9:83:83:7c:31:63:27:7d:
3c:57:2e:4c:0f:57:9d:f8:f6:b2:50:32:02:89:c5:e9:10:e6:
7d:0a:a3:dc:1f:2c:f8:46:aa:3a:1c:2c:33:0b:16:af:86:65:
1d:d3:00:8a:8c:99:94:a7:3d:4f:38:0f:62:35:54:96:8b:c5:
9e:b1:35:e9:45:14:d3:d8:3f:f5:2c:f7:83:10:69:58:c0:9c:
a9:8d:37:c2:bd:1f:4f:11:4f:3a:ee:1e:9c:3f:a8:b4:40:dc:
57:6d:62:13:b6:05:0d:8e:2d:76:5a:de:18:86:ed:fd:7e:77:
26:2f:ca:54:3d:47:06:9a:4c:47:5f:16:51:60:ce:e8:86:b3:
ba:ce:ca:0c:50:b0:e3:65:ce:46:38:f2:0c:90:47:f8:db:b4:
16:02:bc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:55:44 2025 by rpki-client