Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/jSQ0uED3Px2xrAAYhXHkDb0Ij_s.roa
File: jSQ0uED3Px2xrAAYhXHkDb0Ij_s.roa (raw, json)
Hash identifier: dCq52P7Yb/gWqvUXElUT6cMg1EUH+47g7scN8nXQaZo=
Subject key identifier: 8D:24:34:B8:40:F7:3F:1D:B1:AC:00:18:85:71:E4:0D:BD:08:8F:FB
Certificate issuer: /CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Certificate serial: 019424B27C1EA9F0FC7DE1BB6B0FBE4E3447
Authority key identifier: 9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/jSQ0uED3Px2xrAAYhXHkDb0Ij_s.roa
Signing time: Thu 02 Jan 2025 01:47:44 +0000
ROA not before: Thu 02 Jan 2025 01:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61060
IP address blocks: 37.44.8.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:7c:1e:a9:f0:fc:7d:e1:bb:6b:0f:be:4e:34:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Validity
Not Before: Jan 2 01:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d2434b840f73f1db1ac00188571e40dbd088ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:03:cb:2a:2f:87:27:8d:ef:75:ff:a3:d0:32:
26:9b:39:e8:42:32:f5:c3:8d:e7:c7:c9:a4:52:05:
ec:42:fb:b1:eb:2b:e7:73:e5:76:61:c2:22:8e:3e:
1f:3d:c5:84:00:84:87:3c:88:4f:e8:43:0d:01:46:
57:2b:d5:c3:a7:32:ad:1f:19:42:f6:3e:72:e0:b7:
8e:35:9b:fb:da:b4:63:27:43:44:de:09:3e:5e:c0:
df:1d:68:94:34:1e:09:a6:2e:dd:55:e9:8c:79:87:
65:b9:22:62:0b:3d:fd:17:9d:cd:c3:df:e5:91:75:
ed:89:c5:d8:89:7f:fb:6b:08:9e:d2:4d:c4:a9:ad:
f4:94:90:e0:b9:cf:3b:02:ed:1f:23:aa:5f:d8:e5:
87:a9:2f:79:b9:72:50:1f:f4:2d:73:d5:db:d4:3d:
2e:55:9b:86:40:1e:54:c6:85:36:b6:98:a1:d7:0e:
31:c7:d0:90:da:9c:c8:3e:49:03:93:b0:cb:e3:fd:
8e:da:9a:c8:08:1e:3e:28:25:53:e9:6c:28:8a:a7:
c7:72:62:79:ef:26:8c:eb:03:22:36:d8:c9:99:15:
9f:de:4c:3b:da:1f:60:2f:90:7d:07:db:45:6e:ac:
6b:78:7f:e6:b6:06:e8:8f:de:38:a7:9b:b1:64:ab:
a2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:24:34:B8:40:F7:3F:1D:B1:AC:00:18:85:71:E4:0D:BD:08:8F:FB
X509v3 Authority Key Identifier:
keyid:9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/jSQ0uED3Px2xrAAYhXHkDb0Ij_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.8.0/21
Signature Algorithm: sha256WithRSAEncryption
a2:b3:dd:17:77:05:21:95:cf:ce:53:6f:8e:30:b2:ee:dd:42:
ac:89:85:62:3a:55:cc:4b:1a:33:86:79:c1:45:1f:59:38:10:
74:9d:07:eb:96:8b:0b:b0:b9:44:e3:d9:cd:75:eb:8c:48:60:
e1:59:fe:91:58:dd:76:bb:3a:ec:26:e8:1f:bd:1c:b7:91:95:
90:9f:91:3b:29:3b:6d:5c:45:86:75:bc:3b:1f:1c:b2:96:46:
04:94:8e:55:30:76:43:43:ff:63:2f:8d:b6:46:32:50:af:66:
b4:6d:b0:af:fb:44:ce:61:60:97:1a:59:fd:32:a7:b7:5f:d8:
d1:a0:8d:85:1e:48:30:ac:64:e6:a5:91:f8:ca:cb:01:71:c7:
9c:75:5e:0b:b1:59:ae:ef:40:77:dd:9f:75:7a:a5:e9:a3:4f:
bf:a2:89:40:4e:3c:42:a1:b1:44:df:1e:b2:fd:31:c6:d7:61:
e8:3f:6d:07:08:bd:95:0f:79:cf:d4:b3:50:10:53:de:73:19:
7f:b4:c4:ba:6a:9a:9a:1e:f3:7e:75:18:0a:79:16:73:8a:2e:
dd:f8:bf:2d:bf:33:0a:05:8b:54:4c:0a:fc:a7:0a:c0:88:5d:
2c:84:4f:c8:0a:cb:18:ec:73:dc:1f:59:0d:91:6f:6c:77:77:
bd:f7:60:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:52:31 2025 by rpki-client