Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/_YBrb9GHmCpqMjy8GFwAvwaPx90.roa
File: _YBrb9GHmCpqMjy8GFwAvwaPx90.roa (raw, json)
Hash identifier: XWiWSnDHqy5A+xwKGiqSBQrfe6N7eyh2EySgoK4VNNw=
Subject key identifier: FD:80:6B:6F:D1:87:98:2A:6A:32:3C:BC:18:5C:00:BF:06:8F:C7:DD
Certificate issuer: /CN=1904ce28eae682c97acd2d862fee2897c3b096fd
Certificate serial: 019424B3F6553526F340F762DC4872863FA2
Authority key identifier: 19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/_YBrb9GHmCpqMjy8GFwAvwaPx90.roa
Signing time: Thu 02 Jan 2025 01:49:20 +0000
ROA not before: Thu 02 Jan 2025 01:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214528
IP address blocks: 37.114.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:f6:55:35:26:f3:40:f7:62:dc:48:72:86:3f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1904ce28eae682c97acd2d862fee2897c3b096fd
Validity
Not Before: Jan 2 01:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd806b6fd187982a6a323cbc185c00bf068fc7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:87:6b:04:8b:49:20:dd:6b:de:1f:48:10:07:
da:bd:02:18:cf:73:16:ed:ff:99:37:8e:84:cb:ea:
a4:dd:2a:56:88:66:ba:15:c8:91:7c:51:0a:0c:d9:
15:78:bf:41:c0:ef:3d:7c:b3:9b:1d:52:b6:6d:f3:
74:37:d2:2d:70:2d:b6:c3:f1:2a:af:d4:b9:70:06:
60:28:59:58:86:ef:a5:e6:ce:0f:0c:4b:ca:eb:6c:
7a:d9:9a:62:b7:95:14:8c:4e:89:77:4f:f0:0b:84:
ae:03:82:a7:07:4b:3b:9d:a3:f4:d1:02:3c:69:63:
02:52:30:4f:e1:78:f7:6d:35:50:0a:b0:f0:8c:23:
31:75:14:e5:d7:f0:0e:d9:d0:b2:bf:da:08:98:67:
e7:06:ed:68:cb:c1:e8:07:0e:4b:75:c1:af:33:73:
05:d7:51:ca:37:c9:76:68:3c:c9:14:53:4f:fc:49:
18:6e:01:e6:27:4a:eb:ba:91:66:f6:d6:45:e0:8b:
1c:b5:f3:2b:ae:e3:f1:8d:a9:b1:cd:22:32:08:37:
a2:c3:19:0a:34:fa:e7:0c:fc:e9:01:36:87:2e:05:
f2:dc:70:66:6c:7f:28:57:50:f5:5a:7b:a2:5b:4e:
01:d7:68:55:ae:3f:77:32:39:48:5d:62:51:f3:83:
39:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:80:6B:6F:D1:87:98:2A:6A:32:3C:BC:18:5C:00:BF:06:8F:C7:DD
X509v3 Authority Key Identifier:
keyid:19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/_YBrb9GHmCpqMjy8GFwAvwaPx90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.176.0/20
Signature Algorithm: sha256WithRSAEncryption
40:af:0c:b1:cd:9f:3a:a4:30:67:26:dc:28:10:cc:99:d6:5d:
f0:ae:d5:27:0d:0c:95:1f:08:2e:9e:a5:10:05:88:72:73:47:
df:b8:c3:be:34:0a:f2:fc:86:99:f5:f9:58:dc:a9:59:56:18:
2c:1b:5a:04:f9:af:ab:f4:35:68:d4:fa:3a:c5:ae:92:47:c7:
01:cf:58:a4:ee:0e:54:dc:a0:11:08:bf:1d:62:7e:11:f2:44:
36:38:b0:d0:d0:5f:17:99:f6:fd:05:82:b3:19:e7:2f:53:9e:
c8:d0:b3:5f:ea:3b:ad:13:24:d2:52:46:00:da:1b:f2:dd:fb:
38:ce:e3:4c:cb:90:fd:e6:34:ff:55:25:2b:c2:a0:74:3a:40:
2a:c4:a8:f7:f3:d8:83:a6:a1:71:89:a5:10:65:bd:42:56:c8:
ce:e6:de:6d:49:48:25:bf:ca:40:fe:b6:85:b6:2b:da:6b:d9:
05:34:bd:a0:5a:70:52:04:90:c8:62:b0:b3:ef:41:ed:00:18:
60:18:7e:fc:f2:c5:06:d2:ea:89:72:5f:1a:7f:d0:04:31:5f:
e6:f9:af:fb:2d:1c:57:eb:36:bc:8c:e3:8e:4a:4a:a6:49:e8:
0e:76:ae:bb:0f:32:41:9f:74:9a:20:ac:1d:c7:a5:b3:9e:60:
70:c1:7b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:45:35 2025 by rpki-client