Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/Vldb1Pv9SKH1pSEjNm1gf_bg3_M.roa
File: Vldb1Pv9SKH1pSEjNm1gf_bg3_M.roa (raw, json)
Hash identifier: Ox3xcaNfkxGbMXT71Q5JDbePmqXmxZEbJ+Iew6AAo/E=
Subject key identifier: 56:57:5B:D4:FB:FD:48:A1:F5:A5:21:23:36:6D:60:7F:F6:E0:DF:F3
Certificate issuer: /CN=37b8221099486a3b133e0139e34b934264cdd700
Certificate serial: 019427B37876DB145945E80041DD4479B010
Authority key identifier: 37:B8:22:10:99:48:6A:3B:13:3E:01:39:E3:4B:93:42:64:CD:D7:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/Vldb1Pv9SKH1pSEjNm1gf_bg3_M.roa
Signing time: Thu 02 Jan 2025 15:47:40 +0000
ROA not before: Thu 02 Jan 2025 15:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203541
IP address blocks: 37.61.184.0/21 maxlen: 21
2a06:c500::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:78:76:db:14:59:45:e8:00:41:dd:44:79:b0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37b8221099486a3b133e0139e34b934264cdd700
Validity
Not Before: Jan 2 15:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56575bd4fbfd48a1f5a52123366d607ff6e0dff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:31:e1:63:44:45:94:79:4e:15:ef:c0:2b:e2:
a4:cc:2d:7d:aa:24:ef:67:74:ac:3e:89:91:d6:b8:
7a:3f:3d:3c:d8:dc:dc:b1:20:e0:ae:09:79:f8:4b:
f5:7c:cf:3d:2c:b6:5b:3f:66:26:e1:b8:d0:d4:17:
aa:ae:1e:89:72:b2:c8:b2:e0:86:4a:b4:1b:49:61:
1a:e2:b0:95:89:2d:35:68:55:dc:92:c6:1a:bf:d1:
14:69:54:03:1e:1f:ef:96:73:85:7a:e4:99:5e:30:
89:53:48:ef:9e:ea:ad:7f:da:06:54:83:de:cc:5f:
0f:fd:93:1b:c5:b4:3c:13:66:73:2f:bf:b1:c8:94:
25:21:08:dc:51:fd:c6:dc:b7:b0:fe:69:d0:66:e2:
50:26:1b:4c:bc:01:1b:2d:72:8b:03:c4:da:b6:2c:
98:c3:18:9a:d2:ac:33:94:66:6b:0c:8d:44:64:2e:
2e:03:dd:25:b8:74:c3:3b:d4:56:58:58:a0:f7:ae:
50:55:06:5e:b6:9e:9f:d1:68:5d:a5:b8:32:a9:8d:
39:48:f6:6b:5e:fe:5f:c0:4b:05:ba:a8:1c:c4:61:
76:38:9d:3d:cf:11:86:ba:3f:b7:57:9d:04:a4:ab:
e8:ab:4b:a6:61:95:18:44:eb:b2:92:5c:d2:c9:a4:
5c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:57:5B:D4:FB:FD:48:A1:F5:A5:21:23:36:6D:60:7F:F6:E0:DF:F3
X509v3 Authority Key Identifier:
keyid:37:B8:22:10:99:48:6A:3B:13:3E:01:39:E3:4B:93:42:64:CD:D7:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/Vldb1Pv9SKH1pSEjNm1gf_bg3_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.61.184.0/21
IPv6:
2a06:c500::/29
Signature Algorithm: sha256WithRSAEncryption
1e:a8:9b:eb:b5:93:51:cd:97:2d:1c:e4:65:02:d3:2a:00:2e:
d3:6e:a6:79:6e:4d:dc:69:44:16:b6:bf:69:08:57:be:e8:46:
70:0d:51:95:15:1f:15:ea:b2:ee:b5:e3:f4:2c:21:44:8e:d0:
fa:5c:ea:11:41:bd:c2:ed:6a:29:cd:75:84:e5:71:80:ea:6a:
23:d6:96:55:80:0c:2b:5a:ca:36:cc:50:be:2c:d9:9a:d2:09:
61:04:01:2a:40:e2:5a:cd:30:55:e9:f4:24:ba:2d:da:71:48:
ce:60:4d:52:c6:57:c1:04:86:1a:d0:43:c0:a3:02:f7:77:00:
cd:41:68:bf:77:f0:b3:f5:2a:5f:82:de:f7:43:a8:0d:66:77:
0f:a7:58:93:47:75:7d:63:63:ea:0f:a6:30:5e:d9:d0:23:60:
ee:2b:e7:2b:80:58:d0:3d:7e:c2:8a:44:50:50:22:9e:b3:f4:
dc:f6:46:5c:c3:23:67:16:4b:f5:0a:93:b2:84:ee:66:ef:ed:
0f:87:cd:db:04:4d:cb:c8:96:05:9e:31:53:69:69:fd:8f:e3:
1d:3b:96:1e:f1:e2:2c:c8:36:2a:03:55:a4:79:15:39:7b:13:
c3:08:d2:e7:f0:3f:65:9d:2f:42:35:18:46:38:82:22:98:d1:
45:6b:56:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:14:54 2025 by rpki-client