Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/iWaYh2lBgNacnwdtSrdjIdhSimE.roa
File: iWaYh2lBgNacnwdtSrdjIdhSimE.roa (raw, json)
Hash identifier: /xKEtCBjo+f6+fQyXxbIGqeOGzcKeJ2sN/FpKqmfqgs=
Subject key identifier: 89:66:98:87:69:41:80:D6:9C:9F:07:6D:4A:B7:63:21:D8:52:8A:61
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019424B2FC09C6738E67F0C0575DB73EF1F3
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/iWaYh2lBgNacnwdtSrdjIdhSimE.roa
Signing time: Thu 02 Jan 2025 01:48:17 +0000
ROA not before: Thu 02 Jan 2025 01:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204427
IP address blocks: 37.148.169.0/24 maxlen: 24
37.148.170.0/24 maxlen: 24
37.148.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:fc:09:c6:73:8e:67:f0:c0:57:5d:b7:3e:f1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 01:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89669887694180d69c9f076d4ab76321d8528a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:77:06:31:b4:90:99:30:0a:07:5e:a1:c0:f1:
14:a1:05:f5:7f:3a:c3:c1:f4:da:27:68:e1:47:35:
9b:40:79:a9:c9:e0:e6:93:4b:3f:9f:5d:45:8d:6e:
ec:2e:4d:58:55:6b:51:f6:cc:58:f1:07:8b:a6:a2:
27:1e:61:5d:33:12:45:a1:8c:b7:7b:1d:93:f3:26:
79:cf:f7:56:7f:28:11:56:42:42:12:7e:a9:fc:37:
11:b5:81:52:4a:e0:12:6a:81:0e:a5:84:43:0d:eb:
f8:b7:82:d5:53:71:4c:a6:e5:41:33:b6:5f:05:5d:
40:05:94:08:ad:dd:09:8b:76:f1:fc:4a:2c:9e:a2:
ff:3a:a9:e3:07:9f:66:6b:14:15:f4:75:3e:f7:68:
30:d8:b4:d3:0f:c9:cb:fb:85:df:fb:77:ec:e7:81:
14:ef:1b:ce:93:cb:9b:5c:3d:86:c2:0d:92:1e:76:
df:18:22:f0:c8:75:a0:7c:4a:18:0f:9b:0d:a5:31:
85:e0:e7:41:87:82:67:13:1d:65:89:72:1f:d8:b5:
c6:76:0e:b4:fe:91:8f:1d:ae:75:db:5c:a5:6a:c0:
c5:3a:55:e7:f8:00:38:66:2a:ae:58:e0:3d:73:c1:
4c:85:89:af:c1:65:06:89:f9:98:cb:38:dc:d6:cc:
4c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:66:98:87:69:41:80:D6:9C:9F:07:6D:4A:B7:63:21:D8:52:8A:61
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/iWaYh2lBgNacnwdtSrdjIdhSimE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.169.0-37.148.171.255
Signature Algorithm: sha256WithRSAEncryption
9b:fd:a0:e5:fa:a0:0d:ba:4b:cf:1e:4b:cc:43:97:e7:57:37:
42:e6:04:f2:cc:47:60:58:8b:df:fa:84:67:98:b0:70:54:a5:
dc:7b:3b:16:f3:c2:32:98:c4:eb:93:ce:e5:9e:dc:fb:a8:7e:
a7:54:5f:9c:d1:b7:fa:b0:69:c2:f1:c0:af:50:31:d9:6d:ce:
83:a2:7e:0e:ff:3e:4f:7d:36:43:83:ef:7a:55:52:e1:27:dc:
58:87:3c:88:68:9e:07:0c:89:99:c4:4a:71:47:36:22:8e:cc:
94:b8:b7:30:d2:7a:74:96:09:3d:bb:c9:22:05:04:16:15:3f:
10:58:f7:c2:66:cd:7a:82:84:4f:f2:da:61:44:51:11:53:33:
2d:da:16:8f:21:b9:59:1f:c0:af:7e:6b:70:eb:29:d4:12:a4:
ad:37:e0:5f:54:34:4b:07:2c:6d:cc:c6:6c:f5:cf:6c:53:20:
1b:1a:d3:34:2f:ac:b8:1e:4d:fa:fc:68:5c:51:8c:7c:9b:94:
8d:b2:72:26:e1:8f:6f:ee:f2:4e:a8:38:75:e2:27:6c:5a:d6:
cf:9a:15:f4:0d:94:8e:64:8a:2d:05:37:18:3b:6e:63:c3:21:
d9:b0:5a:d4:e7:7d:48:ec:69:61:2d:12:7c:88:ad:90:ae:19:
31:83:43:c0
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQksvwJxnOOZ/DAV123PvHzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm
YzQxZWMwHhcNMjUwMTAyMDE0ODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTY2OTg4NzY5NDE4MGQ2OWM5ZjA3NmQ0YWI3NjMyMWQ4NTI4YTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXcGMbSQmTAKB16hwPEUoQX1fzrD
wfTaJ2jhRzWbQHmpyeDmk0s/n11FjW7sLk1YVWtR9sxY8QeLpqInHmFdMxJFoYy3
ex2T8yZ5z/dWfygRVkJCEn6p/DcRtYFSSuASaoEOpYRDDev4t4LVU3FMpuVBM7Zf
BV1ABZQIrd0Ji3bx/EosnqL/OqnjB59maxQV9HU+92gw2LTTD8nL+4Xf+3fs54EU
7xvOk8ubXD2Gwg2SHnbfGCLwyHWgfEoYD5sNpTGF4OdBh4JnEx1liXIf2LXGdg60
/pGPHa5121ylasDFOlXn+AA4ZiquWOA9c8FMhYmvwWUGifmYyzjc1sxMZwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFIlmmIdpQYDWnJ8HbUq3YyHYUophMB8GA1UdIwQY
MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt
NTU1NGQ2ZTE2ODZmLzEvaVdhWWgybEJnTmFjbndkdFNyZGpJZGhTaW1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm
LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAllKkD
BAIllKgwDQYJKoZIhvcNAQELBQADggEBAJv9oOX6oA26S88eS8xDl+dXN0LmBPLM
R2BYi9/6hGeYsHBUpdx7OxbzwjKYxOuTzuWe3PuofqdUX5zRt/qwacLxwK9QMdlt
zoOifg7/Pk99NkOD73pVUuEn3FiHPIhongcMiZnESnFHNiKOzJS4tzDSenSWCT27
ySIFBBYVPxBY98JmzXqChE/y2mFEURFTMy3aFo8huVkfwK9+a3DrKdQSpK034F9U
NEsHLG3Mxmz1z2xTIBsa0zQvrLgeTfr8aFxRjHyblI2ycibhj2/u8k6oOHXiJ2xa
1s+aFfQNlI5kii0FNxg7bmPDIdmwWtTnfUjsaWEtEnyIrZCuGTGDQ8A=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:20 2025 by rpki-client