Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/01fa18-ab6a-4899-b475-92a3661ec26d/1/X_-6E-BXNLyKIQzTHU-HtGI0E3c.roa
File: X_-6E-BXNLyKIQzTHU-HtGI0E3c.roa (raw, json)
Hash identifier: B6CTVBD9VSfEgi+uGPWvfBUyiK4zUv1Xv+27trGeiVI=
Subject key identifier: 5F:FF:BA:13:E0:57:34:BC:8A:21:0C:D3:1D:4F:87:B4:62:34:13:77
Certificate issuer: /CN=02f81c37e9ed24d0b20e94c18690e88ae4b311ca
Certificate serial: 1D5A0C
Authority key identifier: 02:F8:1C:37:E9:ED:24:D0:B2:0E:94:C1:86:90:E8:8A:E4:B3:11:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvgcN-ntJNCyDpTBhpDoiuSzEco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/01fa18-ab6a-4899-b475-92a3661ec26d/1/X_-6E-BXNLyKIQzTHU-HtGI0E3c.roa
Signing time: Sat 01 Jan 2022 00:56:29 +0000
ROA not before: Sat 01 Jan 2022 00:56:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29286
IP address blocks: 37.203.192.0/21 maxlen: 21
37.19.96.0/21 maxlen: 21
185.4.192.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1923596 (0x1d5a0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02f81c37e9ed24d0b20e94c18690e88ae4b311ca
Validity
Not Before: Jan 1 00:56:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5fffba13e05734bc8a210cd31d4f87b462341377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:72:0c:55:22:55:df:a3:9e:89:e5:f8:a9:7d:
b8:51:59:41:e2:d9:61:c9:d1:0a:46:6f:df:56:d7:
b1:94:43:fc:88:6c:51:1d:b7:db:22:7f:bf:47:5b:
89:ce:a1:cb:4c:3d:9b:45:22:8b:d8:2d:a4:0b:57:
03:18:32:f6:ed:f4:f3:45:33:81:66:02:c7:c2:37:
b5:21:b9:72:85:11:09:93:fa:d6:cd:e8:1a:3d:b9:
aa:a0:64:6e:68:0e:bc:7c:95:2a:a3:3e:2a:40:6a:
41:94:bb:11:ca:fa:2a:58:1a:58:a6:16:37:ee:c1:
c0:b2:26:d6:cb:31:42:4f:0f:5a:ee:f4:8f:47:75:
a7:23:ac:3b:59:32:e8:41:8f:ee:a5:b4:1f:e8:ca:
13:99:5d:56:b6:d9:46:a8:3d:dd:d5:fb:a6:37:6c:
99:b7:14:9d:5e:1f:4e:b8:3e:fe:4a:44:3d:cb:a5:
ef:3f:13:90:8d:35:3b:8f:aa:ee:11:c1:02:f1:66:
a3:6a:58:61:c9:16:f5:af:db:c9:77:0e:58:7b:8f:
29:f7:bc:e5:8a:05:29:13:2b:65:32:b2:ad:c6:da:
69:e8:e1:c5:53:71:71:ef:b8:16:b6:95:52:1f:10:
5c:ed:ca:a6:72:df:93:3b:03:d7:2c:2d:f6:9e:ca:
da:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FF:BA:13:E0:57:34:BC:8A:21:0C:D3:1D:4F:87:B4:62:34:13:77
X509v3 Authority Key Identifier:
keyid:02:F8:1C:37:E9:ED:24:D0:B2:0E:94:C1:86:90:E8:8A:E4:B3:11:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvgcN-ntJNCyDpTBhpDoiuSzEco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/01fa18-ab6a-4899-b475-92a3661ec26d/1/X_-6E-BXNLyKIQzTHU-HtGI0E3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/01fa18-ab6a-4899-b475-92a3661ec26d/1/AvgcN-ntJNCyDpTBhpDoiuSzEco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.19.96.0/21
37.203.192.0/21
185.4.192.0/22
Signature Algorithm: sha256WithRSAEncryption
42:f0:25:24:77:f2:b2:84:52:a5:f2:a7:c8:7b:b5:4e:44:e5:
eb:b0:02:51:72:a4:26:d4:2f:e2:ed:92:b2:c0:a0:af:54:fb:
a1:50:e8:ca:de:84:40:20:22:05:f9:81:3e:1a:c8:62:6f:32:
47:e2:eb:5c:7a:84:2b:dc:07:f2:9a:6f:58:41:e7:61:46:70:
5b:ae:c3:37:cc:d8:f6:47:9f:03:84:c5:42:ff:48:dc:6e:31:
87:90:e7:72:56:1f:d7:55:a3:4c:20:a6:b9:bb:9b:57:d2:0a:
c4:3b:15:d0:b4:08:0e:81:67:46:88:c4:85:b0:de:ff:34:da:
cd:2e:0d:4e:b5:dd:dd:0c:a5:1d:23:51:6c:fb:5e:06:b6:14:
b4:c3:ce:b8:c7:cf:07:e2:05:3d:61:8c:6f:2c:78:81:5b:2d:
ff:ed:37:87:c8:d3:a7:af:6c:71:d4:04:cd:13:a5:5b:07:d3:
8a:2c:17:8a:cb:d9:77:38:23:72:b5:fd:8e:29:98:25:b9:88:
ee:1b:34:18:12:f9:e7:1c:b7:93:e0:06:a0:a4:23:2f:ec:9b:
ea:78:bc:f4:d6:99:33:77:da:f6:26:e1:ee:1c:f2:f0:c4:9c:
ed:52:df:fa:61:62:94:d0:5a:56:62:96:26:05:ee:f5:0a:9c:
2b:9d:bb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:58:30 2025 by rpki-client