Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/3xG70OjpGDqTBtiV7J7ymcYWBFA.roa
File: 3xG70OjpGDqTBtiV7J7ymcYWBFA.roa (raw, json)
Hash identifier: NM1Xt/iOH+RmW3xgH3e/zgM6erx/P3+UNPyWgezEG04=
Subject key identifier: DF:11:BB:D0:E8:E9:18:3A:93:06:D8:95:EC:9E:F2:99:C6:16:04:50
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 019424B297696DFB26296572CC3E5D1B592C
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/3xG70OjpGDqTBtiV7J7ymcYWBFA.roa
Signing time: Thu 02 Jan 2025 01:47:51 +0000
ROA not before: Thu 02 Jan 2025 01:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397220
IP address blocks: 37.209.192.0/24 maxlen: 24
37.209.194.0/24 maxlen: 24
37.209.196.0/24 maxlen: 24
37.209.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:97:69:6d:fb:26:29:65:72:cc:3e:5d:1b:59:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 2 01:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df11bbd0e8e9183a9306d895ec9ef299c6160450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c4:cd:9b:a6:b5:25:9a:6a:b1:42:f7:c4:35:
a5:2d:0a:51:9e:98:35:0b:6f:05:8b:7c:a0:60:f0:
92:20:92:50:c7:3e:93:82:0a:ef:e4:21:c9:dd:2c:
07:24:d6:23:f0:a4:7c:ef:d7:2a:b5:07:86:6d:95:
07:c4:16:3b:82:e8:bd:d7:70:69:b2:98:11:16:d5:
14:9e:36:7a:43:b3:50:0b:61:c2:0f:dd:7c:48:60:
03:0c:1d:54:d2:e3:a9:40:84:3d:ab:69:0b:a1:83:
4c:02:be:e1:74:9a:d7:b7:93:d1:7b:73:7f:94:04:
a6:15:21:13:b8:a8:a1:06:4a:26:dc:33:01:0b:b7:
a1:15:d0:a4:08:46:39:16:e7:22:f7:f4:37:55:74:
68:21:23:e1:15:71:10:d1:9c:ca:1e:18:bb:f5:ad:
8e:12:0f:39:02:54:be:64:88:5c:b8:38:89:91:ec:
77:54:b7:34:6e:e4:7a:1e:cb:32:2a:fb:2d:b9:15:
11:20:24:77:2b:5c:e0:16:44:3a:a3:c6:ef:43:1b:
d5:0b:d5:5b:1a:ce:4b:32:9a:58:f2:68:99:a2:f1:
3b:ed:a1:ea:79:56:03:7d:87:ae:6b:00:d5:27:55:
be:41:b5:7f:eb:20:e6:05:7c:8c:6b:4c:aa:a2:77:
cd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:11:BB:D0:E8:E9:18:3A:93:06:D8:95:EC:9E:F2:99:C6:16:04:50
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/3xG70OjpGDqTBtiV7J7ymcYWBFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.192.0/24
37.209.194.0/24
37.209.196.0/24
37.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
42:6e:fa:ef:14:43:ad:45:c2:0c:c2:f6:cd:5b:78:69:4b:f1:
c2:fe:56:3c:15:5f:6f:38:b0:e1:ae:c8:10:f3:0b:4e:c7:18:
0f:97:a6:ac:d0:35:4c:db:fb:7d:67:d9:4d:e4:2d:c3:d4:3c:
7a:99:42:f6:29:57:05:16:49:43:b1:3f:ab:86:1a:8a:98:b6:
f5:44:f6:b6:a7:06:8a:b1:ce:68:41:4c:28:a6:d9:ae:be:72:
0b:4b:de:07:70:65:b1:e0:f5:2b:51:12:69:00:56:e7:b6:38:
6f:05:13:5a:0f:d2:e6:1b:5b:c4:f3:90:34:72:9d:8f:f6:80:
3f:a1:b7:9c:d8:05:8f:32:e7:b9:b1:46:48:91:38:b0:a2:2a:
04:e4:09:a3:11:e6:e4:00:fe:8d:cf:29:84:a0:21:f7:59:4d:
9a:e6:bf:5a:7b:5c:61:83:d1:af:3e:8d:d9:87:2d:6c:1d:f4:
78:68:84:44:c6:18:10:5a:7b:e7:65:1f:62:21:b5:83:29:32:
b6:ed:dd:fb:10:01:d2:3c:62:f8:34:bd:cb:71:1b:10:0f:9f:
4f:3b:c3:5c:ab:b2:27:e8:6d:0d:ce:a7:bd:f1:c5:1a:7d:c9:
72:51:b8:65:21:23:c9:f7:23:7f:4a:64:dc:1f:97:8a:14:aa:
c9:88:50:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:02:13 2025 by rpki-client