Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/52gqmyCs4CgJ8hxO4adVAhEf4YY.roa
File: 52gqmyCs4CgJ8hxO4adVAhEf4YY.roa (raw, json)
Hash identifier: XpLF/BJt6KR+R9bnvQWMbSq818F5Y+BHu0O++mZbSiE=
Subject key identifier: E7:68:2A:9B:20:AC:E0:28:09:F2:1C:4E:E1:A7:55:02:11:1F:E1:86
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 019424B29E836133A40467BABBD73287F964
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/52gqmyCs4CgJ8hxO4adVAhEf4YY.roa
Signing time: Thu 02 Jan 2025 01:47:53 +0000
ROA not before: Thu 02 Jan 2025 01:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397238
IP address blocks: 37.209.192.0/24 maxlen: 24
37.209.194.0/24 maxlen: 24
37.209.196.0/24 maxlen: 24
37.209.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:9e:83:61:33:a4:04:67:ba:bb:d7:32:87:f9:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 2 01:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7682a9b20ace02809f21c4ee1a75502111fe186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:11:35:a6:f2:cf:1f:ba:18:52:f6:00:bf:01:
f8:38:58:45:17:12:96:eb:25:a2:0c:a7:04:d4:6f:
c3:65:f6:b6:8f:c8:66:ca:33:5d:20:eb:f3:0e:22:
d5:ab:8a:07:23:3f:6c:fd:03:70:ed:bd:94:3c:ae:
3d:9f:a6:9e:e7:f0:26:57:5e:3b:a3:7a:c8:21:aa:
28:1f:6f:c5:fc:f7:81:58:fa:c8:81:67:8e:52:53:
c6:e7:98:08:53:ed:58:e5:e4:9d:d2:4d:7d:c9:08:
d6:9d:cc:33:10:9d:da:42:fa:07:69:44:93:b9:3b:
ba:84:0b:d8:46:93:7b:ca:25:0c:37:dd:ea:79:59:
c3:d6:6d:64:87:a4:8f:cd:f5:08:c9:8b:e1:6a:3d:
60:75:d8:09:f9:68:60:b4:e1:c5:28:33:30:f0:d3:
53:93:f6:5e:e1:4c:16:c0:0c:ac:c9:a1:3b:6a:2b:
57:93:d0:72:cf:c4:c0:e6:86:65:9e:df:fe:c9:51:
a2:9c:24:d6:3b:02:af:18:e4:2f:b6:35:5d:1c:2f:
69:e2:94:0f:9e:a5:c3:fb:63:6b:62:66:36:af:96:
64:e3:15:c3:58:3e:97:59:38:7d:4b:82:2d:28:a5:
57:69:a4:c2:71:4a:17:2e:15:54:9c:30:f6:fd:0c:
dd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:68:2A:9B:20:AC:E0:28:09:F2:1C:4E:E1:A7:55:02:11:1F:E1:86
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/52gqmyCs4CgJ8hxO4adVAhEf4YY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.192.0/24
37.209.194.0/24
37.209.196.0/24
37.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
66:e9:ef:f4:6e:99:2f:d0:ad:34:07:44:52:1c:ac:f7:29:b4:
c0:f5:5c:ae:93:2b:8f:02:2c:b5:16:e4:2a:5a:ca:cc:dc:28:
09:d7:76:be:97:37:0a:c8:0e:cc:0a:28:91:e3:73:bc:5d:c0:
95:bd:bc:7e:d9:9a:7e:99:31:ec:92:3e:0e:f3:cc:3c:a5:9b:
49:31:de:ae:8f:f8:8c:6e:48:3f:94:24:af:37:da:e7:cc:ec:
be:f5:84:a4:29:ee:74:bf:39:3a:fa:6f:d3:3f:19:15:af:64:
09:2e:d9:51:2a:6d:86:d7:c5:51:c3:ef:b0:2e:84:10:40:bb:
f9:21:4a:ae:51:6f:a0:e4:a8:18:a8:ad:1b:97:66:6f:d0:46:
9f:35:1e:07:ca:73:7b:87:e6:2f:77:d7:a3:34:3b:62:77:4b:
8a:ce:52:c6:71:10:c7:fa:6c:e7:e4:2a:a7:96:e2:cd:72:00:
53:39:66:f0:09:23:51:78:ef:6c:da:68:66:1f:b0:36:9f:f8:
b9:1a:53:44:72:e2:a0:c8:f6:52:70:34:a8:9f:2e:e6:c1:0a:
fd:42:bb:e4:8d:25:3a:22:11:fd:b5:4f:f2:11:09:a8:55:09:
44:d2:66:50:de:60:b4:c1:5b:7a:c3:98:c7:9d:d2:0d:bb:c0:
1e:da:53:68
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQksp6DYTOkBGe6u9cyh/lkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj
OGJmMmMwHhcNMjUwMTAyMDE0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzY4MmE5YjIwYWNlMDI4MDlmMjFjNGVlMWE3NTUwMjExMWZlMTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BE1pvLPH7oYUvYAvwH4OFhFFxKW
6yWiDKcE1G/DZfa2j8hmyjNdIOvzDiLVq4oHIz9s/QNw7b2UPK49n6ae5/AmV147
o3rIIaooH2/F/PeBWPrIgWeOUlPG55gIU+1Y5eSd0k19yQjWncwzEJ3aQvoHaUST
uTu6hAvYRpN7yiUMN93qeVnD1m1kh6SPzfUIyYvhaj1gddgJ+WhgtOHFKDMw8NNT
k/Ze4UwWwAysyaE7aitXk9Byz8TA5oZlnt/+yVGinCTWOwKvGOQvtjVdHC9p4pQP
nqXD+2NrYmY2r5Zk4xXDWD6XWTh9S4ItKKVXaaTCcUoXLhVUnDD2/QzdzQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFOdoKpsgrOAoCfIcTuGnVQIRH+GGMB8GA1UdIwQY
MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt
NDE2Zjg1ZWUyMzdiLzEvNTJncW15Q3M0Q2dKOGh4TzRhZFZBaEVmNFlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi
LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJdHAAwQA
JdHCAwQAJdHEAwQAJdHGMA0GCSqGSIb3DQEBCwUAA4IBAQBm6e/0bpkv0K00B0RS
HKz3KbTA9VyukyuPAiy1FuQqWsrM3CgJ13a+lzcKyA7MCiiR43O8XcCVvbx+2Zp+
mTHskj4O88w8pZtJMd6uj/iMbkg/lCSvN9rnzOy+9YSkKe50vzk6+m/TPxkVr2QJ
LtlRKm2G18VRw++wLoQQQLv5IUquUW+g5KgYqK0bl2Zv0EafNR4HynN7h+Yvd9ej
NDtid0uKzlLGcRDH+mzn5CqnluLNcgBTOWbwCSNReO9s2mhmH7A2n/i5GlNEcuKg
yPZScDSony7mwQr9QrvkjSU6IhH9tU/yEQmoVQlE0mZQ3mC0wVt6w5jHndINu8Ae
2lNo
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:30:00 2025 by rpki-client