Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/6X2qxBTvsCu1KGgFjFHR9uizprw.roa
File: 6X2qxBTvsCu1KGgFjFHR9uizprw.roa (raw, json)
Hash identifier: THkA0uqanR753o/JOdPq3eCkVb6ZWxt+PiJvED7/Lgs=
Subject key identifier: E9:7D:AA:C4:14:EF:B0:2B:B5:28:68:05:8C:51:D1:F6:E8:B3:A6:BC
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 019424B2997B08A0A1F34B21CD34124B48E6
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/6X2qxBTvsCu1KGgFjFHR9uizprw.roa
Signing time: Thu 02 Jan 2025 01:47:51 +0000
ROA not before: Thu 02 Jan 2025 01:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397225
IP address blocks: 37.209.192.0/24 maxlen: 24
37.209.194.0/24 maxlen: 24
37.209.196.0/24 maxlen: 24
37.209.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:99:7b:08:a0:a1:f3:4b:21:cd:34:12:4b:48:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 2 01:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e97daac414efb02bb52868058c51d1f6e8b3a6bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a4:f0:a2:b9:f5:75:b8:1e:8b:0a:25:c1:be:
e2:f1:18:6e:ff:99:2c:58:27:7f:42:89:6e:39:e5:
f6:9f:65:1d:94:ac:c4:df:21:b2:f6:aa:1e:ec:66:
47:b4:66:32:77:1f:a6:0d:f2:22:df:c8:0a:8e:8f:
ae:23:ce:0c:df:a6:16:1f:3d:6d:a2:ef:56:66:61:
18:07:9e:9c:01:39:8f:c9:02:48:48:68:a2:d6:61:
66:40:7e:7b:84:a5:b6:2d:a2:7a:b1:fa:f2:5a:af:
d2:97:94:64:55:1c:a0:b9:16:0e:20:41:be:bf:29:
a4:73:fa:43:53:b2:b4:c9:b0:cb:cd:26:f2:df:3c:
17:6b:1d:73:e0:75:9b:b9:3a:de:24:e0:70:ec:c9:
66:ae:09:0f:5e:7b:cf:b7:d7:14:76:2c:16:53:a6:
e3:45:43:48:90:37:65:9c:b5:5f:66:5e:bd:75:34:
21:61:7a:97:38:fd:a3:b7:83:cb:c3:1c:8c:16:c8:
87:83:4e:82:c5:d6:f8:fa:8a:1d:5d:da:8a:e7:be:
75:f2:a7:72:fa:4f:15:18:71:6e:7f:11:d1:5b:bb:
22:a9:28:9e:38:e7:e3:ee:3c:6f:1f:d4:53:cd:1f:
80:e9:df:37:03:b4:98:15:8f:a7:8c:e1:6d:c3:33:
44:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7D:AA:C4:14:EF:B0:2B:B5:28:68:05:8C:51:D1:F6:E8:B3:A6:BC
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/6X2qxBTvsCu1KGgFjFHR9uizprw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.192.0/24
37.209.194.0/24
37.209.196.0/24
37.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
12:21:5d:7c:35:a6:a1:7e:0b:eb:1f:55:82:aa:78:d8:bc:00:
55:6d:4e:1e:33:75:ac:30:36:55:cf:b1:89:76:91:0d:b1:fc:
aa:4e:21:4f:ab:b8:65:a7:b6:fc:ef:71:df:88:14:51:53:55:
a5:83:81:87:47:c3:fe:9d:d3:8b:55:30:16:a5:7a:bf:2c:6b:
5c:56:b0:27:78:f2:b3:f0:c8:21:17:c6:40:7b:8f:01:05:67:
01:fa:94:75:81:d0:54:a7:0d:51:77:ec:93:d9:fe:65:0d:d0:
9f:1b:a3:e7:f4:ee:b6:1e:b6:e9:a7:8e:be:2f:f4:f9:e4:1b:
7e:c9:cf:d5:82:67:3c:54:0f:52:8d:89:78:44:f0:39:de:53:
30:48:4e:b1:90:a5:99:07:bf:f1:f2:5c:4f:22:f5:43:e2:cf:
18:00:a6:c0:da:0e:2f:ae:ef:e1:e2:1a:38:1f:e9:c2:ca:12:
ba:b4:83:2e:36:8b:16:40:e1:2b:94:4c:e2:37:ba:f5:65:fe:
db:36:84:e6:8a:67:e7:e5:aa:76:de:72:24:0f:b1:2e:e0:dd:
85:c1:72:ce:95:63:a1:11:41:b0:93:11:97:cb:0b:46:50:a4:
aa:47:c3:c4:dd:4b:fc:d3:f6:ad:1f:d3:ea:7f:f5:7e:29:f2:
78:97:b9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:15:51 2025 by rpki-client