Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/8HW0T0gkjxuqP-_rFWA6XvZFszI.roa
File: 8HW0T0gkjxuqP-_rFWA6XvZFszI.roa (raw, json)
Hash identifier: yvdGjJhxvncAn0kSWkYpvMzmOc86v5+R2cMLIZsxEfo=
Subject key identifier: F0:75:B4:4F:48:24:8F:1B:AA:3F:EF:EB:15:60:3A:5E:F6:45:B3:32
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 019424B298494E2E67D4E21CCDAA7DAFB003
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/8HW0T0gkjxuqP-_rFWA6XvZFszI.roa
Signing time: Thu 02 Jan 2025 01:47:51 +0000
ROA not before: Thu 02 Jan 2025 01:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397222
IP address blocks: 37.209.192.0/24 maxlen: 24
37.209.194.0/24 maxlen: 24
37.209.196.0/24 maxlen: 24
37.209.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:98:49:4e:2e:67:d4:e2:1c:cd:aa:7d:af:b0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 2 01:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f075b44f48248f1baa3fefeb15603a5ef645b332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c3:62:aa:e7:d8:f5:33:1e:3f:c0:26:38:0c:
9a:5b:44:8e:61:77:e1:3f:2b:2e:41:fd:f9:0f:a4:
54:6a:d7:18:de:d5:54:c1:96:f5:41:bc:b7:02:cf:
2d:b5:fa:16:9c:b9:73:99:e9:11:2e:b5:fb:01:85:
48:93:e6:c9:93:bd:dd:61:10:d8:37:0e:5b:0f:39:
61:37:81:7e:a8:11:bd:af:02:33:b8:cf:34:0d:b0:
8a:fb:7f:e3:a4:ee:fe:28:7b:e0:b6:45:92:2c:f7:
85:2c:22:a8:6e:55:7c:72:26:fa:94:54:a5:a0:d0:
46:2a:81:b0:59:57:6c:8d:b6:db:5d:45:b0:9f:d8:
87:49:46:26:2a:c9:8a:b7:ff:67:3a:92:f9:76:a4:
c7:3a:6b:65:58:84:8e:d8:09:ab:ba:02:e2:2e:b0:
53:05:15:67:da:f0:9e:05:85:7b:57:90:a4:2e:89:
8f:39:f7:e0:1a:d0:58:ef:8a:a3:55:fd:09:98:9c:
05:3d:14:d0:19:65:c3:a6:93:f3:50:36:f2:42:8a:
cb:07:aa:df:b1:a1:dd:17:2e:c6:c0:be:6a:db:3c:
64:20:94:58:6b:d7:c2:f7:70:f0:8c:0e:73:76:f5:
38:bb:8d:f0:96:af:cb:0e:c3:db:3b:de:b9:a3:ae:
52:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:75:B4:4F:48:24:8F:1B:AA:3F:EF:EB:15:60:3A:5E:F6:45:B3:32
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/8HW0T0gkjxuqP-_rFWA6XvZFszI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.192.0/24
37.209.194.0/24
37.209.196.0/24
37.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
75:aa:b5:c6:f6:99:a8:4e:56:00:ca:75:7d:fc:1e:70:f3:10:
0b:f7:e3:0d:83:93:6f:63:71:51:dd:97:2f:bd:7e:73:1a:48:
40:13:d3:5c:a9:6e:1f:7c:74:c8:bd:a8:0a:46:cf:e7:b7:29:
92:9a:9c:f6:ac:97:f4:05:30:9f:22:fc:31:3c:41:eb:44:51:
a9:6a:95:20:40:f8:39:9d:43:e2:07:a5:5e:dc:ef:90:53:91:
86:a7:7d:81:0b:66:23:3b:a3:4b:0b:18:64:86:af:76:1a:fc:
dd:b6:33:40:af:1a:3e:e6:2f:ea:3d:79:21:d0:96:9f:5c:80:
cb:fc:47:e2:12:40:33:53:60:5a:2f:84:21:e0:5e:49:23:64:
77:1c:17:66:1b:81:20:19:fb:64:c0:13:61:d9:34:3b:70:6f:
65:eb:ba:4f:a7:a8:2a:d4:42:fc:49:a4:14:ec:6c:9e:6f:21:
08:31:9b:94:57:75:94:5f:24:39:66:bd:36:c6:e5:e9:3e:1f:
95:07:35:a6:6a:e8:14:8f:22:8a:04:c6:27:ce:3f:f1:19:c8:
43:e5:d9:f2:b7:68:74:7f:96:8a:8f:89:9a:85:35:49:bd:3a:
46:6e:7a:30:1c:a5:8c:11:19:6b:53:19:ac:39:3a:dc:36:9c:
02:e7:a1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:21:53 2025 by rpki-client