Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/LCvaB4WSKzttpqTMBERAKzTPkc0.roa
File: LCvaB4WSKzttpqTMBERAKzTPkc0.roa (raw, json)
Hash identifier: efuSbUVkMb1LRDxLfq3t1vkJUtMph/K3Ly/MOMCQIYc=
Subject key identifier: 2C:2B:DA:07:85:92:2B:3B:6D:A6:A4:CC:04:44:40:2B:34:CF:91:CD
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 019424B298E9A8863B7E71402D48E78848CB
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/LCvaB4WSKzttpqTMBERAKzTPkc0.roa
Signing time: Thu 02 Jan 2025 01:47:51 +0000
ROA not before: Thu 02 Jan 2025 01:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397224
IP address blocks: 37.209.192.0/24 maxlen: 24
37.209.194.0/24 maxlen: 24
37.209.196.0/24 maxlen: 24
37.209.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:98:e9:a8:86:3b:7e:71:40:2d:48:e7:88:48:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 2 01:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c2bda0785922b3b6da6a4cc0444402b34cf91cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5b:e3:b0:a1:c4:eb:34:1a:71:43:9e:59:4b:
49:df:70:ef:78:bb:c3:d9:7b:ce:8a:b8:7c:bf:83:
e4:dd:6a:0c:e3:75:10:4e:5d:6a:e0:fa:e8:ad:93:
ae:6c:34:a1:20:43:18:6f:87:f6:75:e8:21:52:3f:
a5:84:50:c4:21:c2:d9:3e:4e:26:78:2a:0f:57:76:
2f:1e:86:c2:f3:3b:93:4a:40:18:b1:2f:f3:5b:f4:
53:e4:8d:03:73:26:96:e4:35:bc:41:45:9a:59:51:
b1:28:04:cb:97:14:cf:be:94:01:e4:85:fe:0c:79:
59:f7:98:78:33:cb:fc:f2:72:80:75:9e:cc:e2:a2:
80:4a:40:0d:eb:14:6d:4f:92:4d:ec:38:44:e3:4d:
02:98:67:ce:d8:69:f3:d3:8f:03:80:31:99:85:bb:
76:69:b9:6c:7b:37:53:77:80:0f:e9:91:56:3b:c7:
fa:ff:67:7b:bb:ab:c0:f6:6f:73:37:5e:3c:ba:a8:
77:94:d0:f9:12:c5:69:e3:19:c0:24:3a:b5:07:13:
ab:42:03:e8:8b:68:73:eb:73:a0:56:f6:cf:59:5b:
22:98:68:25:04:35:4c:32:54:6c:b6:7e:ff:b7:8a:
40:62:a4:f8:e3:18:c0:71:5d:9e:58:5c:56:a5:8f:
c6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2B:DA:07:85:92:2B:3B:6D:A6:A4:CC:04:44:40:2B:34:CF:91:CD
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/LCvaB4WSKzttpqTMBERAKzTPkc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.192.0/24
37.209.194.0/24
37.209.196.0/24
37.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:31:1e:63:fd:fa:3e:0a:1b:08:47:66:5a:8e:b8:0e:1d:2f:
10:51:38:10:76:3b:97:87:a7:58:90:3c:8a:de:d9:1b:d9:0a:
b2:d8:f2:e4:b3:21:cd:ba:11:f0:35:25:43:e0:d2:50:f1:67:
f6:ed:f5:23:93:40:5a:31:e5:7a:b5:6e:8c:ea:b3:02:ee:b4:
5c:c2:76:f1:e1:8b:50:3f:ae:9a:40:21:34:7f:aa:5f:a2:91:
5d:e6:5a:26:ad:9a:7e:62:d1:52:5e:41:2a:1c:32:53:a0:b8:
fb:39:78:0c:b6:88:6c:df:d9:10:cb:fc:ae:fa:ce:ab:7d:72:
4d:41:6d:5d:96:72:9f:23:46:aa:02:9c:a8:7b:4c:a5:bd:49:
be:fe:de:77:bd:95:4f:5a:f8:79:7a:c9:f7:28:98:76:e9:ce:
19:da:aa:20:a7:ba:f0:83:93:9c:4a:fe:2e:01:db:1e:90:56:
90:3d:92:49:04:57:8d:9f:66:cb:69:0c:55:3f:ef:48:2a:05:
1d:10:7d:dc:a4:ee:0e:a8:cd:ea:72:0a:09:10:fb:c6:65:d3:
85:be:b3:69:f1:6c:32:27:c9:5e:9d:84:6c:b2:db:e1:4f:1b:
8b:ab:de:e3:84:3b:fa:5b:2d:0a:f2:33:36:5b:04:c0:d2:9c:
d6:38:02:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:48:35 2025 by rpki-client