Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/T48pBsuhvbZxzuQikn6LHKfOwhk.roa
File: T48pBsuhvbZxzuQikn6LHKfOwhk.roa (raw, json)
Hash identifier: riJSrEr8eklbL0fdBY3f1J6u/fO/qv2OeNqqUNUL/bI=
Subject key identifier: 4F:8F:29:06:CB:A1:BD:B6:71:CE:E4:22:92:7E:8B:1C:A7:CE:C2:19
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 019424B29E348EDA8FA25B027F869EEE3616
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/T48pBsuhvbZxzuQikn6LHKfOwhk.roa
Signing time: Thu 02 Jan 2025 01:47:53 +0000
ROA not before: Thu 02 Jan 2025 01:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397237
IP address blocks: 37.209.192.0/24 maxlen: 24
37.209.194.0/24 maxlen: 24
37.209.196.0/24 maxlen: 24
37.209.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:9e:34:8e:da:8f:a2:5b:02:7f:86:9e:ee:36:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 2 01:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f8f2906cba1bdb671cee422927e8b1ca7cec219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:35:2c:3a:73:6a:64:7e:8b:86:75:2d:14:7f:
d2:05:46:1f:4d:be:05:66:4f:fd:2f:af:fc:e7:de:
1a:72:95:32:5c:10:18:ba:e5:02:a8:f2:93:48:7b:
7a:ae:39:97:20:77:d8:9e:56:99:13:36:b8:13:85:
18:3d:fa:88:4b:c5:3e:17:ef:f7:c9:6d:02:28:c6:
51:e6:db:75:de:2c:8b:91:ac:e4:bc:29:ee:14:57:
04:bc:32:23:6b:f7:b8:44:6a:00:a5:b1:e7:53:99:
69:79:96:7d:0f:01:d4:45:a7:38:29:3d:0b:9c:8f:
cf:6b:80:b9:dd:be:99:51:49:28:da:ce:cc:72:36:
48:a2:8c:d7:1f:0e:b0:a0:d3:cf:df:9a:aa:22:ff:
bc:01:fd:bd:5b:84:c6:95:2f:77:33:de:1d:ca:54:
2d:92:e5:2d:9c:f2:c2:11:9d:6b:d0:8e:1c:1e:20:
63:55:6e:d5:62:4d:11:a7:85:fa:c9:3d:1c:b1:2f:
cb:a1:1b:e0:c8:8c:78:cb:6a:cb:76:c0:58:5b:94:
76:4b:a5:c6:73:61:1e:88:86:02:d1:ad:a4:5f:bd:
85:6f:5b:ef:08:8b:71:0b:89:d5:8a:a8:a5:98:79:
d2:f6:bb:e3:ec:10:b7:13:bc:d3:99:f3:bf:f6:22:
23:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8F:29:06:CB:A1:BD:B6:71:CE:E4:22:92:7E:8B:1C:A7:CE:C2:19
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/T48pBsuhvbZxzuQikn6LHKfOwhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.192.0/24
37.209.194.0/24
37.209.196.0/24
37.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
05:e4:e4:69:a0:96:2d:99:46:68:90:5e:54:a0:56:6f:eb:d8:
d5:72:57:2e:31:4f:a6:87:c2:40:b9:7c:45:21:fe:51:af:3c:
67:b1:92:30:b7:2e:3e:12:e9:85:91:a1:0c:ec:6e:9c:4b:9b:
e8:c7:99:b1:09:eb:51:03:b6:9e:fa:4c:f7:c9:e8:eb:8d:6b:
4d:a0:eb:eb:13:8b:a9:7c:7a:dc:d8:73:6a:3a:f0:73:a4:fe:
c4:cb:7b:44:c3:4a:7e:29:45:fc:86:49:9b:d3:02:01:07:02:
d1:6b:f7:cb:c7:26:4c:da:e2:67:69:de:79:43:be:46:02:c4:
9e:52:e8:3a:cb:b9:39:70:54:d2:76:3e:ae:2e:c8:78:53:aa:
75:63:13:dd:55:88:c4:cd:a8:6c:4b:71:15:d0:83:5e:6d:93:
8d:6d:bb:23:81:91:20:c3:59:2c:ea:24:1c:4b:90:f4:66:1f:
9c:38:ef:c4:8b:16:c7:43:b2:4e:ca:f2:0e:fa:b6:8c:3b:2c:
75:0f:da:a6:73:43:a9:b3:0e:01:50:76:d2:7b:2e:9d:ed:90:
59:f8:b2:58:4d:1e:70:76:4f:f5:5c:3c:20:f1:97:fe:f4:7c:
65:66:00:a4:98:61:29:42:b3:57:36:c0:9e:71:d2:b4:af:61:
da:16:01:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:55:17 2025 by rpki-client