Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/i-XH3WsMULykHW1y-BG3UdFVuxk.roa
File: i-XH3WsMULykHW1y-BG3UdFVuxk.roa (raw, json)
Hash identifier: VJILQeKFY+tCpv/VALS6QQ/A8bjqBJ9CpKPAXcs36qg=
Subject key identifier: 8B:E5:C7:DD:6B:0C:50:BC:A4:1D:6D:72:F8:11:B7:51:D1:55:BB:19
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 019424B29B95C692DE1014584EC7EAE18AAD
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/i-XH3WsMULykHW1y-BG3UdFVuxk.roa
Signing time: Thu 02 Jan 2025 01:47:52 +0000
ROA not before: Thu 02 Jan 2025 01:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397231
IP address blocks: 37.209.192.0/24 maxlen: 24
37.209.194.0/24 maxlen: 24
37.209.196.0/24 maxlen: 24
37.209.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:9b:95:c6:92:de:10:14:58:4e:c7:ea:e1:8a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 2 01:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8be5c7dd6b0c50bca41d6d72f811b751d155bb19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e7:bd:24:e8:af:58:c3:11:2b:54:70:f8:09:
61:e5:2f:fc:d6:1f:c6:1d:98:94:5c:2b:0e:56:1e:
81:97:fb:d7:d0:48:d7:af:73:df:64:75:a2:ba:85:
74:f3:33:ac:fc:6e:2f:75:ba:1f:cc:96:6b:ea:7f:
40:e4:37:b4:3d:c0:3d:d6:70:a4:f2:67:bc:d1:6e:
e0:b0:8b:3f:34:53:5c:40:2b:5d:85:b6:f2:03:df:
01:35:75:60:50:2b:d2:e0:14:68:db:6e:e6:ff:56:
ac:85:b1:fe:f2:57:61:6c:dc:34:e6:d8:9c:37:4e:
af:16:3a:a8:bb:aa:3a:31:da:17:d8:46:64:af:a2:
f6:60:74:6f:8e:28:6f:9c:ee:b8:fd:b6:fe:15:7d:
32:11:b4:38:4f:e3:45:4e:05:a7:03:f8:39:9c:25:
3b:ad:eb:2e:ec:3d:e7:4d:9c:75:2a:ef:a3:98:4b:
28:96:a9:df:05:65:b4:3b:6d:32:ba:7a:dd:02:11:
14:38:88:1d:d5:45:5c:96:b7:34:3e:c5:5f:9f:27:
8e:7d:8a:c5:36:fe:61:a6:de:d8:f1:bb:0c:94:95:
6d:8f:b1:33:84:35:28:16:05:78:35:e3:b2:0e:4e:
4d:92:01:a7:d7:ca:26:6f:34:66:54:33:26:07:71:
12:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E5:C7:DD:6B:0C:50:BC:A4:1D:6D:72:F8:11:B7:51:D1:55:BB:19
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/i-XH3WsMULykHW1y-BG3UdFVuxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.192.0/24
37.209.194.0/24
37.209.196.0/24
37.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
61:26:35:26:c2:7e:f6:51:0b:27:e8:7f:da:e0:d7:b6:f1:22:
9e:64:52:e8:dc:b6:2c:6e:c4:b5:93:b6:5b:79:9f:2b:90:dc:
99:f4:39:65:c7:2b:28:72:c5:ac:de:eb:2f:c3:03:49:cf:23:
3a:70:5a:dd:bf:db:d7:3e:a0:57:e4:59:71:6c:e6:09:fc:e8:
66:ad:88:91:33:d7:f5:de:0c:c9:ac:a6:75:7f:96:f3:32:b3:
f5:ff:55:51:b2:f9:2d:5a:08:af:1f:fb:c8:99:af:30:3d:df:
92:96:ad:fc:01:dc:97:83:3b:a8:a4:90:69:e4:5b:7d:aa:c9:
b6:1f:41:a5:4d:b9:58:3c:11:ce:e4:5f:77:30:7e:56:50:3c:
9a:bf:ef:53:35:de:3b:55:07:ee:bd:36:09:bc:b2:0f:ab:95:
f2:6d:6c:62:39:d4:7c:fb:b7:a2:9f:58:be:83:a4:c6:e5:f8:
10:a9:fa:59:0a:12:73:ae:9e:11:e8:d3:95:50:fa:17:69:b7:
21:82:d3:26:7e:ad:c9:0f:d9:f7:ac:42:11:73:86:53:c4:3f:
d4:e8:1f:00:04:aa:13:ac:01:b9:d8:56:ac:83:34:fb:37:a2:
94:33:82:d3:ae:d1:24:21:51:74:ed:55:5d:35:06:8f:e1:74:
a1:52:18:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:19:10 2025 by rpki-client