Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/lxacDbK0eMnuXnpxPVHxYt8h8A4.roa
File: lxacDbK0eMnuXnpxPVHxYt8h8A4.roa (raw, json)
Hash identifier: rsXevB7T0iAAuzzWpzZrb3jX78EQxi4+Xjb6q3I67TY=
Subject key identifier: 97:16:9C:0D:B2:B4:78:C9:EE:5E:7A:71:3D:51:F1:62:DF:21:F0:0E
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 019424B29FB055C743C2FA68276D5AD6E707
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/lxacDbK0eMnuXnpxPVHxYt8h8A4.roa
Signing time: Thu 02 Jan 2025 01:47:53 +0000
ROA not before: Thu 02 Jan 2025 01:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397241
IP address blocks: 37.209.192.0/24 maxlen: 24
37.209.194.0/24 maxlen: 24
37.209.196.0/24 maxlen: 24
37.209.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:9f:b0:55:c7:43:c2:fa:68:27:6d:5a:d6:e7:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 2 01:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97169c0db2b478c9ee5e7a713d51f162df21f00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:89:aa:b0:c3:34:1a:93:b2:0d:65:e7:31:b5:
a9:67:73:51:4e:63:61:5f:74:77:38:45:fe:33:b2:
60:78:08:1b:25:4d:a0:e8:6a:0a:a7:a7:51:ec:af:
3f:cc:43:99:f4:49:48:bd:0a:a4:1f:0a:6a:b7:e5:
39:4c:43:2e:f2:ff:d7:d4:38:df:8c:b9:a7:36:94:
78:4c:9c:c2:df:59:c3:0a:5a:de:f6:f4:5d:db:e1:
6d:df:72:ed:42:18:3d:cf:e2:ce:c8:66:41:dc:e5:
ca:0b:d2:3f:5a:5f:af:b9:f1:f9:31:5b:64:74:fb:
38:a4:b3:f0:4b:dc:8a:94:c3:a3:f0:97:b1:da:b2:
6e:2f:b5:b7:a6:2c:c1:ce:70:a6:44:8f:1b:e7:bd:
58:07:dc:7b:ac:e5:07:f0:53:95:3d:c5:f6:53:a7:
06:32:78:2b:c1:27:52:1b:2b:b9:97:57:46:ce:e6:
94:32:67:6b:1a:aa:36:67:c9:17:4d:70:e0:83:d6:
cf:24:5d:a1:72:51:f8:34:83:3b:c3:3b:fe:86:14:
92:51:92:a7:11:5d:8f:46:74:01:fd:0e:df:46:b3:
ea:9b:30:e3:24:4a:62:e8:c9:8b:33:7a:8c:ae:2e:
4c:fc:5f:5e:ca:3d:dc:e0:23:ba:eb:71:6d:bd:54:
b0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:16:9C:0D:B2:B4:78:C9:EE:5E:7A:71:3D:51:F1:62:DF:21:F0:0E
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/lxacDbK0eMnuXnpxPVHxYt8h8A4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.192.0/24
37.209.194.0/24
37.209.196.0/24
37.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
08:b8:bf:57:e6:ca:c3:42:cc:a1:0b:ba:67:6a:66:fd:bf:e9:
46:db:52:f7:46:eb:0e:07:2a:4f:8e:0d:dc:b3:57:8b:44:33:
50:1e:ef:31:f9:86:5f:6f:d9:a5:f7:a1:55:59:1b:44:84:de:
e0:42:48:0c:8d:9e:21:f6:37:ca:97:b0:4c:03:e8:51:4c:4e:
6b:f2:98:c1:59:6b:ad:b5:c1:94:70:a1:80:2c:bd:76:86:22:
be:3c:05:0d:63:06:ac:92:7d:21:9f:48:17:32:12:75:f7:4a:
39:8e:a6:93:8a:0a:f8:30:e7:b4:25:8f:7b:77:e8:16:9c:08:
dd:a1:84:94:d3:36:a4:2e:cc:ac:17:e8:49:30:ba:a3:4b:11:
a6:3e:3e:ff:38:5e:73:a0:00:70:81:52:12:15:f8:ba:43:4a:
f8:01:2d:cc:62:30:29:03:5e:20:ec:8e:f8:00:88:34:53:54:
02:6c:e4:d7:7a:df:99:bd:c1:b0:a1:de:40:99:af:85:ad:2b:
ac:5c:13:89:8f:61:7d:c6:aa:b9:03:ed:29:5f:db:3f:f7:ee:
2d:61:bb:4f:fd:2f:5d:1e:34:95:ad:63:4b:7b:a9:32:0a:ef:
83:fa:b6:b6:e3:93:24:98:59:6b:68:bf:a7:a7:2e:6b:d0:54:
cb:84:bf:5b
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQksp+wVcdDwvpoJ21a1ucHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj
OGJmMmMwHhcNMjUwMTAyMDE0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzE2OWMwZGIyYjQ3OGM5ZWU1ZTdhNzEzZDUxZjE2MmRmMjFmMDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8omqsMM0GpOyDWXnMbWpZ3NRTmNh
X3R3OEX+M7JgeAgbJU2g6GoKp6dR7K8/zEOZ9ElIvQqkHwpqt+U5TEMu8v/X1Djf
jLmnNpR4TJzC31nDClre9vRd2+Ft33LtQhg9z+LOyGZB3OXKC9I/Wl+vufH5MVtk
dPs4pLPwS9yKlMOj8Jex2rJuL7W3pizBznCmRI8b571YB9x7rOUH8FOVPcX2U6cG
MngrwSdSGyu5l1dGzuaUMmdrGqo2Z8kXTXDgg9bPJF2hclH4NIM7wzv+hhSSUZKn
EV2PRnQB/Q7fRrPqmzDjJEpi6MmLM3qMri5M/F9eyj3c4CO663FtvVSwHwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFJcWnA2ytHjJ7l56cT1R8WLfIfAOMB8GA1UdIwQY
MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt
NDE2Zjg1ZWUyMzdiLzEvbHhhY0RiSzBlTW51WG5weFBWSHhZdDhoOEE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi
LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJdHAAwQA
JdHCAwQAJdHEAwQAJdHGMA0GCSqGSIb3DQEBCwUAA4IBAQAIuL9X5srDQsyhC7pn
amb9v+lG21L3RusOBypPjg3cs1eLRDNQHu8x+YZfb9ml96FVWRtEhN7gQkgMjZ4h
9jfKl7BMA+hRTE5r8pjBWWuttcGUcKGALL12hiK+PAUNYwaskn0hn0gXMhJ190o5
jqaTigr4MOe0JY97d+gWnAjdoYSU0zakLsysF+hJMLqjSxGmPj7/OF5zoABwgVIS
Ffi6Q0r4AS3MYjApA14g7I74AIg0U1QCbOTXet+ZvcGwod5Ama+FrSusXBOJj2F9
xqq5A+0pX9s/9+4tYbtP/S9dHjSVrWNLe6kyCu+D+ra245MkmFlraL+npy5r0FTL
hL9b
-----END CERTIFICATE-----
Generated at Wed Apr 9 01:48:18 2025 by rpki-client