Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/R9Y2UXc3gbnEBailiktj6_FjgwY.roa
File: R9Y2UXc3gbnEBailiktj6_FjgwY.roa (raw, json)
Hash identifier: +zsIlSUqGQ4eDziRAsiUj/M3yVhmW5V6xkg2OmRBGMw=
Subject key identifier: 47:D6:36:51:77:37:81:B9:C4:05:A8:A5:8A:4B:63:EB:F1:63:83:06
Certificate issuer: /CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Certificate serial: 0195388B38D7EEEC9DDEFF8DBC13C69C315D
Authority key identifier: 50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/R9Y2UXc3gbnEBailiktj6_FjgwY.roa
Signing time: Mon 24 Feb 2025 15:20:02 +0000
ROA not before: Mon 24 Feb 2025 15:20:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398748
IP address blocks: 37.228.148.0/24 maxlen: 24
37.228.149.0/24 maxlen: 24
37.228.150.0/24 maxlen: 24
37.228.151.0/24 maxlen: 24
2a06:1c41::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:38:8b:38:d7:ee:ec:9d:de:ff:8d:bc:13:c6:9c:31:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Validity
Not Before: Feb 24 15:20:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47d63651773781b9c405a8a58a4b63ebf1638306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:09:65:73:93:4f:a1:a9:d9:13:a6:36:61:50:
86:48:04:0b:0f:4f:7d:8b:0e:fa:9a:c1:0a:1f:8c:
44:56:16:68:57:b7:04:3a:d1:a1:13:7c:e5:9c:69:
33:99:d8:c6:a5:f4:4c:91:a1:62:fe:4e:5f:a2:a4:
6a:96:7c:99:02:f6:01:7e:39:1d:93:dd:6a:f3:7a:
29:a0:88:65:8a:72:a4:58:14:fd:e1:99:52:cb:0f:
37:c3:ed:3f:ba:f4:f6:09:1a:25:bc:28:19:cf:14:
a8:d1:f2:f7:66:49:d1:fe:bb:3c:8f:0c:3f:ba:68:
6f:55:47:c2:30:50:6e:06:03:e7:e6:b1:29:e8:a6:
18:e1:7c:67:eb:2c:89:ee:d5:69:4d:dc:d1:1d:eb:
b5:4a:0c:e3:76:13:e9:a2:fb:cf:2a:3d:f4:48:7c:
08:ef:20:ce:61:a2:09:75:54:cc:a5:cb:7d:f4:33:
be:61:55:89:ac:1a:aa:25:b9:b5:21:09:db:1d:9c:
2a:a0:ff:8d:a6:f1:ef:70:06:2c:74:6e:9e:2b:98:
26:1b:86:e1:a6:38:b5:22:b1:df:28:34:c9:83:f8:
1c:3b:eb:fc:3b:04:b1:ec:6e:91:34:aa:39:3d:2d:
57:c7:c0:07:c9:d7:e1:d2:90:37:f0:d5:09:ca:e9:
ab:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D6:36:51:77:37:81:B9:C4:05:A8:A5:8A:4B:63:EB:F1:63:83:06
X509v3 Authority Key Identifier:
keyid:50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/R9Y2UXc3gbnEBailiktj6_FjgwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.228.148.0/22
IPv6:
2a06:1c41::/32
Signature Algorithm: sha256WithRSAEncryption
5b:2b:17:40:6b:43:3f:af:3e:0e:58:f2:f4:6b:f4:52:aa:ee:
c1:9d:7d:df:ff:a3:f9:13:72:95:b8:be:40:87:c3:9a:42:e0:
28:f4:72:63:25:a8:0f:97:eb:ac:56:91:28:d2:09:da:e5:3e:
bf:05:42:1f:f6:a9:ae:67:00:e2:bf:2d:ae:7f:15:4d:8b:cc:
dd:2c:98:94:8b:f1:01:6b:ab:11:c4:7a:ac:ec:51:46:5d:e4:
31:9a:93:b0:5c:8d:9e:b5:4c:c8:d5:c0:07:7f:b9:3d:3f:c2:
28:0f:bb:a6:6b:a9:52:b1:0a:aa:76:2c:ca:f5:fb:ba:0d:5d:
a4:fb:c1:ca:90:e0:42:a5:5a:a4:91:15:89:53:b8:38:15:ec:
c9:cc:42:85:81:db:71:a4:8c:8b:61:bd:eb:5b:ec:82:6e:8f:
9c:a6:e6:55:a8:88:70:35:88:f9:97:01:f6:0d:d2:83:fa:2e:
2d:fc:1d:17:e7:b5:ae:74:c1:e2:cd:37:84:75:6f:1a:68:18:
d0:8a:cf:30:83:42:07:5a:65:7d:18:e5:3c:07:fc:d2:c6:a2:
db:54:a4:70:b1:04:f3:e8:c2:a7:04:0a:f2:01:28:44:14:30:
8c:ae:52:0f:6d:a1:e5:8a:fc:49:18:fa:8f:dd:33:97:93:62:
b9:c0:ac:ca
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZU4izjX7uyd3v+NvBPGnDFdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwZDE4MTk2YjI5ZjYwZTg1ZDg3MTJkZTQwMzlhNTMxY2Zj
MWFiMzEwHhcNMjUwMjI0MTUyMDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2Q2MzY1MTc3Mzc4MWI5YzQwNWE4YTU4YTRiNjNlYmYxNjM4MzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAllc5NPoanZE6Y2YVCGSAQLD099
iw76msEKH4xEVhZoV7cEOtGhE3zlnGkzmdjGpfRMkaFi/k5foqRqlnyZAvYBfjkd
k91q83opoIhlinKkWBT94ZlSyw83w+0/uvT2CRolvCgZzxSo0fL3ZknR/rs8jww/
umhvVUfCMFBuBgPn5rEp6KYY4Xxn6yyJ7tVpTdzRHeu1SgzjdhPpovvPKj30SHwI
7yDOYaIJdVTMpct99DO+YVWJrBqqJbm1IQnbHZwqoP+NpvHvcAYsdG6eK5gmG4bh
pji1IrHfKDTJg/gcO+v8OwSx7G6RNKo5PS1Xx8AHydfh0pA38NUJyumrhwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFEfWNlF3N4G5xAWopYpLY+vxY4MGMB8GA1UdIwQY
MBaAFFDRgZayn2DoXYcS3kA5pTHPwasxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU5HQmxyS2ZZT2hkaHhMZVFEbWxNY19CcXpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9jYmVjZjQtYmNlZC00ZDgzLWJmY2Et
YjRhMTgxY2Q0MGY2LzEvUjlZMlVYYzNnYm5FQmFpbGlrdGo2X0ZqZ3dZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9jYmVjZjQtYmNlZC00ZDgzLWJmY2EtYjRhMTgxY2Q0MGY2
LzEvVU5HQmxyS2ZZT2hkaHhMZVFEbWxNY19CcXpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCJeSUMA0E
AgACMAcDBQAqBhxBMA0GCSqGSIb3DQEBCwUAA4IBAQBbKxdAa0M/rz4OWPL0a/RS
qu7BnX3f/6P5E3KVuL5Ah8OaQuAo9HJjJagPl+usVpEo0gna5T6/BUIf9qmuZwDi
vy2ufxVNi8zdLJiUi/EBa6sRxHqs7FFGXeQxmpOwXI2etUzI1cAHf7k9P8IoD7um
a6lSsQqqdizK9fu6DV2k+8HKkOBCpVqkkRWJU7g4FezJzEKFgdtxpIyLYb3rW+yC
bo+cpuZVqIhwNYj5lwH2DdKD+i4t/B0X57WudMHizTeEdW8aaBjQis8wg0IHWmV9
GOU8B/zSxqLbVKRwsQTz6MKnBAryAShEFDCMrlIPbaHlivxJGPqP3TOXk2K5wKzK
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:09:58 2025 by rpki-client