Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/FaVvxalLzbpJd7lGg-gIZ4RSuqw.roa
File: FaVvxalLzbpJd7lGg-gIZ4RSuqw.roa (raw, json)
Hash identifier: Vq9OXxCy4cXw387lqVrsEZN9rZ1lStx9VD3OgQ3YBXs=
Subject key identifier: 15:A5:6F:C5:A9:4B:CD:BA:49:77:B9:46:83:E8:08:67:84:52:BA:AC
Certificate issuer: /CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Certificate serial: 0194266A1E001E441139CABD3B6DAB2765F8
Authority key identifier: 80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/FaVvxalLzbpJd7lGg-gIZ4RSuqw.roa
Signing time: Thu 02 Jan 2025 09:47:56 +0000
ROA not before: Thu 02 Jan 2025 09:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211225
IP address blocks: 37.205.0.0/24 maxlen: 24
37.205.1.0/24 maxlen: 24
37.205.2.0/24 maxlen: 24
37.205.3.0/24 maxlen: 24
37.205.4.0/24 maxlen: 24
37.205.5.0/24 maxlen: 24
37.205.6.0/24 maxlen: 24
37.205.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:1e:00:1e:44:11:39:ca:bd:3b:6d:ab:27:65:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Validity
Not Before: Jan 2 09:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15a56fc5a94bcdba4977b94683e808678452baac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a7:2e:65:65:93:c5:e9:f4:bc:02:a8:f8:ad:
52:d4:f5:3d:29:14:96:20:9d:92:18:0c:bc:6f:74:
ed:05:d8:cd:68:f4:0c:13:ec:e6:68:d3:63:b5:f1:
5c:de:2e:16:9d:2e:29:e2:f3:6d:70:07:bd:5e:dd:
47:e2:22:43:76:1a:ee:34:1f:fe:0c:73:67:b0:34:
e8:fb:8f:c4:b9:a6:04:ac:43:ab:aa:60:e5:dc:14:
7a:07:d1:8b:6b:de:fd:9f:40:aa:c2:39:21:f0:78:
1e:06:64:28:dc:bb:ff:41:4a:a2:ca:b9:2b:20:9f:
f8:78:cb:2d:d2:a2:66:1f:26:03:eb:5e:c5:d6:84:
8a:83:00:a3:47:b7:ff:c7:a0:c1:21:23:d1:51:f8:
0f:2b:8e:5f:1c:8a:93:1b:27:cb:9a:1d:f3:b8:d2:
16:51:46:a9:0b:05:8d:a1:82:d9:0d:bb:13:25:37:
de:f4:ce:5f:69:ae:a6:cf:f6:3c:e6:47:35:ee:6e:
2c:91:53:12:2e:6d:8a:ee:69:3d:b3:c1:2e:80:96:
9f:c4:cc:00:1b:70:f2:cc:f1:05:40:2c:ee:df:d2:
d6:0d:59:20:30:73:4f:38:0e:4a:11:d6:16:51:db:
4b:b8:9e:8e:ea:06:32:eb:8a:76:8a:b5:ed:57:d3:
c7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A5:6F:C5:A9:4B:CD:BA:49:77:B9:46:83:E8:08:67:84:52:BA:AC
X509v3 Authority Key Identifier:
keyid:80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/FaVvxalLzbpJd7lGg-gIZ4RSuqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.205.0.0/21
Signature Algorithm: sha256WithRSAEncryption
98:d2:0c:cf:c4:81:ed:50:98:d4:5b:51:c1:a7:39:eb:ee:33:
bd:cc:1e:3c:ae:01:c1:55:ea:ef:03:77:e7:a8:56:a9:80:d9:
a5:ac:15:ba:40:a0:95:9b:88:3b:65:04:d5:02:ad:76:07:9c:
da:ec:c2:59:44:55:dc:6e:1e:a6:73:27:41:83:3a:11:04:9a:
2a:89:6b:8d:b4:55:83:71:1b:3d:a0:0d:59:81:a5:1d:6f:07:
6f:9c:43:0b:29:0e:fb:32:ec:76:8f:e8:d2:c7:86:c5:ca:52:
53:79:16:5a:4f:1c:72:4d:64:ce:78:53:c0:51:68:d8:7d:72:
18:3e:22:ce:a1:25:dd:52:4c:86:a0:b1:02:09:f0:e3:2a:77:
cf:3c:65:4d:40:bc:1b:e7:7a:7c:f2:13:26:f9:ef:1c:a3:fd:
9e:ea:a1:47:26:e0:1c:dd:e9:c8:a9:e1:82:80:5c:98:eb:eb:
7a:24:29:0a:a5:32:2b:b7:33:fc:42:1f:d6:fe:af:31:1f:3d:
d2:7f:f2:d9:ad:26:cb:69:82:15:b7:ba:24:46:83:bf:a2:a3:
57:ee:ad:8b:b8:8c:59:1e:29:ad:f0:2a:48:9d:a2:ac:74:90:
35:44:79:99:53:a5:02:26:95:d5:4b:56:4f:6e:3c:ac:53:bb:
3f:2a:14:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:52:14 2025 by rpki-client