Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/01fa18-ab6a-4899-b475-92a3661ec26d/1/zKSakUOaWKKH4xEtlneFm3kuxi0.roa
File: zKSakUOaWKKH4xEtlneFm3kuxi0.roa (raw, json)
Hash identifier: Q00yHJszHHWc/O9OFx8hMJ2y8kORPowxeXEqHQ0wmfQ=
Subject key identifier: CC:A4:9A:91:43:9A:58:A2:87:E3:11:2D:96:77:85:9B:79:2E:C6:2D
Certificate issuer: /CN=02f81c37e9ed24d0b20e94c18690e88ae4b311ca
Certificate serial: FA55A8
Authority key identifier: 02:F8:1C:37:E9:ED:24:D0:B2:0E:94:C1:86:90:E8:8A:E4:B3:11:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvgcN-ntJNCyDpTBhpDoiuSzEco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/01fa18-ab6a-4899-b475-92a3661ec26d/1/zKSakUOaWKKH4xEtlneFm3kuxi0.roa
Signing time: Tue 05 Apr 2022 08:53:51 +0000
ROA not before: Tue 05 Apr 2022 08:53:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29286
IP address blocks: 37.203.192.0/21 maxlen: 21
37.203.198.0/23 maxlen: 24
37.19.96.0/24 maxlen: 24
37.19.101.0/24 maxlen: 24
37.19.102.0/23 maxlen: 24
185.4.192.0/24 maxlen: 24
185.4.192.0/22 maxlen: 22
185.4.195.0/24 maxlen: 24
185.4.194.0/24 maxlen: 24
185.4.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16405928 (0xfa55a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02f81c37e9ed24d0b20e94c18690e88ae4b311ca
Validity
Not Before: Apr 5 08:53:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cca49a91439a58a287e3112d9677859b792ec62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fd:e9:f1:6b:40:e4:cd:f4:bd:68:ff:13:52:
82:06:fd:ad:41:e3:0f:9a:64:a7:ea:fa:4e:ff:05:
1d:cc:ba:32:5e:ba:96:06:83:e7:e2:00:f3:66:09:
89:a7:cb:89:0e:3a:92:21:3e:55:1a:bd:08:af:c1:
ef:99:f9:31:db:fd:f6:00:0d:97:dd:7b:24:07:d6:
cc:68:f1:a7:c5:bb:a7:6e:2e:cc:4b:88:1e:86:1b:
ee:41:2a:da:a4:87:ec:8c:89:39:60:8d:b9:af:ae:
10:a0:5b:2c:94:ca:3f:34:a3:61:f8:75:51:5a:b0:
fb:16:47:a8:dd:55:f6:10:8f:97:73:2b:af:4c:bd:
67:67:f8:23:1c:a2:64:11:dc:e8:6a:35:40:99:f7:
93:09:35:ad:69:5c:4b:05:ba:c8:bf:d1:65:d1:e5:
85:76:e7:9c:7a:df:17:3e:24:94:19:e2:9e:c7:a8:
6a:fa:95:a7:11:bf:0e:0f:c8:20:86:cc:14:b5:ae:
ba:03:d6:62:c9:b7:6f:1b:b4:c2:29:68:4b:81:b7:
00:a5:80:bc:0c:11:43:f5:07:35:78:6a:94:a6:29:
e2:08:aa:f9:54:04:6a:8e:32:af:cf:3c:05:c0:16:
2a:3f:8f:a5:fa:ca:30:c6:73:4f:64:e6:de:c1:ce:
6f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A4:9A:91:43:9A:58:A2:87:E3:11:2D:96:77:85:9B:79:2E:C6:2D
X509v3 Authority Key Identifier:
keyid:02:F8:1C:37:E9:ED:24:D0:B2:0E:94:C1:86:90:E8:8A:E4:B3:11:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvgcN-ntJNCyDpTBhpDoiuSzEco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/01fa18-ab6a-4899-b475-92a3661ec26d/1/zKSakUOaWKKH4xEtlneFm3kuxi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/01fa18-ab6a-4899-b475-92a3661ec26d/1/AvgcN-ntJNCyDpTBhpDoiuSzEco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.19.96.0/24
37.19.101.0-37.19.103.255
37.203.192.0/21
185.4.192.0/22
Signature Algorithm: sha256WithRSAEncryption
65:5a:b6:70:06:f6:a8:fe:0a:4f:0d:0e:4d:d5:e5:2e:33:a8:
49:d2:e9:bc:66:bb:05:f9:d6:a2:82:28:5b:7f:eb:2f:19:4d:
6f:20:e5:21:a9:2c:bf:15:5d:5c:14:69:6e:25:e0:d3:91:e5:
b2:b2:cc:ad:7d:3f:26:2a:d4:ad:b6:17:d2:09:f1:10:f9:6a:
b8:b6:cd:d1:24:1b:2f:c4:20:71:bd:21:41:01:f8:a1:0b:45:
6b:d0:1d:ce:c3:31:81:b4:da:ad:35:3b:fc:c0:3f:59:f3:60:
cb:21:6c:8d:bb:a5:0d:2c:8f:ef:8a:55:29:2d:44:a8:54:6e:
5b:9a:2f:b8:1d:57:09:91:06:b1:8b:cd:02:27:6e:cd:aa:e2:
e6:81:0d:c3:72:7f:62:11:5e:4e:ca:a3:79:50:5b:b3:c5:cc:
82:e4:f5:71:7f:f5:18:91:0f:81:74:bc:8b:64:af:eb:2f:69:
9a:b0:fd:63:f2:f2:e5:2d:50:a6:0f:a8:ff:51:45:8c:8c:ce:
02:b5:fa:61:7e:fe:b8:b9:48:65:6d:22:a3:f7:c0:bc:a4:e1:
57:3a:d2:04:21:e3:7d:f4:9d:da:a2:b1:c9:66:92:9c:e9:4d:
32:72:eb:c4:e5:8b:c0:64:e2:f4:26:cb:43:ef:f2:f6:1d:ca:
88:0d:38:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:35:51 2025 by rpki-client