Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/xvMwGEntPrsPSijtn7qckfPF1Lw.roa
File: xvMwGEntPrsPSijtn7qckfPF1Lw.roa (raw, json)
Hash identifier: cfgqt0GeV7LUHA50FIbHHM6KEXg5Xmqps/DGbUwBUAM=
Subject key identifier: C6:F3:30:18:49:ED:3E:BB:0F:4A:28:ED:9F:BA:9C:91:F3:C5:D4:BC
Certificate issuer: /CN=3ad65216812ed24fd1c719871a59a971dec30a26
Certificate serial: 019424B36F3F6135A12BDE26741E843F2FBA
Authority key identifier: 3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/xvMwGEntPrsPSijtn7qckfPF1Lw.roa
Signing time: Thu 02 Jan 2025 01:48:46 +0000
ROA not before: Thu 02 Jan 2025 01:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8540
IP address blocks: 37.186.5.0/24 maxlen: 24
81.94.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:6f:3f:61:35:a1:2b:de:26:74:1e:84:3f:2f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad65216812ed24fd1c719871a59a971dec30a26
Validity
Not Before: Jan 2 01:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6f3301849ed3ebb0f4a28ed9fba9c91f3c5d4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:97:b1:5c:72:37:12:56:eb:33:14:75:eb:a6:
49:32:9c:fc:fd:22:44:c5:45:58:3a:f0:9c:f5:05:
f2:e9:b7:91:48:50:57:cf:63:fd:57:6c:86:28:df:
c6:72:72:8f:f6:9f:4e:91:17:0d:6b:a1:22:3b:17:
0a:db:de:94:e4:c2:7d:32:23:b0:1c:bc:d1:e1:92:
01:b5:3e:41:b5:0e:1f:6d:54:7d:6a:0f:9b:a8:a8:
d5:e8:17:59:16:27:48:49:62:8b:51:87:cf:c3:3e:
47:a1:90:41:42:37:22:30:13:93:a1:da:1d:f5:68:
58:75:4b:db:7d:6c:a2:02:ba:ec:e8:40:21:d8:64:
ea:7f:63:e2:fb:cd:2e:47:59:b4:6c:31:d1:03:b3:
7c:af:0f:7d:c0:75:28:7e:04:5c:0f:66:ec:7a:fa:
ab:2b:9b:20:e2:5b:70:3f:80:51:b7:ac:9e:d2:f6:
28:e7:fd:75:f4:d3:e0:1d:0e:23:e9:63:5c:4d:c8:
6a:04:cd:4a:5c:17:a3:70:ff:ff:e1:55:d3:ef:29:
7b:92:a5:79:88:df:96:de:fa:0d:47:df:6e:68:4c:
a1:d8:d4:c9:ee:44:e3:7b:3b:04:eb:e4:b3:2b:be:
98:aa:47:8e:b1:e7:c2:17:a9:af:8b:fc:3b:ee:23:
b5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F3:30:18:49:ED:3E:BB:0F:4A:28:ED:9F:BA:9C:91:F3:C5:D4:BC
X509v3 Authority Key Identifier:
keyid:3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/xvMwGEntPrsPSijtn7qckfPF1Lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.186.5.0/24
81.94.55.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:07:61:66:f9:e9:53:37:4a:75:7e:82:44:26:e8:d3:de:bb:
a3:18:ba:cd:c7:62:f0:cf:8a:5c:96:38:57:09:73:18:1e:f2:
39:22:2c:4c:b6:9f:87:22:8b:6f:91:59:ec:52:6f:af:f0:d7:
3a:d1:57:1f:4d:f1:99:cb:53:77:a7:70:c0:15:6f:f9:42:98:
ce:78:38:1e:21:31:d2:e3:57:af:09:51:34:e0:5d:b3:7f:03:
5e:94:d4:74:28:4e:e9:cf:c2:5a:f0:d0:08:0b:c7:49:b2:24:
f2:02:0e:20:00:90:b9:f2:f9:99:14:2e:e0:6a:f9:ca:ad:0c:
bf:27:cd:6d:7f:90:2b:89:8c:13:3a:56:bb:d8:3b:71:1d:01:
4e:21:12:53:b5:92:7f:16:69:95:1f:2f:6e:b6:4a:6a:ae:9e:
a2:8d:04:69:8f:86:26:0c:44:02:07:e8:d3:59:ae:3c:52:0e:
cd:09:ec:6e:08:b2:01:d3:71:95:6a:0f:cc:9d:95:1e:e7:94:
66:b1:eb:97:44:42:bf:c7:da:51:43:40:7f:0f:e0:b9:40:6f:
0f:e3:c4:37:80:e1:bf:c3:9b:e3:19:cc:f0:11:d3:a7:e7:fa:
73:a5:40:44:63:ca:c9:f1:c6:68:a5:0e:92:0e:5d:22:78:b0:
03:79:1b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:28 2025 by rpki-client