Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/yXOU2r32sucGxB9-Z9ZhjZOhedM.roa
File: yXOU2r32sucGxB9-Z9ZhjZOhedM.roa (raw, json)
Hash identifier: vAVSTyHryWSEFu+zHv/t5/KHUJutcYo2/piybcJJ41A=
Subject key identifier: C9:73:94:DA:BD:F6:B2:E7:06:C4:1F:7E:67:D6:61:8D:93:A1:79:D3
Certificate issuer: /CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Certificate serial: 019427483059F25A43806E644A6AF91B3685
Authority key identifier: 50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/yXOU2r32sucGxB9-Z9ZhjZOhedM.roa
Signing time: Thu 02 Jan 2025 13:50:29 +0000
ROA not before: Thu 02 Jan 2025 13:50:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206260
IP address blocks: 37.18.64.0/21 maxlen: 24
46.227.192.0/21 maxlen: 24
185.137.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:30:59:f2:5a:43:80:6e:64:4a:6a:f9:1b:36:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Validity
Not Before: Jan 2 13:50:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c97394dabdf6b2e706c41f7e67d6618d93a179d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fb:b0:03:10:76:60:34:92:5e:3b:38:9f:4d:
e4:27:4d:4e:7c:1d:13:02:59:53:0c:4c:dc:8c:bf:
a1:05:a3:09:51:bf:86:ba:2c:15:4a:3a:f0:53:6a:
3b:a6:56:08:e9:d6:01:40:1c:56:26:fa:df:7f:1f:
9a:18:67:40:6d:03:b9:2a:41:1d:6f:a6:c9:9f:26:
cb:42:e5:67:ba:b2:c2:86:ae:9e:90:20:04:6d:5b:
94:08:65:c9:7b:95:b0:54:86:e9:37:8a:55:84:ca:
65:49:1f:ad:51:60:3e:69:51:ca:5c:2f:dd:01:60:
92:95:32:cf:fe:7e:83:2d:56:26:99:c9:70:55:9c:
c8:91:5f:44:c2:ee:68:d2:5c:37:51:25:b6:0b:ba:
8b:58:b3:c8:f9:69:e5:f4:06:91:be:b9:2e:2d:19:
bb:0a:6e:7d:39:81:c2:46:8c:0e:ce:b2:4a:66:d2:
bc:dd:d1:d0:5c:d1:81:62:35:d6:0e:4e:4c:fe:b9:
48:77:9f:93:97:c4:45:bc:d7:f4:f2:1e:be:69:8f:
6e:4e:e9:8d:61:f8:61:b3:a2:ce:e4:e2:ec:04:c8:
71:43:37:50:2a:b4:44:eb:4f:b2:f6:dd:ed:4d:3c:
fb:7d:17:e5:a4:55:56:54:62:f5:c2:e7:f6:8f:a9:
0c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:73:94:DA:BD:F6:B2:E7:06:C4:1F:7E:67:D6:61:8D:93:A1:79:D3
X509v3 Authority Key Identifier:
keyid:50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/yXOU2r32sucGxB9-Z9ZhjZOhedM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.64.0/21
46.227.192.0/21
185.137.4.0/22
Signature Algorithm: sha256WithRSAEncryption
54:c4:82:ed:e8:ee:a7:af:d2:c1:60:62:ac:9c:ea:8c:cb:39:
1d:41:40:85:c3:6a:49:d6:80:89:3a:80:c9:74:65:d2:2f:0f:
dd:21:67:58:ff:87:45:a2:7b:68:a0:d5:5c:db:0e:15:f5:32:
8b:62:1b:a9:a0:09:b1:af:50:69:88:15:5d:dd:a4:5a:43:29:
9b:6d:fa:a6:a7:18:ec:0a:fc:64:af:fb:48:95:27:41:05:f4:
10:2a:a2:e8:05:55:7d:14:03:b2:45:1d:e5:27:fd:d9:43:77:
b8:d1:cc:22:f3:45:95:a8:be:f9:47:66:b1:1b:88:06:85:15:
89:04:6c:fe:89:73:86:6f:24:95:b0:43:0f:13:f4:38:c4:7c:
56:5d:39:64:46:ee:b1:46:fa:8e:20:d8:7f:ce:eb:91:93:30:
5e:f0:66:8b:0d:fc:4e:ec:76:44:b9:20:f7:37:0f:78:40:40:
b6:24:7b:74:f7:fc:5d:89:41:04:74:b3:3e:a8:b2:6c:cf:4a:
e2:ef:7d:e6:d0:ad:a3:f5:53:b7:3d:70:87:b0:72:73:3d:d0:
5d:2c:5f:d9:07:0c:3b:dd:98:61:78:5c:7e:8b:7c:8c:5b:ba:
11:d3:94:0b:1c:a0:77:43:7d:00:a0:9a:f8:35:7c:23:48:8c:
79:f0:e5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:51:16 2025 by rpki-client