Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/rvgAs6WmoB_QmrlMgSgm7khV-4U.roa
File: rvgAs6WmoB_QmrlMgSgm7khV-4U.roa (raw, json)
Hash identifier: ByaVeRT7BxyoGgwxavoqH/EHW9rBtmtZSrveuw0KL1c=
Subject key identifier: AE:F8:00:B3:A5:A6:A0:1F:D0:9A:B9:4C:81:28:26:EE:48:55:FB:85
Certificate issuer: /CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Certificate serial: 0194228E110550FE8E6D66A52992C1472E67
Authority key identifier: 42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/rvgAs6WmoB_QmrlMgSgm7khV-4U.roa
Signing time: Wed 01 Jan 2025 15:48:43 +0000
ROA not before: Wed 01 Jan 2025 15:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13127
IP address blocks: 37.220.147.0/24 maxlen: 24
37.220.148.0/24 maxlen: 24
37.220.149.0/24 maxlen: 24
37.220.150.0/24 maxlen: 24
37.220.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:11:05:50:fe:8e:6d:66:a5:29:92:c1:47:2e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Validity
Not Before: Jan 1 15:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aef800b3a5a6a01fd09ab94c812826ee4855fb85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:35:79:68:cc:01:93:14:06:fc:9d:79:11:98:
7e:f3:4c:57:df:a8:b0:d5:c5:3d:2a:aa:b9:c9:46:
5c:62:23:f0:22:3d:39:2b:e2:64:0e:dc:3d:37:57:
d4:74:7c:fc:60:4c:48:ca:be:c0:c5:87:10:f1:c7:
88:13:53:da:e0:51:eb:aa:f0:14:8b:5e:69:5c:6c:
9f:16:74:25:6b:4f:7a:73:73:1b:08:44:e6:97:18:
5c:96:40:75:dd:33:1d:09:6d:70:ac:52:ee:d6:82:
67:b1:c8:02:78:77:5f:7e:c3:03:44:99:f0:b1:0d:
92:c0:22:44:8a:d1:b3:bf:70:69:5f:2f:94:c8:18:
3f:3b:54:71:3c:1b:29:3e:97:d4:3c:97:b9:5b:91:
f7:be:3c:3c:13:0c:ca:9c:17:a1:40:46:6e:97:45:
cb:60:96:13:97:d4:dc:d3:ec:86:c6:b1:ce:8d:2a:
10:8b:a5:31:31:fc:75:14:e3:9c:fe:7d:35:0c:90:
9b:d5:93:83:23:b2:71:89:02:10:63:08:3a:be:c3:
71:b2:63:86:6e:a8:08:da:9f:9b:4e:b9:a0:51:f7:
3e:ea:d2:af:8f:5e:2f:dd:95:45:65:e1:48:d0:2a:
64:d1:ee:26:97:a8:86:14:d8:7d:4f:05:a4:3d:9b:
5b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F8:00:B3:A5:A6:A0:1F:D0:9A:B9:4C:81:28:26:EE:48:55:FB:85
X509v3 Authority Key Identifier:
keyid:42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/rvgAs6WmoB_QmrlMgSgm7khV-4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.220.147.0-37.220.151.255
Signature Algorithm: sha256WithRSAEncryption
a5:27:80:d1:c8:7b:8d:3f:60:01:be:df:e6:07:66:17:30:d6:
ba:77:ae:37:93:b3:f5:0b:d3:74:c3:3f:62:dd:79:83:eb:fc:
85:4c:81:87:48:1e:34:c4:07:1c:36:7e:52:9f:3f:2f:a7:34:
fe:79:a3:59:df:8d:19:f1:d7:1b:fe:7d:c3:e9:79:4e:f6:39:
d3:83:d7:eb:da:56:5a:dd:0c:e9:82:83:19:12:c4:b1:96:d3:
c4:e6:1d:42:d4:e0:14:e3:36:98:4c:66:fe:5e:ba:86:81:4c:
89:1e:4c:b3:17:d5:d3:ce:7e:ee:2e:62:9f:db:fa:3e:a2:e7:
b2:10:21:fc:aa:22:c6:04:4b:2b:51:1e:f4:41:47:c2:bf:2f:
87:fb:e1:f8:bc:bc:93:1a:9e:f8:1e:a0:c9:d1:0a:be:f9:36:
c0:4f:5c:02:b5:38:dc:ad:79:6d:73:69:47:93:51:7b:ea:93:
57:5a:19:3c:4f:df:8e:f0:e3:66:08:99:08:56:3a:6b:40:53:
ce:05:e8:27:77:1c:8e:83:2a:98:51:3d:6a:b5:62:c8:de:20:
8d:ed:76:95:53:53:ce:0c:da:9e:8f:97:ca:24:bc:0d:54:30:
0f:86:16:35:3b:80:88:7f:c5:58:67:cc:de:20:db:a4:fa:08:
ba:fb:07:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:51 2025 by rpki-client