Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/YylrwMGF3qFvnaGvkmUDnZyYZ9g.roa
File: YylrwMGF3qFvnaGvkmUDnZyYZ9g.roa (raw, json)
Hash identifier: 8q8rerl630r/DmStNSsnGkxyqlbQwETqo+P5suMsVIo=
Subject key identifier: 63:29:6B:C0:C1:85:DE:A1:6F:9D:A1:AF:92:65:03:9D:9C:98:67:D8
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 01941FFA31924B791D7346D339225F1C7BFB
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/YylrwMGF3qFvnaGvkmUDnZyYZ9g.roa
Signing time: Wed 01 Jan 2025 03:47:57 +0000
ROA not before: Wed 01 Jan 2025 03:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44486
IP address blocks: 37.114.32.0/24 maxlen: 24
37.114.33.0/24 maxlen: 24
37.114.34.0/24 maxlen: 24
37.114.35.0/24 maxlen: 24
37.114.36.0/24 maxlen: 24
37.114.38.0/23 maxlen: 24
37.114.42.0/24 maxlen: 24
37.114.43.0/24 maxlen: 24
37.114.45.0/24 maxlen: 24
37.114.47.0/24 maxlen: 24
37.114.48.0/24 maxlen: 24
37.114.49.0/24 maxlen: 24
37.114.51.0/24 maxlen: 24
37.114.52.0/24 maxlen: 24
37.114.53.0/24 maxlen: 24
37.114.54.0/24 maxlen: 24
37.114.55.0/24 maxlen: 24
37.114.56.0/24 maxlen: 24
37.114.57.0/24 maxlen: 24
37.114.59.0/24 maxlen: 24
37.114.60.0/24 maxlen: 24
37.114.61.0/24 maxlen: 24
37.114.62.0/24 maxlen: 24
43.251.162.0/23 maxlen: 23
103.252.88.0/22 maxlen: 22
176.100.32.0/24 maxlen: 24
176.100.33.0/24 maxlen: 24
176.100.34.0/24 maxlen: 24
176.100.35.0/24 maxlen: 24
176.100.38.0/24 maxlen: 24
185.14.94.0/24 maxlen: 24
185.14.95.0/24 maxlen: 24
2a00:ccc1:100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:31:92:4b:79:1d:73:46:d3:39:22:5f:1c:7b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Jan 1 03:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63296bc0c185dea16f9da1af9265039d9c9867d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d9:90:77:02:ba:4c:d6:9f:cf:13:7f:54:07:
dd:6a:0e:5c:a9:b7:92:e8:5f:78:a7:37:91:0e:d8:
f7:7f:b9:35:fb:fd:d5:35:cc:9a:eb:05:45:cb:8f:
19:39:1f:9a:26:6c:02:e2:54:9f:8b:61:e8:05:b3:
e9:2c:9a:22:cc:4f:d8:6b:27:d8:ae:74:99:91:d8:
9c:f4:44:1a:bf:6c:c1:a8:24:6a:6c:66:0e:5f:95:
a0:89:da:b9:58:79:81:bd:7d:98:e0:f2:e2:0c:be:
c8:63:96:ec:64:a4:8e:56:18:99:fe:51:80:42:5b:
7c:dd:3e:7e:eb:fc:4c:b1:9d:55:76:62:76:1b:7a:
83:6f:0c:e0:79:5c:d9:4c:1e:06:27:77:11:48:c5:
8e:f4:3f:f6:8b:69:69:be:6e:a9:30:d9:8f:c5:bf:
89:fd:9d:75:75:aa:f7:a7:ab:6f:4d:90:72:2b:c0:
fb:7e:86:43:8c:61:70:38:6e:64:c8:6c:66:ec:5e:
61:18:bb:ca:d4:55:94:d7:ad:de:00:8e:57:c5:d1:
15:3f:ee:f8:b5:a8:a3:b4:a6:d5:13:b6:47:59:33:
d5:48:eb:5b:5c:bd:f5:ef:75:53:a2:5f:7e:88:1d:
b5:39:06:ae:be:01:11:93:7a:7f:84:c6:fe:28:59:
2c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:29:6B:C0:C1:85:DE:A1:6F:9D:A1:AF:92:65:03:9D:9C:98:67:D8
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/YylrwMGF3qFvnaGvkmUDnZyYZ9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.32.0-37.114.36.255
37.114.38.0/23
37.114.42.0/23
37.114.45.0/24
37.114.47.0-37.114.49.255
37.114.51.0-37.114.57.255
37.114.59.0-37.114.62.255
43.251.162.0/23
103.252.88.0/22
176.100.32.0/22
176.100.38.0/24
185.14.94.0/23
IPv6:
2a00:ccc1:100::/40
Signature Algorithm: sha256WithRSAEncryption
12:c7:37:7f:41:58:cf:af:9d:98:e0:a0:bc:c4:8d:77:fa:44:
0c:67:c5:db:56:65:aa:5d:1f:17:da:cc:42:14:42:be:b8:13:
c5:ee:28:6b:3f:1c:5c:f0:09:ab:78:73:06:79:60:e3:be:10:
cc:ea:86:a1:d1:21:11:f6:36:e0:be:b2:a3:13:3f:5f:22:ec:
df:56:1f:d6:47:fd:f9:4a:a9:be:96:42:6b:de:5a:fa:a5:59:
40:45:cd:c6:7f:4e:a2:2b:ba:45:2c:4a:28:72:36:27:dd:f9:
fc:73:95:d3:46:a8:60:e9:d6:70:d7:26:a8:ca:db:7c:93:d1:
78:0d:bb:d3:a0:d2:fd:b4:36:70:31:10:ad:22:22:21:61:af:
6c:c4:4b:d7:e7:8a:52:76:3d:05:24:fb:22:70:4b:21:8e:2d:
a9:fb:c2:7f:4b:59:b3:6f:49:58:8f:dc:ce:38:69:71:91:67:
9d:eb:99:2c:19:86:34:18:46:55:74:d5:03:8a:7b:45:9f:07:
a1:c6:71:ca:9d:0b:be:d4:0a:29:ff:46:11:bf:68:61:a1:b9:
70:16:f2:92:9a:22:dc:c3:c3:14:b0:95:c7:dc:ac:97:e0:28:
d5:46:48:6f:c6:ee:02:55:9e:86:81:2d:94:f6:3d:5d:58:9f:
35:69:fe:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:49:57 2025 by rpki-client