Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/nIig6sJboOhTxSwzzOszoIJRXXk.roa
File: nIig6sJboOhTxSwzzOszoIJRXXk.roa (raw, json)
Hash identifier: huvh463h0QTpPTdksEe/aroiq/Yu3PDqrGPn8xjhsSk=
Subject key identifier: 9C:88:A0:EA:C2:5B:A0:E8:53:C5:2C:33:CC:EB:33:A0:82:51:5D:79
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 01941FFA3B82C9290F7144EC3C11C9D198C1
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/nIig6sJboOhTxSwzzOszoIJRXXk.roa
Signing time: Wed 01 Jan 2025 03:48:00 +0000
ROA not before: Wed 01 Jan 2025 03:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207252
IP address blocks: 37.114.36.0/24 maxlen: 24
37.114.40.0/24 maxlen: 24
37.114.58.0/24 maxlen: 24
43.251.160.0/24 maxlen: 24
43.251.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:3b:82:c9:29:0f:71:44:ec:3c:11:c9:d1:98:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Jan 1 03:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c88a0eac25ba0e853c52c33cceb33a082515d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2e:fb:95:b9:5e:33:17:51:84:7f:5b:d7:ee:
b3:ef:d7:f1:b1:54:80:dc:d9:00:ed:d0:c6:24:f8:
74:bf:39:67:fa:f7:74:a4:ff:d2:8e:56:8f:c0:be:
58:40:a2:57:c4:36:23:55:9c:b9:44:60:d6:d4:06:
fb:c4:9d:18:86:00:7f:f5:1d:5c:f4:c9:f8:94:42:
01:26:0d:7f:c4:53:6d:26:1d:e9:2e:c4:ee:c7:44:
65:9f:32:45:74:b3:5f:83:1f:f6:f4:7e:9e:81:13:
50:16:dc:42:d0:83:14:a0:57:e4:44:6b:82:5d:58:
02:31:86:bd:3e:c7:33:98:67:29:a8:12:1e:3d:02:
61:d1:a6:ca:57:61:72:8e:38:77:76:2c:c2:94:32:
95:0b:53:05:5f:fd:b1:94:bd:dd:7f:06:a5:e4:c7:
62:a1:bb:f8:07:c1:e6:82:69:1b:ad:2a:a0:84:5d:
e1:b6:de:29:46:2c:d3:4d:05:3f:96:f9:ae:be:76:
60:ce:33:e3:5a:07:76:fd:19:02:97:f5:d9:b5:f1:
f2:ec:b3:b4:f9:2b:f4:24:91:ac:40:2a:f6:b6:19:
a0:47:28:32:1c:3b:7b:20:bc:54:30:07:85:c3:42:
ab:4f:e3:92:03:5f:b3:4f:00:f2:c9:15:f9:bb:50:
c5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:88:A0:EA:C2:5B:A0:E8:53:C5:2C:33:CC:EB:33:A0:82:51:5D:79
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/nIig6sJboOhTxSwzzOszoIJRXXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.36.0/24
37.114.40.0/24
37.114.58.0/24
43.251.160.0/23
Signature Algorithm: sha256WithRSAEncryption
98:41:2c:bf:c9:f2:53:eb:b4:42:01:27:8a:1b:07:80:90:2a:
50:5a:c3:28:47:34:1f:62:35:81:8e:18:e4:27:b0:77:db:12:
3a:60:2e:b1:91:97:b3:5e:2d:fa:ff:37:f5:d4:be:e1:0e:53:
fa:df:86:f9:3d:45:85:73:ac:4f:6d:49:b4:57:8a:59:b9:07:
f1:02:51:e0:03:c6:84:c1:65:ae:03:08:9d:20:50:a3:2c:14:
81:3f:09:09:c0:43:42:64:03:3e:95:5e:72:33:d7:1d:1a:93:
93:75:70:63:58:09:60:43:55:b9:b6:21:fb:61:8b:89:b0:9a:
72:e8:de:05:6a:28:bf:f0:b9:54:d9:4c:87:a2:94:61:50:89:
b2:41:a1:7d:bf:db:74:7c:d0:8b:0f:f8:f1:ee:93:3b:64:ea:
c2:01:d9:85:d7:86:52:76:f4:fe:9c:8f:39:cf:3d:05:0b:ef:
90:6c:38:11:d8:2d:56:3e:b5:c1:e6:92:72:ab:b6:19:1b:d7:
84:26:6a:c6:80:0b:66:54:8b:92:10:3e:c8:46:f0:70:ba:49:
18:b5:5d:26:15:81:12:01:2b:5f:3a:96:5a:8f:4f:a4:51:ef:
6d:45:12:88:f3:24:e4:7b:e3:8f:54:1e:76:2e:be:d7:bb:ae:
50:48:79:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:42:51 2025 by rpki-client