Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/K_gsRES5lFRCo9NkjJeeq-RhdAg.roa
File: K_gsRES5lFRCo9NkjJeeq-RhdAg.roa (raw, json)
Hash identifier: Q0pePTyllTelX2+oKDDwQcgUAOQPcZbmEWbq4SHrw4s=
Subject key identifier: 2B:F8:2C:44:44:B9:94:54:42:A3:D3:64:8C:97:9E:AB:E4:61:74:08
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 0195A893BED36D17F3F008603958AFBF3261
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/K_gsRES5lFRCo9NkjJeeq-RhdAg.roa
Signing time: Tue 18 Mar 2025 09:26:49 +0000
ROA not before: Tue 18 Mar 2025 09:26:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213637
IP address blocks: 37.247.108.0/24 maxlen: 24
37.247.111.0/24 maxlen: 24
46.20.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a8:93:be:d3:6d:17:f3:f0:08:60:39:58:af:bf:32:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: Mar 18 09:26:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2bf82c4444b9945442a3d3648c979eabe4617408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:54:c4:84:1f:b8:93:1f:f8:af:d8:f5:48:6a:
96:17:ee:a1:73:ff:29:81:d8:98:29:b5:c3:d7:05:
33:96:1e:da:50:c0:6b:99:0e:d2:db:40:bb:f4:95:
29:63:dd:39:fb:ac:05:97:a2:47:9d:00:34:23:df:
fa:83:bd:8e:22:66:a5:bc:5e:30:ad:06:03:dd:5f:
b1:c9:d8:85:77:fc:bd:67:20:44:9d:35:47:f0:10:
e2:8b:7d:69:e5:bc:9c:e4:dd:85:79:8d:90:5c:65:
b7:a8:58:01:0c:50:51:9a:e9:12:b4:64:16:38:a6:
48:ce:31:4c:9d:1d:87:4b:31:d7:32:b0:a2:c1:a2:
10:e7:c0:46:ca:70:71:83:1b:67:31:a9:39:1f:b9:
d4:26:8e:33:20:ca:f7:f3:90:03:2c:55:22:f0:93:
6d:1d:aa:27:8e:44:e7:61:57:67:39:f1:67:a5:c4:
9f:1d:ac:b0:f1:34:a6:97:6a:ad:85:3b:7a:79:79:
56:65:c3:5e:58:57:a6:04:3a:92:ac:62:f7:db:5f:
10:8c:93:d1:4b:6e:a6:ef:6a:fd:f0:d4:75:ed:fc:
2f:c9:87:5f:11:91:7f:34:57:77:a9:cd:b0:37:73:
c7:2c:cd:52:2b:6c:75:6d:6c:58:72:8b:9e:8a:c1:
53:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F8:2C:44:44:B9:94:54:42:A3:D3:64:8C:97:9E:AB:E4:61:74:08
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/K_gsRES5lFRCo9NkjJeeq-RhdAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.247.108.0/24
37.247.111.0/24
46.20.15.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:00:f8:d1:0a:1a:b3:60:eb:bc:73:be:c7:13:41:2f:09:1c:
25:d9:4f:71:d4:bf:0b:d1:da:5e:e7:d8:8f:49:27:5c:f9:71:
a0:ad:f0:f3:c3:ec:a5:8c:61:c9:aa:04:df:fd:fe:9c:1d:48:
32:02:69:db:68:53:eb:a3:77:a2:78:b6:c5:7f:a5:c2:47:f3:
19:7b:8d:6d:ac:f8:c9:2d:72:9d:be:2c:0c:f0:43:62:ec:d0:
57:8d:f4:3b:03:cc:02:6c:09:65:ec:e0:d9:9e:42:59:be:00:
6b:0a:e8:3b:b3:52:85:16:f3:eb:6a:33:51:92:b2:b9:50:76:
0b:55:fd:53:2d:25:f2:17:02:2a:34:b5:35:e8:bf:8c:c4:d7:
9a:0a:9e:84:45:bd:72:6a:16:f0:e6:93:d9:e7:8c:e3:2c:21:
86:9f:9a:8c:24:c9:01:61:fe:9b:79:7b:fe:21:1e:cf:5d:51:
6b:1e:ac:c8:dc:6a:39:0b:cb:d0:7f:c8:56:ee:2f:44:7e:23:
c6:63:25:7c:5b:9d:86:79:56:1a:40:50:72:a2:e8:89:46:d1:
05:4e:2e:49:16:d4:89:27:eb:ab:26:2d:a6:2d:13:07:7a:9b:
a1:ef:8b:ae:46:ee:a7:d0:9d:b4:7d:f0:44:69:8f:4b:24:27:
ab:de:eb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:14:54 2025 by rpki-client