Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/1-b1uUe7cDgUrt3O4cESXQzwLGQ.roa
File: 1-b1uUe7cDgUrt3O4cESXQzwLGQ.roa (raw, json)
Hash identifier: 9R4woCA7+AwuSB5OUnv/Zt0yVaohvWvZyAFjNEcFpfE=
Subject key identifier: D7:E6:F5:B9:47:BB:70:38:14:AE:DD:CE:E1:C1:12:5D:0C:F0:2C:64
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 019424B2965A62EF08ABADD8AD13D52A1520
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/1-b1uUe7cDgUrt3O4cESXQzwLGQ.roa
Signing time: Thu 02 Jan 2025 01:47:51 +0000
ROA not before: Thu 02 Jan 2025 01:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397218
IP address blocks: 37.209.192.0/24 maxlen: 24
37.209.194.0/24 maxlen: 24
37.209.196.0/24 maxlen: 24
37.209.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:96:5a:62:ef:08:ab:ad:d8:ad:13:d5:2a:15:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 2 01:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7e6f5b947bb703814aeddcee1c1125d0cf02c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:55:96:fe:16:7c:76:ca:b9:e6:da:ed:62:67:
ee:9f:fe:99:0c:39:e6:f6:b8:c2:f1:ad:42:52:b2:
a6:22:fa:20:f5:62:8a:ce:90:0c:67:af:c8:7a:e6:
6b:ae:10:cd:ae:61:05:d8:26:25:05:f3:4f:ce:89:
bf:fd:e2:f5:59:f7:32:b5:3f:43:03:43:f4:8d:13:
1b:9d:c7:00:98:15:8a:a6:57:b1:07:89:44:3a:45:
b4:c2:15:90:f3:75:db:bf:ad:fa:55:d5:37:b1:47:
56:d1:4e:e7:34:be:52:30:96:6b:cd:8d:ca:78:54:
8e:b0:1a:6f:2d:2e:ab:34:87:4d:93:53:5a:bc:3a:
de:21:5c:78:5c:39:c4:5a:0d:32:b2:0a:62:5d:49:
af:86:49:bb:9f:39:df:80:ad:b9:90:83:6a:d4:9d:
1f:84:bc:e2:77:df:cf:b3:c8:85:29:d3:27:fd:e0:
54:30:75:c8:d5:d5:f3:b4:23:56:12:0b:36:8c:9f:
e2:1b:76:db:8a:b7:01:c1:35:97:73:da:92:bb:c1:
b0:e2:2d:62:7a:df:34:29:fb:a2:0b:1f:de:1a:ae:
63:4a:b4:92:d1:b1:75:7d:46:3a:e3:2d:90:0b:21:
02:5b:bc:4c:d7:31:b3:83:f8:92:79:f5:84:15:40:
d0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E6:F5:B9:47:BB:70:38:14:AE:DD:CE:E1:C1:12:5D:0C:F0:2C:64
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/1-b1uUe7cDgUrt3O4cESXQzwLGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.192.0/24
37.209.194.0/24
37.209.196.0/24
37.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
11:b6:dc:c4:5e:25:af:0c:28:7e:f7:d9:8f:ed:77:57:2e:d9:
ce:2c:8b:f2:a1:fb:ed:71:4e:57:7d:00:8c:ea:03:48:53:70:
e3:e8:b1:d6:ff:d3:68:19:10:26:f6:29:35:af:3f:2f:08:66:
e6:04:98:c3:e5:86:e1:9a:7c:99:eb:45:3e:dd:17:19:b0:9f:
0b:73:4a:c1:8d:24:aa:e7:41:a4:66:cd:f5:d0:a4:9a:8d:6a:
e3:ae:90:66:fb:3f:e3:d5:b7:23:bf:8c:8c:6c:ea:a5:f0:16:
7a:28:7a:47:64:a9:4a:a3:c0:b3:4c:a6:2f:d7:9e:b3:2e:c4:
fb:d7:e6:29:f2:29:f7:90:eb:07:da:08:1b:73:5a:25:a2:b7:
4b:19:c4:a8:55:eb:9f:81:b3:df:0a:26:02:ff:e6:6a:9d:ea:
94:4d:e2:4c:d7:29:ef:c5:f7:b4:7a:4e:fb:f0:58:10:79:ee:
11:c9:fe:99:15:82:cd:9f:a7:3e:e8:c6:96:71:fc:b8:11:9d:
6e:b1:da:fa:78:fb:5a:81:0d:f5:44:45:ba:bb:38:7b:a3:f1:
cd:35:02:2b:8d:ac:4a:dd:9e:14:75:de:cd:cc:85:06:11:71:
08:27:35:5f:3e:9e:64:f5:12:b0:fc:9b:16:21:43:24:2c:2e:
ba:73:cc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 09:52:39 2025 by rpki-client