Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/IDk9MhfQceeWf9Aau-Lq0fZ-_CA.roa
File: IDk9MhfQceeWf9Aau-Lq0fZ-_CA.roa (raw, json)
Hash identifier: xOkvkF2fhOLphDe62JH2DeSLHq9CCUD041TbmVLDc04=
Subject key identifier: 20:39:3D:32:17:D0:71:E7:96:7F:D0:1A:BB:E2:EA:D1:F6:7E:FC:20
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 019424B294859688D27A8FBB22D83DEE39B3
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/IDk9MhfQceeWf9Aau-Lq0fZ-_CA.roa
Signing time: Thu 02 Jan 2025 01:47:50 +0000
ROA not before: Thu 02 Jan 2025 01:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 37.209.192.0/24 maxlen: 24
37.209.194.0/24 maxlen: 24
37.209.196.0/24 maxlen: 24
37.209.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:94:85:96:88:d2:7a:8f:bb:22:d8:3d:ee:39:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 2 01:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20393d3217d071e7967fd01abbe2ead1f67efc20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dc:db:79:c3:b5:98:48:2f:16:10:cc:80:c4:
4f:4d:c5:89:5a:9c:9e:db:99:ff:2b:94:8e:ff:12:
c1:99:f6:b1:69:9c:4c:6e:ad:c8:23:ad:86:f7:43:
58:be:85:40:9d:a7:56:03:14:bc:be:dd:84:a3:94:
09:5d:4c:c6:33:d9:23:65:8d:2d:26:50:39:1d:23:
f1:6d:e9:7d:50:a2:82:4b:07:e3:e0:d1:a8:17:51:
09:ee:e8:b8:18:50:9c:36:f0:97:d7:c1:be:f7:6a:
d4:5b:0f:ca:e4:48:ad:f7:76:46:e9:67:2a:cf:fe:
f0:7c:a7:03:fd:c0:01:74:54:47:10:71:15:c2:3c:
fc:4d:f1:9a:46:ac:4a:f7:d1:b9:bd:9a:32:5f:09:
c1:3a:ea:36:5c:a5:3e:8f:fc:98:4c:b7:24:7c:4f:
17:de:4d:b2:63:92:2d:44:46:b4:98:d0:79:4d:59:
88:c7:c9:5d:db:0d:37:be:84:79:50:fc:e6:1e:24:
63:f9:ec:6c:25:60:aa:14:d3:e0:6e:ea:e4:e2:15:
98:59:26:ba:f8:5e:e4:8d:24:c8:f1:5f:19:f2:6b:
be:67:82:74:41:3a:c6:95:0c:79:01:69:29:ed:da:
46:c2:0f:03:fb:c5:87:03:b4:14:b2:40:7f:64:f6:
55:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:39:3D:32:17:D0:71:E7:96:7F:D0:1A:BB:E2:EA:D1:F6:7E:FC:20
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/IDk9MhfQceeWf9Aau-Lq0fZ-_CA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.192.0/24
37.209.194.0/24
37.209.196.0/24
37.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:dd:56:9e:55:2c:9d:ba:a5:95:25:65:67:9c:67:19:bc:76:
d3:a7:af:c6:3a:b0:ed:fc:da:b8:fa:a7:e0:3b:53:85:9d:64:
09:a9:be:46:8f:ab:00:60:f3:fd:a2:b2:ec:0e:76:4b:de:d7:
b6:af:38:9b:19:78:bc:81:70:d0:80:dc:dd:f5:a3:e8:8e:a4:
70:e2:cc:d9:83:78:94:3e:cb:1d:f7:3b:07:07:ca:cc:b1:6b:
bf:af:8d:7d:15:09:fa:2b:d2:9f:6b:48:73:59:5d:9f:67:43:
c3:9d:9b:05:c9:7d:4a:98:ce:9b:bb:ee:04:46:17:21:47:61:
fb:89:58:ba:9d:38:52:7b:2a:53:30:47:08:f6:87:aa:8d:56:
f3:76:89:1e:93:28:bb:5d:84:fb:e1:28:44:c4:1d:90:ad:34:
a6:5a:9b:6b:ef:6e:37:66:4d:70:5e:2d:b4:c4:48:85:ef:36:
9e:4f:f3:5b:47:7e:48:12:93:dc:79:dc:3a:63:04:44:77:b4:
3a:c4:f7:21:f6:22:90:1e:75:84:03:96:f0:71:40:ac:e1:ba:
21:80:79:2a:7e:59:cd:06:67:12:a8:8f:fe:13:6a:70:b2:f3:
4a:24:bc:38:4a:85:a5:f5:d2:15:fa:74:9c:ce:97:b5:c1:c5:
32:98:ea:13
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQkspSFlojSeo+7Itg97jmzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj
OGJmMmMwHhcNMjUwMTAyMDE0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDM5M2QzMjE3ZDA3MWU3OTY3ZmQwMWFiYmUyZWFkMWY2N2VmYzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9zbecO1mEgvFhDMgMRPTcWJWpye
25n/K5SO/xLBmfaxaZxMbq3II62G90NYvoVAnadWAxS8vt2Eo5QJXUzGM9kjZY0t
JlA5HSPxbel9UKKCSwfj4NGoF1EJ7ui4GFCcNvCX18G+92rUWw/K5Eit93ZG6Wcq
z/7wfKcD/cABdFRHEHEVwjz8TfGaRqxK99G5vZoyXwnBOuo2XKU+j/yYTLckfE8X
3k2yY5ItREa0mNB5TVmIx8ld2w03voR5UPzmHiRj+exsJWCqFNPgburk4hWYWSa6
+F7kjSTI8V8Z8mu+Z4J0QTrGlQx5AWkp7dpGwg8D+8WHA7QUskB/ZPZV9wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFCA5PTIX0HHnln/QGrvi6tH2fvwgMB8GA1UdIwQY
MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt
NDE2Zjg1ZWUyMzdiLzEvSURrOU1oZlFjZWVXZjlBYXUtTHEwZlotX0NBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi
LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJdHAAwQA
JdHCAwQAJdHEAwQAJdHGMA0GCSqGSIb3DQEBCwUAA4IBAQAs3VaeVSyduqWVJWVn
nGcZvHbTp6/GOrDt/Nq4+qfgO1OFnWQJqb5Gj6sAYPP9orLsDnZL3te2rzibGXi8
gXDQgNzd9aPojqRw4szZg3iUPssd9zsHB8rMsWu/r419FQn6K9Kfa0hzWV2fZ0PD
nZsFyX1KmM6bu+4ERhchR2H7iVi6nThSeypTMEcI9oeqjVbzdokekyi7XYT74ShE
xB2QrTSmWptr7243Zk1wXi20xEiF7zaeT/NbR35IEpPcedw6YwREd7Q6xPch9iKQ
HnWEA5bwcUCs4bohgHkqflnNBmcSqI/+E2pwsvNKJLw4SoWl9dIV+nSczpe1wcUy
mOoT
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:00:27 2025 by rpki-client