Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/PtspP9NAMUf1vNrA5veAQs8D3JA.roa
File: PtspP9NAMUf1vNrA5veAQs8D3JA.roa (raw, json)
Hash identifier: ulePbYZBa8BBx8Rf9110z7Z7LwUX7PcrfS6/GMQQI50=
Subject key identifier: 3E:DB:29:3F:D3:40:31:47:F5:BC:DA:C0:E6:F7:80:42:CF:03:DC:90
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 019424B295F387F0B1AB29E7EA819FB3298D
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/PtspP9NAMUf1vNrA5veAQs8D3JA.roa
Signing time: Thu 02 Jan 2025 01:47:51 +0000
ROA not before: Thu 02 Jan 2025 01:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397217
IP address blocks: 37.209.192.0/24 maxlen: 24
37.209.194.0/24 maxlen: 24
37.209.196.0/24 maxlen: 24
37.209.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:95:f3:87:f0:b1:ab:29:e7:ea:81:9f:b3:29:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 2 01:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3edb293fd3403147f5bcdac0e6f78042cf03dc90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f7:27:ff:55:f5:4b:76:c9:c3:ab:6b:a5:28:
2c:8e:ae:16:4a:d2:dc:ba:ab:2e:a9:70:6c:8d:a8:
80:0a:07:a5:aa:2f:ca:f1:34:98:a8:d5:c4:dc:36:
47:ae:13:63:1b:4b:54:a1:ec:d8:d2:16:2e:f3:23:
74:7e:82:e1:61:1e:e4:81:0e:b8:b4:3f:13:ae:b8:
cd:9a:11:d1:51:c7:c1:39:02:80:c3:a6:f0:ff:be:
6b:b1:e5:1b:35:ec:4c:e7:e2:6b:cf:5a:a6:a6:7d:
7c:a8:4c:28:26:6f:d5:1e:c3:17:b9:1b:4a:bc:cc:
c9:48:32:a5:f6:8a:f5:6b:5a:a0:9c:b7:d2:32:50:
ce:c5:b0:74:8e:d9:45:0a:fe:0b:28:61:d9:e1:23:
9f:44:29:c6:31:fb:1e:1c:48:6c:f9:c1:e8:77:b6:
e1:96:25:65:bb:0b:6e:56:cc:2b:96:99:72:b3:85:
e3:1a:a5:a3:2f:83:6a:17:2a:6f:80:01:70:d1:a0:
c9:34:27:07:aa:21:dc:ef:78:10:b9:48:35:9e:7d:
b5:b1:36:2e:aa:07:a2:0f:07:cb:aa:63:53:8a:ed:
11:ad:9b:08:b1:af:32:08:79:33:09:d5:59:31:a2:
b1:0d:d1:42:ae:24:11:1b:3e:10:03:87:9a:49:f0:
72:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DB:29:3F:D3:40:31:47:F5:BC:DA:C0:E6:F7:80:42:CF:03:DC:90
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/PtspP9NAMUf1vNrA5veAQs8D3JA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.192.0/24
37.209.194.0/24
37.209.196.0/24
37.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:7f:61:77:34:e2:b4:71:5e:ba:f0:9e:21:5c:f3:51:1b:36:
6f:35:d4:23:f6:57:68:04:4b:ab:7e:e4:50:6c:4f:83:8c:d5:
ad:58:12:39:95:88:cb:30:f8:d9:ed:9a:8a:4a:6e:c5:75:82:
f5:b1:85:38:c6:6d:d9:ad:d8:74:4e:ff:84:61:58:54:bf:92:
84:f7:b1:a7:c3:1b:e9:01:b0:99:77:0d:35:65:cc:0e:db:8a:
64:9e:8f:24:35:40:9c:6b:74:5a:90:68:82:f6:05:8c:32:b4:
0b:11:5a:ed:63:80:12:f6:7a:21:7d:3e:b4:02:f7:54:c4:51:
53:1b:e6:c5:f0:5e:55:7a:e2:8c:a2:81:f3:8d:62:2d:0b:f1:
bf:11:d7:1e:4c:5e:b4:81:3b:d1:d9:29:c9:ca:52:4a:b7:2c:
12:8f:d1:89:3a:8f:34:4a:64:85:42:9b:95:2b:d8:5c:e2:b6:
3e:91:c2:9a:ba:78:32:81:14:78:93:76:3d:41:32:e7:3b:63:
c9:3f:7f:04:5e:2f:0b:d2:7b:50:a1:9a:5f:c8:ed:bb:1c:58:
12:a1:ab:b2:41:c1:62:53:6a:e4:9a:65:71:33:dc:c3:52:34:
1f:00:d9:b0:63:b5:20:1e:a5:0b:e3:ae:6a:8d:6d:f4:f2:8d:
96:26:c3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:12 2025 by rpki-client