Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/XOx0VQXemWnE1_T_CbW1BF1yKGs.roa
File: XOx0VQXemWnE1_T_CbW1BF1yKGs.roa (raw, json)
Hash identifier: AVLDrE5Y2ydpWZbzqq6OGq4i3RC3l/nkGJBMXJVQobo=
Subject key identifier: 5C:EC:74:55:05:DE:99:69:C4:D7:F4:FF:09:B5:B5:04:5D:72:28:6B
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 019424B292EDBF94C70F15CC75E8E1FAB638
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/XOx0VQXemWnE1_T_CbW1BF1yKGs.roa
Signing time: Thu 02 Jan 2025 01:47:50 +0000
ROA not before: Thu 02 Jan 2025 01:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12008
IP address blocks: 37.209.192.0/24 maxlen: 24
37.209.194.0/24 maxlen: 24
37.209.196.0/24 maxlen: 24
37.209.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:92:ed:bf:94:c7:0f:15:cc:75:e8:e1:fa:b6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 2 01:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5cec745505de9969c4d7f4ff09b5b5045d72286b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cb:d1:bd:38:4e:a4:86:b8:e0:ff:2b:22:18:
03:3c:e8:71:01:e3:2b:ab:b4:f0:d5:80:bb:8d:be:
f5:99:ff:59:06:8f:cf:a7:19:0b:7a:1a:9c:ba:15:
a0:e1:9d:52:ca:ec:4b:cf:0f:ec:5c:42:ef:1a:84:
49:1e:ef:10:58:9b:b4:f8:a1:16:24:0f:15:c5:39:
6d:18:a7:ea:3e:61:c1:fd:7e:89:e9:5d:d5:4f:02:
c5:2d:89:04:5a:9e:54:82:6a:3c:da:16:95:4b:c8:
71:c3:52:b7:3c:55:0f:c9:9b:44:db:1b:a0:ec:c5:
4f:7f:5f:85:79:63:52:93:71:6d:56:9d:88:d8:dd:
27:6f:d8:c2:65:0a:5d:f3:3f:fb:c1:1e:02:b2:0d:
83:e5:dc:ca:4c:93:34:dc:ea:7c:3e:e9:68:32:67:
5f:9e:54:b6:02:01:ae:d9:f0:5e:e5:0a:da:5a:5f:
0a:f5:7b:2e:2c:06:4a:15:62:a1:3f:f5:d3:aa:d1:
f3:a2:6e:52:bb:c3:5c:97:49:06:e6:e2:41:88:3b:
5c:9c:63:3d:46:22:c8:d8:c4:71:82:ed:e7:67:e7:
59:95:4c:e2:51:33:34:c8:97:03:ae:fa:8d:ea:b4:
65:02:f8:ff:74:c4:4c:f7:a0:87:77:0a:86:2b:2f:
55:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EC:74:55:05:DE:99:69:C4:D7:F4:FF:09:B5:B5:04:5D:72:28:6B
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/XOx0VQXemWnE1_T_CbW1BF1yKGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.192.0/24
37.209.194.0/24
37.209.196.0/24
37.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
34:db:d4:86:8d:4d:9f:e4:9d:34:c2:e8:a5:27:70:51:9f:01:
8e:7b:9d:8b:6c:5f:ec:4d:ce:75:83:33:20:16:d5:29:37:d9:
3c:31:13:9d:0e:18:0a:cb:3b:66:b4:b1:6d:23:b0:12:33:7f:
6c:21:0a:9b:c6:28:0d:b7:79:74:9e:3e:42:7e:de:31:f2:b8:
3a:ad:8a:03:a0:e5:54:16:f4:46:ed:b4:ef:26:21:51:e6:d8:
6b:87:30:f6:ac:ec:df:0b:90:13:67:17:6f:8d:d8:f7:75:70:
a0:0c:7e:a5:47:6f:34:4b:b5:2b:98:ba:7f:0e:01:1b:08:46:
69:ca:50:06:9d:da:37:a9:f5:2a:7f:ae:48:ed:4b:c1:47:21:
e3:03:f3:74:7e:04:f0:7c:5c:7b:18:b6:98:90:a4:60:ee:0a:
0c:e5:cc:5e:fe:79:3f:50:ab:d4:91:ca:6b:92:41:ce:e5:b5:
2b:fa:51:7a:e1:c5:63:0b:ed:87:43:b2:55:1c:02:b3:78:ba:
26:0d:69:35:c8:b7:67:1d:57:02:94:a4:fe:84:1e:fb:87:ac:
85:84:1b:5b:36:1b:c2:03:17:78:81:a9:23:66:c1:06:cf:34:
bc:53:1e:09:5b:b2:69:2f:fa:48:a8:0f:cd:32:a3:cf:93:2d:
39:e5:62:80
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQkspLtv5THDxXMdejh+rY4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj
OGJmMmMwHhcNMjUwMTAyMDE0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Y2VjNzQ1NTA1ZGU5OTY5YzRkN2Y0ZmYwOWI1YjUwNDVkNzIyODZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8vRvThOpIa44P8rIhgDPOhxAeMr
q7Tw1YC7jb71mf9ZBo/PpxkLehqcuhWg4Z1SyuxLzw/sXELvGoRJHu8QWJu0+KEW
JA8VxTltGKfqPmHB/X6J6V3VTwLFLYkEWp5Ugmo82haVS8hxw1K3PFUPyZtE2xug
7MVPf1+FeWNSk3FtVp2I2N0nb9jCZQpd8z/7wR4Csg2D5dzKTJM03Op8PuloMmdf
nlS2AgGu2fBe5QraWl8K9XsuLAZKFWKhP/XTqtHzom5Su8Ncl0kG5uJBiDtcnGM9
RiLI2MRxgu3nZ+dZlUziUTM0yJcDrvqN6rRlAvj/dMRM96CHdwqGKy9VGQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFFzsdFUF3plpxNf0/wm1tQRdcihrMB8GA1UdIwQY
MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt
NDE2Zjg1ZWUyMzdiLzEvWE94MFZRWGVtV25FMV9UX0NiVzFCRjF5S0dzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi
LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJdHAAwQA
JdHCAwQAJdHEAwQAJdHGMA0GCSqGSIb3DQEBCwUAA4IBAQA029SGjU2f5J00wuil
J3BRnwGOe52LbF/sTc51gzMgFtUpN9k8MROdDhgKyztmtLFtI7ASM39sIQqbxigN
t3l0nj5Cft4x8rg6rYoDoOVUFvRG7bTvJiFR5thrhzD2rOzfC5ATZxdvjdj3dXCg
DH6lR280S7UrmLp/DgEbCEZpylAGndo3qfUqf65I7UvBRyHjA/N0fgTwfFx7GLaY
kKRg7goM5cxe/nk/UKvUkcprkkHO5bUr+lF64cVjC+2HQ7JVHAKzeLomDWk1yLdn
HVcClKT+hB77h6yFhBtbNhvCAxd4gakjZsEGzzS8Ux4JW7JpL/pIqA/NMqPPky05
5WKA
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:33:31 2025 by rpki-client