Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/gaylLdxDyQb8sels7s5ku7UtfkU.roa
File: gaylLdxDyQb8sels7s5ku7UtfkU.roa (raw, json)
Hash identifier: U1UfdjYQAukjcg29y8zD3MFVpeQLO0fB9T/k1AE2BIc=
Subject key identifier: 81:AC:A5:2D:DC:43:C9:06:FC:B1:E9:6C:EE:CE:64:BB:B5:2D:7E:45
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 019424B294C9EDBD1802461063D4236FDD97
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/gaylLdxDyQb8sels7s5ku7UtfkU.roa
Signing time: Thu 02 Jan 2025 01:47:50 +0000
ROA not before: Thu 02 Jan 2025 01:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397213
IP address blocks: 37.209.192.0/24 maxlen: 24
37.209.194.0/24 maxlen: 24
37.209.196.0/24 maxlen: 24
37.209.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:94:c9:ed:bd:18:02:46:10:63:d4:23:6f:dd:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 2 01:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81aca52ddc43c906fcb1e96ceece64bbb52d7e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:53:cb:6d:d5:ef:ab:14:97:a0:9a:04:a8:08:
5e:6b:86:53:c7:ae:5f:29:1e:b2:b8:47:8b:3e:64:
6d:3f:0d:da:69:1a:8e:a8:ff:cc:80:39:ee:5c:34:
77:b5:0e:c0:ae:ec:21:a7:90:7a:17:db:3d:ac:8a:
bc:c6:08:21:e0:6c:f8:ef:ae:44:c8:0c:38:c7:c7:
dc:ac:a7:d8:3c:44:5f:6a:42:9a:52:c3:fb:a6:cf:
dd:20:ab:54:3d:45:05:3c:06:2f:a3:3e:6f:87:7b:
a9:55:78:91:b0:7f:d4:11:20:a1:d2:8a:b0:82:9f:
8a:d0:e4:91:ae:c3:7f:13:6e:ab:d1:d1:bc:fb:50:
cf:84:e8:02:21:e3:d2:57:84:00:7b:56:3b:cb:f1:
5d:79:39:82:a7:ec:a2:0c:c2:01:81:cb:9f:74:69:
58:75:d5:7f:e3:fa:fd:42:93:f4:d5:f5:71:e7:7f:
12:0d:5e:f3:3a:6f:4f:ae:07:bf:48:f2:87:ac:bf:
21:70:50:ba:75:9a:af:46:82:58:9b:47:be:39:4a:
b9:7e:fe:f4:1f:42:4c:4d:c7:f1:5e:28:17:60:b9:
e1:18:ab:f3:4d:2b:47:de:d5:1a:b1:ed:5e:88:aa:
80:b6:65:2d:f8:98:ee:c0:5a:83:bf:3c:57:29:8b:
26:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AC:A5:2D:DC:43:C9:06:FC:B1:E9:6C:EE:CE:64:BB:B5:2D:7E:45
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/gaylLdxDyQb8sels7s5ku7UtfkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.192.0/24
37.209.194.0/24
37.209.196.0/24
37.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:35:ec:09:35:1a:cb:65:e6:05:56:2e:55:09:1d:d1:25:98:
af:3a:39:71:31:09:54:6b:aa:fc:08:a6:69:a9:69:de:cc:78:
0d:d5:0a:2a:11:d7:57:f4:1a:53:79:f6:84:71:92:a2:06:df:
32:d2:54:70:98:e5:85:74:bc:b3:d7:65:c6:b8:30:a3:02:e1:
41:be:bc:b7:65:e4:3d:e4:8f:15:bf:56:76:82:55:5f:59:bc:
28:ce:43:48:3b:04:59:e8:dc:95:aa:43:a6:b3:c0:58:72:27:
0b:62:c7:6c:2f:cb:9b:28:de:c6:d6:53:77:09:be:d5:16:bd:
d2:e6:d9:3a:35:05:da:b7:a1:d9:73:90:00:5e:07:fc:6b:fe:
6c:d8:ad:75:13:79:81:c8:19:a9:11:a3:a5:b4:2e:de:20:e8:
5d:d6:3a:da:f7:50:10:3f:ac:48:66:00:73:94:74:5b:f7:6a:
d9:99:50:ba:7c:08:65:b5:17:46:e4:1e:a4:c4:b7:9f:2b:71:
5b:7c:57:14:df:f4:e1:df:34:46:9b:41:6e:19:6a:59:9c:a2:
84:d1:ed:c9:0b:8d:0e:bc:a9:4d:6d:c1:bc:05:5d:c7:58:7c:
ef:7b:18:15:e0:b8:1c:27:d2:ae:a6:5b:80:24:da:15:63:04:
87:3f:37:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:13:00 2025 by rpki-client