Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/wifLocMxfpz5rpj13UULY6xFWiA.roa
File: wifLocMxfpz5rpj13UULY6xFWiA.roa (raw, json)
Hash identifier: zSAQgyK21VbhaQRoZfBOovQi13W5eH/UHapg2UUnRmI=
Subject key identifier: C2:27:CB:A1:C3:31:7E:9C:F9:AE:98:F5:DD:45:0B:63:AC:45:5A:20
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 019424B2956491129A2FE57F972D098E8FC0
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/wifLocMxfpz5rpj13UULY6xFWiA.roa
Signing time: Thu 02 Jan 2025 01:47:50 +0000
ROA not before: Thu 02 Jan 2025 01:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397215
IP address blocks: 37.209.192.0/24 maxlen: 24
37.209.194.0/24 maxlen: 24
37.209.196.0/24 maxlen: 24
37.209.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:95:64:91:12:9a:2f:e5:7f:97:2d:09:8e:8f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 2 01:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c227cba1c3317e9cf9ae98f5dd450b63ac455a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3b:95:90:cf:16:c2:3f:80:44:97:fd:cf:ba:
b9:31:2a:d4:8c:12:1d:79:9d:5e:2b:fc:ab:1d:7b:
1f:68:77:13:c4:33:f3:c7:20:ac:c8:1a:35:70:9d:
65:28:f3:78:2b:fe:a4:70:1d:dd:3f:ad:d4:ca:4b:
b6:e2:d8:41:81:41:85:a8:dc:fc:98:97:28:15:df:
8d:27:31:d7:6c:04:c0:4c:b8:04:09:5c:47:db:60:
39:85:d9:9b:76:1b:4d:cd:19:a3:1f:6e:6c:fa:23:
fd:65:2a:3e:8d:b5:cc:f1:91:c5:b9:c5:7d:26:e9:
19:81:0e:52:ce:e7:c5:4b:1e:b7:6e:c0:bd:e4:95:
0f:1a:2f:73:a3:cd:c6:02:ab:b4:4c:c6:67:a7:67:
0e:24:1a:f4:51:ff:0d:21:78:fe:c1:7d:87:79:ed:
f0:b5:4f:42:76:95:e3:46:c2:dc:98:7b:97:eb:5d:
0e:7a:ee:0d:21:e6:d8:ac:3e:84:76:04:9b:f7:48:
5b:cf:da:54:e3:57:da:f3:e4:9d:9f:09:ae:0c:63:
08:79:bf:52:fe:eb:de:4c:52:42:14:b8:13:88:81:
ee:19:f2:ab:28:1e:66:25:46:50:fa:73:c6:05:27:
f4:2f:b5:37:e8:7e:ae:06:8f:47:91:df:2e:86:c8:
b1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:27:CB:A1:C3:31:7E:9C:F9:AE:98:F5:DD:45:0B:63:AC:45:5A:20
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/wifLocMxfpz5rpj13UULY6xFWiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.192.0/24
37.209.194.0/24
37.209.196.0/24
37.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
20:e9:c8:b9:48:38:94:5c:df:dd:53:98:b5:8f:76:e6:3c:82:
7e:ac:32:1d:d4:e6:53:51:ef:eb:c8:87:ab:01:cd:1b:5e:d8:
4a:7a:6d:da:30:6d:fc:cb:04:18:9c:89:2b:1d:7b:6c:99:e9:
b0:75:8e:ce:b5:01:85:a3:10:15:f1:57:46:4b:f8:05:5c:c9:
4b:84:7e:b8:0e:6a:69:f8:64:8c:2a:4a:ce:4b:00:49:8c:75:
e3:35:2a:cf:f4:4c:06:94:27:fe:b2:2f:c2:ac:8d:fc:1b:1c:
51:d1:02:cc:5e:29:52:01:b7:44:6f:3d:a2:0e:d8:e0:bb:87:
d2:a5:e9:06:f4:f3:99:ef:f5:5e:21:f1:ba:47:96:32:50:b2:
68:f0:7d:03:72:3d:8f:b9:6d:ca:a5:e8:3d:d6:92:5a:cf:83:
ae:6e:27:b1:61:a8:e4:9b:98:7e:88:df:1f:63:0f:4b:94:d4:
c9:0b:ed:1a:9d:45:2b:79:77:81:b8:18:52:9e:a3:f5:a2:f7:
2f:12:e1:30:4c:62:bf:09:95:14:4e:62:79:8a:4e:ad:a8:1b:
c2:38:72:87:b8:6b:9d:f5:37:15:79:7b:cd:de:73:6c:3b:14:
44:7b:32:d3:47:e1:f8:ee:64:22:50:de:47:15:c6:4f:90:a6:
f6:01:8d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:51:52 2025 by rpki-client