Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/w9laCbfNTG9x8SgYBLM8cjfOdmA.roa
File: w9laCbfNTG9x8SgYBLM8cjfOdmA.roa (raw, json)
Hash identifier: WglJOtLwDI5HpNhEnz7a8Exzapc/0A4kuz517Fgs06A=
Subject key identifier: C3:D9:5A:09:B7:CD:4C:6F:71:F1:28:18:04:B3:3C:72:37:CE:76:60
Certificate issuer: /CN=d1f6e4370111cfbf968404854227b8092851450d
Certificate serial: 019420D63914432069E34DA5883681573927
Authority key identifier: D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/w9laCbfNTG9x8SgYBLM8cjfOdmA.roa
Signing time: Wed 01 Jan 2025 07:48:17 +0000
ROA not before: Wed 01 Jan 2025 07:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7155
IP address blocks: 37.1.184.0/21 maxlen: 24
185.21.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:39:14:43:20:69:e3:4d:a5:88:36:81:57:39:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f6e4370111cfbf968404854227b8092851450d
Validity
Not Before: Jan 1 07:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3d95a09b7cd4c6f71f1281804b33c7237ce7660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2f:66:52:86:80:f0:36:0f:27:2b:bd:88:28:
5a:b7:33:4f:b1:f7:50:d1:54:93:93:3d:61:69:9f:
4f:cc:12:ff:16:dd:4a:99:f9:91:34:52:71:99:8b:
98:75:79:c8:ce:2f:19:15:30:43:ea:0b:33:28:04:
69:ec:e9:52:2d:ed:2d:f2:20:6d:b7:0c:3e:b4:1f:
ac:60:a9:77:a2:96:01:0a:e2:97:b7:07:c5:96:99:
52:3c:4d:7a:47:ce:d2:36:2f:29:c3:a5:86:71:21:
03:c8:9c:8a:b7:d9:61:d3:32:81:8c:51:c4:52:8a:
a4:9f:d4:27:52:e8:e5:ad:2d:fd:5a:b0:49:73:48:
b3:9c:61:3f:74:54:70:38:22:0a:de:58:bd:e6:d9:
d2:12:57:41:da:fc:2d:94:70:4d:a1:f7:43:25:7a:
9e:dd:62:21:ac:f8:d9:5d:62:3a:a5:91:0d:78:46:
28:83:63:7d:29:4e:a6:68:92:79:4d:ea:2b:77:e6:
a5:08:89:ac:cd:e8:ac:60:5e:d1:ac:44:1f:2f:bd:
13:ae:70:a9:35:54:20:aa:d7:ba:2e:bd:5f:9d:03:
e1:94:c0:37:ec:2e:ed:78:24:02:aa:77:9e:b7:6f:
22:99:40:6f:c8:a8:ad:f2:f5:9d:6a:d7:eb:6e:0d:
7c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D9:5A:09:B7:CD:4C:6F:71:F1:28:18:04:B3:3C:72:37:CE:76:60
X509v3 Authority Key Identifier:
keyid:D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/w9laCbfNTG9x8SgYBLM8cjfOdmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.184.0/21
185.21.0.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:c2:ab:27:bf:77:20:12:15:2b:c2:cc:9f:52:90:12:12:d8:
73:aa:c2:fc:41:ff:f6:df:f7:95:a3:e3:f1:64:42:9f:f9:6c:
d1:d8:01:28:56:5a:a1:10:67:c5:93:db:62:57:fb:7f:67:42:
05:68:97:59:1b:7c:3e:09:e5:41:e2:3e:29:33:ed:92:5e:b5:
e1:94:fa:99:58:44:92:55:ca:ff:27:a4:b1:4b:c9:c0:3f:1a:
7f:04:40:0f:97:c4:d1:91:03:dc:76:db:e3:51:13:72:4e:be:
c1:65:ba:33:4d:c1:52:89:50:7e:8c:df:a0:66:f0:cc:a9:6e:
91:5a:08:6f:dd:20:aa:27:6c:69:b6:50:6c:bb:69:a1:33:a1:
db:f9:1b:d4:dd:8a:36:41:c3:72:cd:68:0e:83:cf:89:74:bd:
af:3c:b5:94:d8:23:a1:64:72:9a:79:26:6b:63:d4:47:8b:d2:
a4:58:f2:0f:03:cc:1e:aa:d7:ab:aa:43:5c:40:0e:e2:47:1a:
16:89:d8:fb:ba:64:22:49:92:8c:1c:1d:a2:02:20:ba:f7:60:
5d:18:69:ed:5e:7f:02:7c:0e:4d:4b:bb:30:6b:fe:2b:9f:14:
71:6d:a6:c0:e7:67:f5:65:68:a9:14:6b:75:f3:14:f7:23:19:
96:7b:c9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:08:24 2025 by rpki-client