Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/XPfq9Ksy6q7hVKZWhH3FoNqx86Q.roa
File: XPfq9Ksy6q7hVKZWhH3FoNqx86Q.roa (raw, json)
Hash identifier: 3p+0gWVqjqBFv0JOtQexk0uil6MhFKHRsK6+Z95GMq4=
Subject key identifier: 5C:F7:EA:F4:AB:32:EA:AE:E1:54:A6:56:84:7D:C5:A0:DA:B1:F3:A4
Certificate issuer: /CN=c98b825f36e9cc330315c940de800cbabce3397b
Certificate serial: 0195A9B8B6C60A8D354C3E8B855EEBF19046
Authority key identifier: C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/XPfq9Ksy6q7hVKZWhH3FoNqx86Q.roa
Signing time: Tue 18 Mar 2025 14:46:49 +0000
ROA not before: Tue 18 Mar 2025 14:46:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 37.228.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a9:b8:b6:c6:0a:8d:35:4c:3e:8b:85:5e:eb:f1:90:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98b825f36e9cc330315c940de800cbabce3397b
Validity
Not Before: Mar 18 14:46:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5cf7eaf4ab32eaaee154a656847dc5a0dab1f3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a5:be:d3:7c:7f:48:d3:2a:0b:7c:72:46:78:
1e:07:ff:6a:77:35:c1:6e:2d:b2:0d:b8:47:b1:12:
dc:f9:97:5e:9a:58:82:b4:32:bc:8b:a8:22:11:68:
a5:19:84:91:09:06:84:26:a8:e4:d2:9e:a4:e5:9d:
e6:d3:ac:8a:59:9c:e5:bd:8e:41:1b:ff:d2:a2:bd:
71:5c:7b:47:50:f1:b9:5b:29:1b:67:70:03:98:19:
a0:73:6e:c1:e1:8c:be:c5:dc:10:ed:3b:7c:93:c0:
df:b1:0d:12:70:c8:90:6a:1b:ee:47:dc:5b:c5:72:
c0:fb:7b:ae:80:8e:ce:58:6b:1a:57:51:55:57:c9:
5a:6a:7c:9e:e7:c7:80:9a:dc:b3:83:a5:9d:bd:36:
c8:59:26:89:10:78:20:df:0d:06:12:8c:34:ed:a7:
43:43:15:cd:17:bb:56:e7:87:20:f7:48:b9:d3:19:
3b:7d:32:6b:ee:70:07:8e:ac:b8:fc:9c:09:b3:84:
5f:0f:35:c4:44:40:0b:ce:c1:7d:4b:49:62:f2:16:
04:cc:e5:8f:e8:30:4b:82:8a:df:3f:e0:fb:f0:ed:
92:46:4a:ed:20:c1:44:5c:dd:d3:cf:fc:8c:95:f0:
cb:7e:45:62:6c:ac:51:9e:ab:81:e9:b1:46:e3:2c:
32:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F7:EA:F4:AB:32:EA:AE:E1:54:A6:56:84:7D:C5:A0:DA:B1:F3:A4
X509v3 Authority Key Identifier:
keyid:C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/XPfq9Ksy6q7hVKZWhH3FoNqx86Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.228.121.0/24
Signature Algorithm: sha256WithRSAEncryption
10:09:6a:61:a7:8f:32:95:ec:be:e6:a8:dc:fb:3f:62:d3:04:
6c:c6:8e:2b:3b:dc:6d:a4:fd:b5:57:39:29:8b:2b:1d:6c:8a:
b0:10:dc:d6:77:8d:a7:a2:fe:5b:02:d5:f4:fd:02:86:b5:33:
c1:32:1f:16:f8:96:d6:b3:ea:a9:03:b2:ff:c0:55:2c:bb:02:
d0:92:b2:eb:39:c0:bd:c1:6a:a4:c0:ac:50:74:90:2b:80:84:
51:a3:42:b5:45:59:50:c0:ba:5b:19:28:fa:0d:0b:11:0e:57:
c4:0c:83:72:77:10:a7:bf:71:ef:1c:ab:c7:09:7f:44:85:83:
66:bc:59:f9:2d:6b:0a:b0:ce:88:0b:62:04:e8:a8:11:35:52:
fd:d3:92:60:65:5b:bc:90:ff:a5:a6:86:2c:f7:4b:a0:e8:23:
18:99:0c:61:08:03:7b:c6:31:ca:2d:eb:d2:64:ae:f1:02:cf:
ae:9f:1e:e3:78:01:a6:c5:48:c0:3a:2d:52:ec:e8:79:f2:1c:
df:c3:84:90:05:67:2f:1e:6f:bd:47:cc:80:20:9f:01:54:f1:
c0:a5:13:c8:75:d3:47:bb:6b:12:7a:b7:ba:b7:82:bd:ed:94:
b2:56:97:41:65:11:52:5d:07:45:b7:60:a7:ad:71:6e:5e:c5:
92:a9:83:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 06:40:56 2025 by rpki-client