Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/v4JI5sgw_p3rivCunMet_POOF2w.roa
File: v4JI5sgw_p3rivCunMet_POOF2w.roa (raw, json)
Hash identifier: HrxRsSTft3bYHQ8KkRnRYehAe6cSQ1K0zkkE09H7dNQ=
Subject key identifier: BF:82:48:E6:C8:30:FE:9D:EB:8A:F0:AE:9C:C7:AD:FC:F3:8E:17:6C
Certificate issuer: /CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1
Certificate serial: 019424B39AA51B492F4D4530C0BF9C939113
Authority key identifier: 0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/v4JI5sgw_p3rivCunMet_POOF2w.roa
Signing time: Thu 02 Jan 2025 01:48:57 +0000
ROA not before: Thu 02 Jan 2025 01:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62167
IP address blocks: 37.202.25.0/24 maxlen: 24
2a00:be40:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:9a:a5:1b:49:2f:4d:45:30:c0:bf:9c:93:91:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1
Validity
Not Before: Jan 2 01:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf8248e6c830fe9deb8af0ae9cc7adfcf38e176c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:58:15:e4:b9:70:cb:97:fc:a3:8f:9b:6d:c5:
77:55:66:4c:bc:c1:8d:03:eb:46:43:20:ba:54:ff:
6b:b0:e7:3d:ec:8d:77:b8:bf:ef:64:a2:9a:b5:66:
7c:a6:ae:ff:00:a0:04:9e:06:b8:4a:06:6d:3e:ec:
8d:27:66:31:c5:24:6a:3c:96:8d:6a:7e:20:30:33:
f2:08:64:0b:a1:cf:ea:47:02:64:04:be:a2:f3:a8:
1b:30:76:10:eb:1a:55:7b:e8:b1:8c:9b:98:ea:89:
58:19:5e:5d:70:ae:5e:dc:f4:42:b6:ec:5a:8c:94:
45:a8:2c:02:ce:f3:34:8d:3d:1d:9c:44:63:9a:0b:
07:57:29:6f:9d:46:b3:42:16:e9:9d:5a:ac:96:69:
64:5b:81:45:94:56:46:dc:b2:e5:2e:eb:b1:0d:23:
af:4e:fd:85:2b:34:0e:70:0b:bb:79:60:9c:97:16:
0a:95:c4:2a:ab:51:e1:dd:8d:13:94:24:2b:e8:b4:
9b:12:5d:50:88:56:5a:6e:08:b5:1e:8b:82:83:12:
6d:28:3c:9b:7e:d1:01:b6:d1:65:31:d0:98:5d:4a:
b0:a8:05:ef:87:34:15:43:d1:00:46:a2:69:68:f9:
97:77:07:1e:b9:7e:f3:c1:a0:05:97:01:ca:09:18:
ea:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:82:48:E6:C8:30:FE:9D:EB:8A:F0:AE:9C:C7:AD:FC:F3:8E:17:6C
X509v3 Authority Key Identifier:
keyid:0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/v4JI5sgw_p3rivCunMet_POOF2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.25.0/24
IPv6:
2a00:be40:2::/48
Signature Algorithm: sha256WithRSAEncryption
a8:41:35:27:9d:7c:a9:4a:4b:5f:b7:db:69:8b:72:1d:e8:84:
ae:86:a1:72:e4:8f:e5:ee:a5:16:58:92:ef:8b:da:d7:e5:3f:
4c:94:db:6e:69:d4:8e:1e:ae:e3:fc:ba:0f:68:1a:30:df:82:
09:56:3f:99:54:de:9d:86:73:12:74:be:78:a1:b6:88:c3:ae:
f9:e8:c9:a8:84:8e:10:57:87:34:2b:7f:2b:06:46:93:0c:2b:
2e:10:47:41:b7:d9:a4:0f:4c:c6:03:13:c6:8a:13:23:ed:ab:
70:bb:20:cf:5a:2b:74:38:53:6f:cd:e5:ff:ae:5c:73:e0:34:
b1:13:5a:27:fa:d1:7c:c6:4b:e7:20:83:d4:46:eb:6e:86:2b:
19:ec:b9:7b:ac:0f:37:c3:c2:bf:96:c6:a7:23:13:11:6e:dd:
c3:59:e3:90:ff:07:a1:c0:c5:3b:a5:d4:d1:51:7c:28:c4:15:
37:87:31:f2:3a:48:96:a3:e9:eb:a8:e5:d8:d0:d3:45:0b:82:
3a:84:be:3f:b3:a8:2a:f7:a5:e4:8d:3f:5b:63:62:0d:ec:f4:
b6:37:37:7b:97:42:79:9e:b4:12:d4:97:91:c1:41:97:df:82:
ec:43:f1:fe:8d:22:92:d5:40:a9:aa:3f:4a:cd:96:33:ae:59:
77:4c:15:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:26:20 2025 by rpki-client