Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/87sRZPnZ0TsjA13fLNcLleRiKHk.roa
File: 87sRZPnZ0TsjA13fLNcLleRiKHk.roa (raw, json)
Hash identifier: CIFVylNErzddxEBr/9NC+LfhedBCHU7EZnh8KxMrYIQ=
Subject key identifier: F3:BB:11:64:F9:D9:D1:3B:23:03:5D:DF:2C:D7:0B:95:E4:62:28:79
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01941FFAA3472FE769AB1233871FFF8397B9
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/87sRZPnZ0TsjA13fLNcLleRiKHk.roa
Signing time: Wed 01 Jan 2025 03:48:26 +0000
ROA not before: Wed 01 Jan 2025 03:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200197
IP address blocks: 37.230.131.0/24 maxlen: 24
37.230.170.0/24 maxlen: 24
37.230.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a3:47:2f:e7:69:ab:12:33:87:1f:ff:83:97:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3bb1164f9d9d13b23035ddf2cd70b95e4622879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ab:b8:cd:c0:34:c3:42:a1:8f:78:e2:55:14:
4c:6d:9a:ae:33:af:3b:c7:be:9b:ca:86:96:b3:f3:
ab:e8:cd:89:ac:ab:33:e3:f9:d8:92:46:3f:2f:3e:
6d:81:6d:eb:c1:79:b5:32:3e:32:ae:d5:af:5d:26:
f5:f2:b2:80:4f:5b:65:6a:2b:1c:61:03:f6:cc:2a:
78:70:9d:66:62:54:40:6c:8d:18:6a:57:ac:86:86:
89:dd:e9:81:2f:3b:ce:0d:0e:0b:d8:cb:16:dd:c3:
5b:b2:82:59:c5:a6:1b:44:d0:97:70:12:bf:cc:50:
c8:57:b0:be:c0:79:3a:fb:06:5b:cc:75:31:30:79:
71:42:71:9e:5a:f4:27:04:86:db:0a:f5:22:b9:36:
11:c6:ed:3a:ff:00:81:d3:4a:8b:dd:3a:1c:53:02:
b9:61:a7:9e:fb:31:31:d2:5a:6a:1e:ed:9f:de:ad:
98:fb:eb:56:da:95:e3:8c:2c:25:8e:23:ff:76:37:
3f:a3:f1:8c:64:f0:4e:d7:0f:2f:a3:51:c6:3f:36:
09:e2:e2:ab:5e:60:ba:ff:48:fc:02:9a:d8:2b:df:
bd:5b:ce:82:88:70:27:67:e6:4e:bd:91:a2:f5:4b:
9d:52:0b:52:17:06:51:26:9e:6b:73:f3:83:31:24:
ee:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BB:11:64:F9:D9:D1:3B:23:03:5D:DF:2C:D7:0B:95:E4:62:28:79
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/87sRZPnZ0TsjA13fLNcLleRiKHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.131.0/24
37.230.170.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:51:56:fe:b1:37:49:fa:11:f6:b7:99:a7:4f:40:c5:33:f9:
9c:6e:86:35:63:50:60:4e:c3:e5:5a:be:a8:7e:d5:a5:01:db:
3d:1d:b0:1d:24:75:12:d0:d5:69:28:8a:c9:98:6a:49:3a:80:
d9:6e:ee:c2:80:e4:44:7a:7e:64:26:99:1b:e9:5a:6d:8f:89:
80:9b:97:3b:31:91:b3:21:70:5c:00:fe:ad:78:ea:5f:f3:51:
56:eb:bc:90:51:17:51:3e:63:6a:88:2b:81:dd:6b:9d:95:df:
12:ff:4b:04:61:14:70:a2:58:1d:63:8f:26:df:ef:75:a6:41:
4f:59:3f:08:e2:c0:64:c0:68:95:aa:51:cf:2a:d9:2a:9e:3f:
44:27:60:c8:8e:df:a2:71:fa:e2:60:2e:bb:54:fc:0f:44:5f:
43:3a:d9:e4:02:bd:d0:b4:bc:ff:92:d7:0d:39:c5:80:53:59:
13:fb:25:e7:c8:0c:d7:c7:4c:a7:c2:77:0f:5d:70:9e:56:5c:
2b:7f:49:6d:17:46:0c:44:6f:e4:3b:1a:0c:74:c1:b7:27:65:
c2:86:04:bc:6d:ba:19:b8:ff:a9:74:c7:dc:d0:a1:3e:23:2a:
8c:b3:8f:06:80:e4:36:b4:30:c4:e8:ed:11:cd:8b:99:c1:2a:
3d:e2:fb:d2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQf+qNHL+dpqxIzhx//g5e5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0
NzA2N2UwHhcNMjUwMTAxMDM0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2JiMTE2NGY5ZDlkMTNiMjMwMzVkZGYyY2Q3MGI5NWU0NjIyODc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6u4zcA0w0Khj3jiVRRMbZquM687
x76byoaWs/Or6M2JrKsz4/nYkkY/Lz5tgW3rwXm1Mj4yrtWvXSb18rKAT1tlaisc
YQP2zCp4cJ1mYlRAbI0YaleshoaJ3emBLzvODQ4L2MsW3cNbsoJZxaYbRNCXcBK/
zFDIV7C+wHk6+wZbzHUxMHlxQnGeWvQnBIbbCvUiuTYRxu06/wCB00qL3TocUwK5
Yaee+zEx0lpqHu2f3q2Y++tW2pXjjCwljiP/djc/o/GMZPBO1w8vo1HGPzYJ4uKr
XmC6/0j8AprYK9+9W86CiHAnZ+ZOvZGi9UudUgtSFwZRJp5rc/ODMSTuQQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPO7EWT52dE7IwNd3yzXC5XkYih5MB8GA1UdIwQY
MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt
OGM5NTgxZDk2ZDhmLzEvODdzUlpQblowVHNqQTEzZkxOY0xsZVJpS0hrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm
LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJeaDAwQB
JeaqMA0GCSqGSIb3DQEBCwUAA4IBAQCyUVb+sTdJ+hH2t5mnT0DFM/mcboY1Y1Bg
TsPlWr6oftWlAds9HbAdJHUS0NVpKIrJmGpJOoDZbu7CgOREen5kJpkb6Vptj4mA
m5c7MZGzIXBcAP6teOpf81FW67yQURdRPmNqiCuB3Wudld8S/0sEYRRwolgdY48m
3+91pkFPWT8I4sBkwGiVqlHPKtkqnj9EJ2DIjt+icfriYC67VPwPRF9DOtnkAr3Q
tLz/ktcNOcWAU1kT+yXnyAzXx0ynwncPXXCeVlwrf0ltF0YMRG/kOxoMdMG3J2XC
hgS8bboZuP+pdMfc0KE+IyqMs48GgOQ2tDDE6O0RzYuZwSo94vvS
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:47:55 2025 by rpki-client