Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/SlL5XTW42zdgXmO__P5Di6YzVls.roa
File: SlL5XTW42zdgXmO__P5Di6YzVls.roa (raw, json)
Hash identifier: w4trBV6fAqA9ED9uIIvrXFpBdrgscmJxMSHZNfcmjNA=
Subject key identifier: 4A:52:F9:5D:35:B8:DB:37:60:5E:63:BF:FC:FE:43:8B:A6:33:56:5B
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01941FFAA15683CD684D232D8837227A5D65
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/SlL5XTW42zdgXmO__P5Di6YzVls.roa
Signing time: Wed 01 Jan 2025 03:48:26 +0000
ROA not before: Wed 01 Jan 2025 03:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197309
IP address blocks: 37.230.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a1:56:83:cd:68:4d:23:2d:88:37:22:7a:5d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a52f95d35b8db37605e63bffcfe438ba633565b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:18:c7:a4:6e:45:72:10:92:d8:ab:07:9b:f3:
85:25:7b:78:35:b5:eb:de:7e:f4:26:90:25:80:b2:
70:df:fb:72:53:7c:ad:49:63:44:51:c4:06:4f:7a:
f9:d7:9d:4d:db:33:f6:a1:b2:63:62:3b:d5:57:8c:
e5:43:26:fc:01:d4:b2:80:10:52:e3:d9:c6:b3:fa:
9b:ca:5d:6f:48:eb:7e:9b:1a:2c:b6:2b:cf:ba:d8:
df:06:d8:b1:c8:93:6d:b9:c8:7d:51:14:a4:cb:a0:
7b:e3:7c:ab:ab:52:ce:56:4d:ab:e4:bf:f1:bc:02:
d6:2d:4b:cc:ea:fb:79:cd:e7:ac:66:d8:7d:56:7e:
ae:70:cf:08:e0:26:24:27:7b:18:cc:b3:e7:2e:ce:
c2:cd:3b:da:db:cd:46:93:3c:f1:01:f7:a1:82:6d:
3a:ce:61:98:42:5b:fa:1e:ad:ec:2e:fa:ce:86:16:
1c:de:12:7c:bd:39:cb:c1:4a:b0:e9:df:82:a5:08:
48:71:c1:a4:ef:6f:d1:12:21:28:9c:fe:80:b8:83:
5c:6e:a1:2a:16:ba:7e:88:eb:eb:55:4c:de:16:a1:
54:20:4e:1f:f1:8f:e2:e1:e1:e2:25:c9:9e:94:26:
71:aa:b4:c2:9a:cb:9d:cf:55:64:69:6c:24:62:6f:
eb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:52:F9:5D:35:B8:DB:37:60:5E:63:BF:FC:FE:43:8B:A6:33:56:5B
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/SlL5XTW42zdgXmO__P5Di6YzVls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.162.0/24
Signature Algorithm: sha256WithRSAEncryption
53:79:2d:6a:7d:da:f0:54:eb:7c:c2:cd:8a:12:1d:73:60:55:
04:ca:41:e0:99:20:02:f2:8c:ab:6c:1e:8f:ec:d0:b1:20:c4:
73:24:1c:dd:58:c4:f7:06:cc:b4:da:37:60:b4:e9:c0:3c:7d:
12:05:34:e9:54:bf:2c:5c:7a:d5:3a:58:90:ec:82:7f:ef:fc:
fa:32:32:ca:ee:da:9c:10:b7:aa:2f:35:05:8d:74:2f:88:06:
ac:0f:b9:05:59:12:10:cd:53:9c:46:97:40:b7:f6:7c:32:16:
06:05:10:18:35:de:b2:3e:6d:a4:c6:83:2f:02:c6:fe:e5:35:
c2:e9:57:11:4e:46:e8:1f:6c:bf:cd:b2:31:71:f0:d9:b4:b8:
9f:34:81:54:78:f6:f8:34:72:fb:ef:88:4d:56:6d:91:6a:ae:
b6:3a:07:d8:33:40:b8:a2:b1:db:e9:2b:5a:c4:d7:92:41:a9:
92:80:97:7b:d1:b1:92:0f:74:eb:32:2c:c5:a9:c8:f1:4e:52:
be:b2:a3:8c:13:cb:fa:cb:8d:61:07:ca:53:2c:d3:ee:16:08:
6f:dd:4c:69:85:74:24:3e:11:ca:fb:6d:ac:88:fb:44:1d:46:
d5:e9:4a:91:af:8d:e2:c0:33:07:08:65:7b:d4:90:d9:cb:eb:
57:ba:61:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:10:30 2025 by rpki-client