Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/AIgTWOLsCd_QcnGX51ZslWcYYtM.roa
File: AIgTWOLsCd_QcnGX51ZslWcYYtM.roa (raw, json)
Hash identifier: s3IjY2aeYvx83MQm8DsFpCn+IsaQoehrffomVL7CTrc=
Subject key identifier: 00:88:13:58:E2:EC:09:DF:D0:72:71:97:E7:56:6C:95:67:18:62:D3
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019423D7AAA66FBC5A21D307AE2527005D39
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/AIgTWOLsCd_QcnGX51ZslWcYYtM.roa
Signing time: Wed 01 Jan 2025 21:48:43 +0000
ROA not before: Wed 01 Jan 2025 21:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 37.202.194.0/24 maxlen: 24
37.202.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:aa:a6:6f:bc:5a:21:d3:07:ae:25:27:00:5d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 1 21:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00881358e2ec09dfd0727197e7566c95671862d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:25:7b:69:fe:a1:52:2f:e4:27:92:fc:c9:c1:
8e:25:7f:2b:ed:07:65:7a:6b:14:0c:9a:88:94:6a:
cc:2b:61:50:3c:94:9b:b2:5b:6c:2d:ba:33:ff:a1:
ea:38:bd:a8:33:3c:5b:38:fd:cb:85:11:ed:c1:b3:
b3:96:36:52:05:71:90:68:89:5f:2f:e1:56:11:0b:
40:f4:98:ac:17:36:d7:06:52:f2:d1:8e:31:fb:49:
29:f9:1a:0c:a7:4a:9e:33:88:76:10:e6:7f:8c:30:
92:49:7b:d5:e2:e4:de:d3:6b:37:8b:70:36:7b:8a:
84:f5:21:39:35:26:d9:1a:7e:22:60:b6:67:d7:86:
57:35:b6:b5:28:01:c9:f2:64:5c:6b:a4:db:6e:eb:
9c:cb:b6:69:3c:1d:48:4b:4b:8b:98:f8:9b:5e:9c:
b4:82:83:11:7f:ea:68:94:ca:fd:07:8e:0c:7d:9b:
43:a2:c5:cc:9b:9b:9f:0d:07:66:32:9f:52:f9:e3:
63:d4:6b:26:78:a3:10:c6:25:65:8f:e0:88:2c:a0:
2f:a7:a8:a7:fb:8d:77:39:c5:a1:c2:81:3f:ab:f2:
54:6e:70:82:7e:ad:da:f2:41:ab:ff:e1:d2:53:af:
51:a7:29:a5:77:cb:e9:15:9c:96:26:31:90:75:a7:
18:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:88:13:58:E2:EC:09:DF:D0:72:71:97:E7:56:6C:95:67:18:62:D3
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/AIgTWOLsCd_QcnGX51ZslWcYYtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.194.0/24
37.202.202.0/24
Signature Algorithm: sha256WithRSAEncryption
91:5c:a5:cd:6c:99:c3:34:12:3f:07:f6:9f:17:24:bb:64:7c:
0f:47:a5:a6:95:24:33:35:6e:2c:37:d2:84:28:9c:53:e2:5b:
3f:69:9c:e3:f3:82:2a:f7:3e:f3:1e:29:51:d5:d5:66:c5:53:
10:16:29:a5:d6:22:da:7d:b5:2e:b0:f9:e6:26:94:8d:38:d4:
41:32:0a:34:20:6f:9c:9e:50:b8:d9:ba:4d:69:fc:76:99:9a:
9d:f3:13:2b:68:83:a3:4e:2d:6a:2f:8f:60:b2:26:51:d0:9b:
f4:28:55:23:ad:53:3b:a8:f6:15:2b:c5:dd:f3:dd:a6:57:00:
64:a3:b3:aa:cb:c6:e3:68:06:bc:17:df:a9:40:ac:c6:6c:05:
54:ef:74:55:61:bf:ad:f9:ce:03:9d:40:0e:c2:dc:88:f1:55:
29:1f:9f:3a:57:4e:09:21:45:72:77:f8:dd:5b:83:f1:ce:72:
01:ce:ef:ac:96:3b:a7:6a:32:98:1f:34:b6:b8:e8:7f:6b:6e:
cd:0a:2e:ab:97:ef:42:f9:51:00:1e:9f:1c:37:05:d5:3c:c2:
d8:da:a8:dc:a6:26:41:2e:8e:af:dc:94:44:99:a0:bb:c9:dd:
ff:c8:af:5b:16:e0:5f:12:fd:80:50:54:c8:d6:7f:63:b8:72:
81:db:6b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:15 2025 by rpki-client