Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Wi_yHYBgwQaHwWK2GkVjH5ZeqSk.roa
File: Wi_yHYBgwQaHwWK2GkVjH5ZeqSk.roa (raw, json)
Hash identifier: uRkowbmPMBE+58g1FgJc5HxVtlCbdIwfItLJlJxPeUY=
Subject key identifier: 5A:2F:F2:1D:80:60:C1:06:87:C1:62:B6:1A:45:63:1F:96:5E:A9:29
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019423D7A9D16AE15BF22A19865E836D4600
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Wi_yHYBgwQaHwWK2GkVjH5ZeqSk.roa
Signing time: Wed 01 Jan 2025 21:48:43 +0000
ROA not before: Wed 01 Jan 2025 21:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9232
IP address blocks: 37.202.205.0/24 maxlen: 24
37.202.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:a9:d1:6a:e1:5b:f2:2a:19:86:5e:83:6d:46:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 1 21:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a2ff21d8060c10687c162b61a45631f965ea929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:64:8a:bc:35:f2:78:e0:45:a6:15:6a:7a:a1:
f5:23:40:d0:00:df:dd:b3:06:11:94:3b:8a:81:64:
0c:8f:82:94:b9:54:e0:82:b6:e8:54:3d:d3:df:fa:
8d:db:f3:76:4d:96:9a:71:28:6e:8c:fb:af:2c:e7:
45:67:2e:82:a1:91:46:c8:87:78:2d:03:01:0a:9b:
ad:b4:4d:67:84:13:6e:97:4c:58:4b:48:62:7c:ce:
60:11:8a:ba:12:93:35:6d:3d:d7:2d:9b:28:7d:23:
6f:04:51:a4:94:42:43:0b:cd:3a:fb:90:5b:58:f3:
03:ef:b3:5a:0f:31:5b:a0:0c:08:07:59:8a:ca:d5:
a3:de:cd:34:73:87:f8:fa:20:63:3b:94:fb:5a:f9:
7b:57:f5:0c:17:09:6b:38:a7:bd:2e:2e:b7:71:80:
51:56:d7:de:ff:4d:e0:57:c1:9e:5e:39:36:ca:73:
0d:d4:c9:e2:7e:8a:5f:92:83:3c:2b:4b:98:00:9b:
3e:c6:b1:f0:6e:1f:0d:41:ac:07:10:b8:6d:5b:f3:
ae:4a:95:6e:9a:4c:ad:64:b8:2f:a9:a3:c8:ca:3a:
03:21:4f:06:7c:b9:b0:de:2f:e0:56:60:f5:bf:ed:
72:99:a8:7a:dc:cf:f0:4e:1d:32:95:03:ce:75:3e:
68:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2F:F2:1D:80:60:C1:06:87:C1:62:B6:1A:45:63:1F:96:5E:A9:29
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Wi_yHYBgwQaHwWK2GkVjH5ZeqSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.205.0/24
37.202.213.0/24
Signature Algorithm: sha256WithRSAEncryption
57:96:2a:d6:02:2d:d7:6a:e1:af:18:92:d2:90:2a:1e:ce:33:
37:22:fe:f0:83:b7:bb:c3:84:12:b1:c8:56:28:4d:85:18:7c:
a4:0d:cd:66:6d:d1:a7:40:1d:94:2c:ed:0a:95:ca:57:92:75:
ce:2f:b6:7f:6c:ae:f7:26:a8:a6:01:d3:97:2e:56:26:01:0b:
9d:f6:33:3a:30:f9:7d:33:eb:0e:1a:dc:28:e6:1e:9a:61:50:
68:66:88:2f:45:7e:6c:68:89:1c:e5:a7:ae:a3:d1:d8:75:49:
27:bd:bb:d4:14:18:f9:0d:ad:ce:85:be:71:5d:b0:da:15:8f:
e8:46:3b:bd:b6:63:54:ce:57:6d:39:20:02:63:c8:b8:25:a3:
6e:27:8b:5e:3c:00:49:d8:10:5b:1d:7d:b1:a0:56:33:8f:d4:
a9:5b:13:bc:8a:2e:3a:42:94:87:7f:a5:75:3f:ad:af:af:3d:
41:cd:49:8d:10:bf:3a:63:7b:42:d0:99:33:52:3b:4a:70:ff:
3a:02:04:35:77:8d:8f:e4:cb:91:35:03:2f:a9:ec:94:67:fb:
79:bc:b7:c6:fb:45:93:14:6b:18:86:d6:05:70:e9:d8:8c:bd:
0b:d6:f8:f6:dd:6f:ed:04:c3:51:1c:e8:c9:3c:fe:77:f2:4d:
70:56:93:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:00:17 2025 by rpki-client