Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/fZeNbyH5ujZlgqfP9AgorOMXohA.roa
File: fZeNbyH5ujZlgqfP9AgorOMXohA.roa (raw, json)
Hash identifier: Dn0aZqCRGKt2adMmUTTsiPmw4Pp+E7zhFHoCHO312UY=
Subject key identifier: 7D:97:8D:6F:21:F9:BA:36:65:82:A7:CF:F4:08:28:AC:E3:17:A2:10
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 01942825344407350B90F11D3D4890B60BC6
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/fZeNbyH5ujZlgqfP9AgorOMXohA.roa
Signing time: Thu 02 Jan 2025 17:51:54 +0000
ROA not before: Thu 02 Jan 2025 17:51:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206943
IP address blocks: 37.35.54.0/24 maxlen: 24
62.216.76.0/22 maxlen: 22
91.225.12.0/23 maxlen: 23
188.74.246.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:34:44:07:35:0b:90:f1:1d:3d:48:90:b6:0b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Jan 2 17:51:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d978d6f21f9ba366582a7cff40828ace317a210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bd:b5:0a:5f:f6:d8:34:fe:94:66:68:0c:5a:
3e:ac:cb:4a:90:82:0c:52:21:76:85:f3:30:62:15:
d8:7f:96:50:bc:f6:64:81:13:8b:a2:9a:71:8e:2d:
2b:70:9f:70:8e:70:82:28:83:5c:a1:33:39:e3:21:
cf:6c:af:4a:52:92:37:45:3e:eb:63:78:4f:11:51:
46:ba:50:ad:f8:81:fd:54:b5:c2:50:ea:30:81:c3:
2e:c3:00:2a:59:ff:89:b6:31:c0:f8:f7:13:28:2a:
4f:4f:85:c9:01:1f:0c:57:46:3a:25:7c:b8:2b:51:
a0:d4:5c:cd:6e:10:97:c3:d4:86:75:22:3e:e5:a8:
65:55:86:5e:a0:e8:33:b0:cb:36:c2:0c:45:ec:50:
0c:64:cf:78:9c:b9:aa:f6:59:55:ae:3d:3c:48:ea:
45:3f:1b:7e:7e:96:b4:d4:2b:0a:f4:3c:94:10:90:
57:cd:0b:8c:87:e9:68:94:5d:e1:a0:5a:a5:ff:9f:
9f:6e:8a:1a:73:18:59:3e:8a:1b:8a:fc:b3:38:4a:
c8:4a:f0:c7:d3:8f:0e:46:00:f8:68:bd:2a:d2:37:
c5:d9:06:3f:22:1c:32:e4:6b:2d:96:21:be:a6:48:
de:4d:f6:26:cf:7c:a0:42:47:75:f9:56:7d:cb:f6:
75:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:97:8D:6F:21:F9:BA:36:65:82:A7:CF:F4:08:28:AC:E3:17:A2:10
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/fZeNbyH5ujZlgqfP9AgorOMXohA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.35.54.0/24
62.216.76.0/22
91.225.12.0/23
188.74.246.0/23
Signature Algorithm: sha256WithRSAEncryption
12:67:e6:9e:31:83:d2:3e:08:c6:68:de:89:56:ab:d6:15:07:
42:b2:0c:33:1b:50:1f:7e:b5:0e:b2:41:4a:48:23:82:79:b4:
7c:37:7c:49:f7:54:69:14:b2:ac:7a:17:4d:76:5c:fd:bb:b4:
ba:38:c5:70:32:23:b4:df:40:4c:35:6d:10:bc:1f:02:2a:06:
5a:14:ed:83:0b:1b:7f:96:20:df:52:b8:48:38:b3:78:10:89:
48:23:62:28:39:2b:50:ab:b0:76:5b:1d:97:d7:46:d9:49:17:
13:6d:8e:10:ab:43:c6:95:95:df:04:09:8c:59:ba:c7:24:e0:
8a:1a:02:3d:0f:44:e6:f4:f0:1f:b4:49:4a:ca:2b:eb:af:d4:
88:8f:17:1e:51:f8:89:5b:aa:b6:cf:6c:75:97:23:f5:ba:df:
91:e8:4e:c3:9d:97:c0:dd:aa:4a:ff:39:af:16:7b:2f:74:d1:
1f:c3:91:db:db:e5:04:36:4b:14:0e:e7:29:95:b2:86:a6:9d:
63:83:bc:b9:c3:fe:f0:b1:fb:27:d7:4c:2c:c9:c6:e3:1f:43:
00:96:df:d3:f2:ec:53:78:1a:ef:04:86:7a:e9:9e:72:9f:3d:
85:44:f9:63:52:59:ce:48:cd:74:bd:7a:b4:aa:9d:6f:e4:52:
ce:c3:59:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:49:18 2025 by rpki-client