Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/paMGJN73rjp1fa_w9RA1xrwwx18.roa
File: paMGJN73rjp1fa_w9RA1xrwwx18.roa (raw, json)
Hash identifier: Z6fxiaAqnra9zk/dGdgt7claLY2U/7DrFceSHabOI5E=
Subject key identifier: A5:A3:06:24:DE:F7:AE:3A:75:7D:AF:F0:F5:10:35:C6:BC:30:C7:5F
Certificate issuer: /CN=be370733b8db614daa760a002c24048028300e2d
Certificate serial: 0194266AD5E53AE07625CAAF5746190DF924
Authority key identifier: BE:37:07:33:B8:DB:61:4D:AA:76:0A:00:2C:24:04:80:28:30:0E:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjcHM7jbYU2qdgoALCQEgCgwDi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/paMGJN73rjp1fa_w9RA1xrwwx18.roa
Signing time: Thu 02 Jan 2025 09:48:43 +0000
ROA not before: Thu 02 Jan 2025 09:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57657
IP address blocks: 37.17.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:d5:e5:3a:e0:76:25:ca:af:57:46:19:0d:f9:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be370733b8db614daa760a002c24048028300e2d
Validity
Not Before: Jan 2 09:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5a30624def7ae3a757daff0f51035c6bc30c75f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:76:ce:2f:da:51:8b:e6:9c:15:ac:99:2d:15:
b8:6b:61:9f:b1:23:93:eb:c5:d3:44:66:08:5e:ca:
86:bb:84:58:b2:c6:2a:24:f1:7a:53:53:b6:04:e3:
44:6f:ad:00:df:a8:ed:46:e7:01:64:4d:6f:66:6a:
e4:3e:92:e1:15:c2:92:a1:0e:86:dd:1c:95:bf:21:
09:d9:9d:ff:d0:f6:a7:51:39:2f:a9:0d:39:e9:d1:
18:f4:15:cd:45:0c:1d:6c:2f:5b:ee:8f:83:2e:d6:
39:1b:23:d6:1a:e6:d0:fe:98:3b:15:54:ce:fa:85:
39:d8:38:20:db:65:f5:fb:55:bb:47:2d:2b:c7:96:
85:62:95:6e:d6:d9:ae:a3:e3:30:f4:66:0b:ed:82:
6d:83:2b:8d:f3:25:59:fa:3b:4f:7c:c8:6a:a7:62:
53:16:4f:44:29:b4:ad:e0:3b:9b:1a:ef:da:f7:4d:
35:ea:86:1c:a6:76:04:0a:c7:74:29:4d:45:52:6c:
a1:e2:40:7e:39:bd:06:4d:ba:6c:61:74:e9:56:3e:
94:17:43:8e:77:81:12:3c:36:c7:2a:6e:68:c5:2c:
e6:17:22:5b:7a:72:fb:5b:ef:ed:c4:7b:cb:e1:0a:
86:fa:fa:45:cc:1e:3a:b2:8a:55:d4:35:5c:17:1d:
8f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A3:06:24:DE:F7:AE:3A:75:7D:AF:F0:F5:10:35:C6:BC:30:C7:5F
X509v3 Authority Key Identifier:
keyid:BE:37:07:33:B8:DB:61:4D:AA:76:0A:00:2C:24:04:80:28:30:0E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjcHM7jbYU2qdgoALCQEgCgwDi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/paMGJN73rjp1fa_w9RA1xrwwx18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.17.163.0/24
Signature Algorithm: sha256WithRSAEncryption
29:fc:65:f7:1c:ad:eb:1d:24:b9:86:12:d8:53:27:5d:3c:22:
50:9f:d2:3b:66:ea:06:64:22:62:b5:69:1b:b5:d3:64:34:45:
c8:1a:6c:61:cf:c2:6c:cf:1c:e9:81:35:d5:94:9f:36:ae:95:
a0:74:cf:bc:c9:61:e4:6f:fd:90:1f:8a:26:9d:46:7e:c6:c7:
51:9c:ba:b0:d8:b7:86:fe:af:cb:4e:6e:c1:e3:d1:af:36:f8:
07:c3:16:46:ee:8d:4a:7e:c3:3b:72:25:21:24:ec:dc:14:e1:
e4:11:93:85:fa:3d:ba:63:44:4e:18:5c:0d:e8:41:3d:9d:29:
13:c3:a8:c9:f0:ad:d7:c2:34:3b:a8:82:5c:84:95:1a:ff:f5:
e7:72:78:41:2f:ab:7b:6a:99:e1:11:25:ea:98:bb:fd:1d:ac:
4f:71:9f:6e:34:78:df:55:16:c2:9c:9e:3b:e1:29:7e:fb:8a:
f8:86:01:8d:f4:86:8a:7f:a8:bf:90:8c:c9:40:f5:d7:7f:9f:
16:07:eb:c0:9d:f8:f2:28:c5:39:34:ab:9d:5b:ed:04:39:11:
fc:5a:09:67:f9:06:ce:a7:89:0d:93:45:af:ff:8a:00:b6:8f:
cd:2a:25:7e:36:7b:88:d4:71:e3:d9:74:bc:25:53:b7:2e:d5:
37:83:cf:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:37:23 2025 by rpki-client