Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/Nlgb7JYdYFon3ATeZJpEg1k27pw.roa
File: Nlgb7JYdYFon3ATeZJpEg1k27pw.roa (raw, json)
Hash identifier: NSOx98amr5Ih2M9Z5olSG0RUve4KE3kRKxU5Wk0rOgM=
Subject key identifier: 36:58:1B:EC:96:1D:60:5A:27:DC:04:DE:64:9A:44:83:59:36:EE:9C
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 0194228DEEBA137BAE7A400147195950B136
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/Nlgb7JYdYFon3ATeZJpEg1k27pw.roa
Signing time: Wed 01 Jan 2025 15:48:34 +0000
ROA not before: Wed 01 Jan 2025 15:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58224
IP address blocks: 37.156.12.0/22 maxlen: 32
77.238.108.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ee:ba:13:7b:ae:7a:40:01:47:19:59:50:b1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: Jan 1 15:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36581bec961d605a27dc04de649a44835936ee9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:54:c6:5f:16:b2:6a:b7:34:19:70:f9:45:75:
c3:8a:49:b7:b8:ac:dd:08:c7:4c:0c:98:15:82:2a:
5e:db:e1:46:5c:18:c7:d2:8e:7d:92:1a:f2:f5:11:
97:33:3d:0c:41:f7:98:be:4c:8a:a5:b1:02:3b:54:
5c:d4:bb:40:4d:ef:b9:98:1e:5b:41:5e:ba:fc:43:
4f:75:ca:10:07:88:2c:6c:f0:95:d2:8f:62:c0:f2:
74:47:69:38:d9:b0:ae:cb:90:c5:23:85:7a:cc:e5:
ad:03:d2:03:79:da:0b:b4:cf:f1:74:1e:88:43:bc:
29:f9:ae:c5:7e:55:54:47:2d:ef:32:2a:bb:36:7e:
d3:ce:d4:c4:f8:23:f2:f7:dc:e6:87:ab:42:6f:e5:
37:7b:e0:1e:25:b6:37:f6:17:95:2e:96:76:7b:b9:
ca:a3:16:3d:4a:df:04:40:da:a2:6b:28:47:5a:c9:
de:8b:e0:59:ae:50:44:8a:16:f7:54:c8:88:66:7c:
03:25:b0:a1:ad:68:3a:27:d6:5b:08:f0:ae:67:a5:
f9:ae:a0:ce:75:c4:4f:df:55:42:2f:31:87:82:f2:
b1:c7:8f:ef:e8:b9:f3:d5:10:45:37:96:77:45:de:
a7:9a:e5:1d:af:03:b1:73:9b:f9:87:47:08:74:85:
d9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:58:1B:EC:96:1D:60:5A:27:DC:04:DE:64:9A:44:83:59:36:EE:9C
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/Nlgb7JYdYFon3ATeZJpEg1k27pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.12.0/22
77.238.108.0/22
Signature Algorithm: sha256WithRSAEncryption
29:45:84:8f:68:1e:91:7c:28:a0:00:60:d8:3c:ae:38:75:bd:
1a:c8:6f:ba:f4:b4:5d:43:91:6b:a4:0f:da:ad:51:db:60:e7:
15:f5:f1:72:d5:6f:c2:93:8c:04:d9:94:06:ad:42:fd:ce:70:
ee:a5:22:5b:69:09:34:ba:06:6a:b2:db:4d:2d:2d:e6:7c:86:
68:77:31:1b:97:39:18:2f:4e:c8:c9:32:05:fc:c8:cb:4b:44:
13:97:46:ed:12:ef:3d:e8:b2:74:9f:bc:4d:d8:c5:4a:7d:c7:
af:06:8a:96:a6:2b:ef:e1:ef:9d:5b:83:f1:3c:3c:1f:f6:0f:
6c:5d:75:43:91:cc:66:a6:63:bb:f0:55:d1:a8:cc:00:79:6d:
ee:b7:d4:67:5b:b5:46:99:26:32:35:87:4a:a6:e7:77:4f:d2:
58:51:9e:c8:03:e3:7d:ab:5b:f7:f0:40:ad:b0:48:f9:9f:65:
ce:f4:7c:79:44:24:74:78:2b:7f:e7:7e:69:01:8b:e4:07:b2:
eb:91:54:d1:82:a3:3d:56:72:8b:fe:17:52:48:d0:50:ab:a8:
74:67:db:8d:5b:a5:68:9d:49:60:6e:ee:66:36:ef:d8:c8:e4:
88:70:b1:eb:98:41:46:6e:aa:ec:8f:43:86:c8:5f:61:1f:b0:
72:be:fb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:28:34 2025 by rpki-client