Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/X7I_6O60aP9OaBtbJevHcrghsuE.roa
File: X7I_6O60aP9OaBtbJevHcrghsuE.roa (raw, json)
Hash identifier: hR7L9FjeYMdP71zS9N34E835iFleUqKlYe8PrU5+gmY=
Subject key identifier: 5F:B2:3F:E8:EE:B4:68:FF:4E:68:1B:5B:25:EB:C7:72:B8:21:B2:E1
Certificate issuer: /CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
Certificate serial: 0194274872ED9BB8794EEF8D657F82124B20
Authority key identifier: E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/X7I_6O60aP9OaBtbJevHcrghsuE.roa
Signing time: Thu 02 Jan 2025 13:50:46 +0000
ROA not before: Thu 02 Jan 2025 13:50:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21243
IP address blocks: 37.247.244.0/23 maxlen: 23
37.247.246.0/23 maxlen: 23
212.2.105.0/24 maxlen: 24
212.2.106.0/23 maxlen: 23
2a01:2e1:ffff:6::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:72:ed:9b:b8:79:4e:ef:8d:65:7f:82:12:4b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
Validity
Not Before: Jan 2 13:50:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5fb23fe8eeb468ff4e681b5b25ebc772b821b2e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2f:a1:c3:65:90:fc:5a:fe:45:85:c8:25:30:
50:52:35:8b:d1:4e:c0:87:c8:43:4d:e7:a3:3c:f1:
17:71:49:2a:8f:7d:6a:7b:4c:b9:9d:b7:7a:c2:b4:
32:2f:01:6e:39:1a:00:cd:08:7d:ca:fe:a0:ce:d0:
e9:f5:8d:f4:67:37:1e:a5:d7:7b:ad:61:07:f8:9f:
94:cc:44:eb:90:69:ac:ba:85:58:ae:08:c7:47:10:
78:ad:12:f8:5d:31:56:ee:86:57:f2:14:3a:7e:56:
fe:4c:6b:90:a3:95:6a:db:b0:ce:f8:bd:51:6c:e1:
53:87:56:08:51:c6:a0:d1:c5:b7:d2:b3:3f:68:17:
9f:f9:74:bf:e5:93:69:99:68:bf:50:f9:ba:40:59:
fe:0e:54:45:1c:4c:67:be:f6:b4:39:c3:39:40:b5:
71:b9:f5:2d:db:e0:57:9e:3c:b1:8e:ff:21:6a:44:
53:59:a3:17:da:f0:c6:6f:01:c9:1e:9a:c7:05:15:
b6:a3:bc:17:6d:a1:02:0d:e2:99:9d:2b:b1:a8:5a:
6c:c3:0c:c5:14:0f:0f:2e:00:68:64:19:81:c7:72:
6d:0e:4f:09:23:cb:c9:c9:c5:37:55:2f:bb:1f:6c:
0e:69:9b:38:21:9a:c4:f0:ef:77:af:45:9f:d5:02:
4e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B2:3F:E8:EE:B4:68:FF:4E:68:1B:5B:25:EB:C7:72:B8:21:B2:E1
X509v3 Authority Key Identifier:
keyid:E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/X7I_6O60aP9OaBtbJevHcrghsuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.247.244.0/22
212.2.105.0-212.2.107.255
IPv6:
2a01:2e1:ffff:6::/64
Signature Algorithm: sha256WithRSAEncryption
2e:32:51:fc:3f:39:18:52:90:ff:d4:f1:dc:b2:0c:cc:cd:0b:
d1:40:4a:c1:6d:19:b5:ee:58:b3:60:05:fc:b7:4c:73:71:ce:
36:ae:e1:98:81:1a:19:dc:e4:1d:c7:3a:5c:02:96:58:d0:b4:
6b:3e:53:03:76:a0:65:d1:08:6b:48:a7:f2:cd:1d:d9:ca:91:
e9:cb:f5:89:4d:dd:26:8b:7d:6f:08:d4:ea:4f:d5:c5:ae:25:
e5:a7:41:49:a4:c9:68:4f:68:62:8e:d1:21:11:36:dd:b4:11:
5a:a2:b7:39:bb:2e:ff:52:5c:7d:87:37:bb:7a:8b:60:e7:54:
23:53:b0:2c:85:22:ac:09:6c:91:9c:8e:80:09:1f:37:65:37:
40:41:eb:1f:1b:b7:57:bc:9b:d6:f2:a9:9e:5c:e6:6e:54:74:
22:d5:93:d3:7b:e9:5f:22:3b:81:61:0d:ef:66:69:be:b5:4a:
76:5a:04:63:77:3a:f3:f0:c0:bc:73:33:1b:72:8a:26:a0:fa:
2a:83:bb:86:2a:e1:49:7c:67:a9:ac:cc:0e:76:4d:c5:1e:27:
b1:93:d3:7b:20:01:65:81:cc:95:28:0c:2d:cf:3f:47:7c:13:
f1:3d:e8:fa:ee:44:ce:4e:3a:e6:44:b4:50:d7:49:39:61:26:
4b:d1:c7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:06 2025 by rpki-client