Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/fyxM_h2WX6rYIy5hg25YZB5O2CM.roa
File: fyxM_h2WX6rYIy5hg25YZB5O2CM.roa (raw, json)
Hash identifier: 9Ti3G/owzw7kR0D0MPQYXnuvUJArE0MI+SK12KJz4Yg=
Subject key identifier: 7F:2C:4C:FE:1D:96:5F:AA:D8:23:2E:61:83:6E:58:64:1E:4E:D8:23
Certificate issuer: /CN=b467367967dc763349fd0b50e31f75b823028590
Certificate serial: 0195A8816F66042DF1FC8C6335DC7833FA30
Authority key identifier: B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/fyxM_h2WX6rYIy5hg25YZB5O2CM.roa
Signing time: Tue 18 Mar 2025 09:06:49 +0000
ROA not before: Tue 18 Mar 2025 09:06:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60232
IP address blocks: 37.75.8.0/21 maxlen: 24
185.28.0.0/22 maxlen: 24
185.81.236.0/22 maxlen: 24
195.142.0.0/22 maxlen: 24
195.142.104.0/21 maxlen: 24
195.142.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a8:81:6f:66:04:2d:f1:fc:8c:63:35:dc:78:33:fa:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b467367967dc763349fd0b50e31f75b823028590
Validity
Not Before: Mar 18 09:06:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f2c4cfe1d965faad8232e61836e58641e4ed823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:89:61:95:5c:64:cc:97:67:38:64:e5:aa:fc:
43:31:fe:71:56:7a:97:55:54:1d:f2:c1:b6:f8:5c:
56:8a:9b:cb:ed:19:8f:31:38:c5:b5:0f:91:50:b4:
6a:b7:16:56:d2:19:6e:78:e7:73:c6:70:1a:59:eb:
5f:d9:31:b6:54:72:6f:46:ab:4f:c0:90:08:2d:95:
f8:6f:4a:d8:42:6a:ea:24:e2:2f:b2:0f:55:02:5a:
9d:77:5b:0b:6b:24:31:16:fd:73:15:1a:66:51:bc:
11:e6:51:30:a3:d0:fb:dd:4f:92:94:3d:0b:ce:89:
f8:8b:f6:aa:30:a3:44:b1:97:21:08:d0:06:3e:42:
5c:2a:0f:11:07:17:e3:84:c5:cc:4b:79:43:23:af:
bc:8e:2f:8f:a6:f9:02:f0:70:84:21:c8:04:be:f0:
30:00:2a:cf:da:da:8c:0a:d9:6d:00:b2:18:e2:7c:
8e:6d:1c:cb:4b:78:e9:ec:2a:36:be:21:ad:62:c2:
23:08:a0:48:ab:93:56:96:0f:da:e4:43:a3:37:ff:
c0:a6:09:ce:67:12:90:16:90:82:46:29:13:ac:0a:
17:b5:ae:c4:56:9f:7d:bb:09:58:1f:f1:34:c8:37:
05:c8:12:8e:aa:2b:74:03:74:89:ab:34:26:26:56:
87:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:2C:4C:FE:1D:96:5F:AA:D8:23:2E:61:83:6E:58:64:1E:4E:D8:23
X509v3 Authority Key Identifier:
keyid:B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/fyxM_h2WX6rYIy5hg25YZB5O2CM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.75.8.0/21
185.28.0.0/22
185.81.236.0/22
195.142.0.0/22
195.142.104.0/21
195.142.132.0/22
Signature Algorithm: sha256WithRSAEncryption
32:f3:be:45:37:c3:91:7e:2e:1c:86:97:31:fa:52:d1:2c:d9:
94:4b:39:32:01:b0:e5:31:93:c5:c2:4a:13:24:b5:dc:39:81:
bb:99:8c:70:a8:7b:0a:95:da:f5:0a:18:37:e9:72:df:41:a8:
8e:76:6a:1a:0d:32:6a:d4:be:da:4b:d9:40:9a:4b:1e:b4:17:
85:9b:a4:85:3d:d5:21:e8:92:d3:7f:78:ea:31:22:83:38:3b:
98:68:04:83:83:4f:ae:ec:d9:aa:d1:47:55:56:e6:8f:78:e6:
f8:d9:f0:e1:68:70:7d:d1:c5:24:24:3a:92:fb:ad:f4:50:ac:
52:de:af:30:2b:d8:f2:0e:bc:58:d5:f9:56:c6:b2:1d:03:ee:
cc:e6:0e:11:99:f8:a2:7b:b7:87:50:7e:62:fa:31:f3:6c:f0:
52:ed:3e:38:f7:46:d0:fe:34:d2:a0:dd:f8:05:1f:bb:35:0a:
05:78:73:d7:b3:b8:61:7e:70:9e:8b:52:9a:11:e0:2b:38:5c:
e0:d9:41:18:59:1d:76:5e:db:28:0f:13:fa:f6:e7:92:c7:06:
c0:42:db:81:9f:1c:89:5e:7c:db:da:de:81:e5:31:44:29:81:
5b:23:d1:c7:a0:e8:53:4e:ab:16:6e:3c:1f:22:77:2e:f6:c8:
61:d7:4e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:36:23 2025 by rpki-client