Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/32mPvXZ1E5V77DizHJ59sKEMVM4.roa
File: 32mPvXZ1E5V77DizHJ59sKEMVM4.roa (raw, json)
Hash identifier: PLuEC3shL6JOCIyqShDjM12i2qb012VkMldY57mIQng=
Subject key identifier: DF:69:8F:BD:76:75:13:95:7B:EC:38:B3:1C:9E:7D:B0:A1:0C:54:CE
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0194222028FF7FE960E45ECBC00BE4A301C0
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/32mPvXZ1E5V77DizHJ59sKEMVM4.roa
Signing time: Wed 01 Jan 2025 13:48:40 +0000
ROA not before: Wed 01 Jan 2025 13:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50926
IP address blocks: 37.32.98.0/24 maxlen: 24
194.35.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:28:ff:7f:e9:60:e4:5e:cb:c0:0b:e4:a3:01:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df698fbd767513957bec38b31c9e7db0a10c54ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:24:37:7f:93:b2:58:d8:20:a3:f3:6f:26:13:
61:b6:91:28:8c:d8:8f:82:51:a0:2d:e1:90:26:6b:
fc:a0:12:8d:04:39:96:7c:8a:8d:b8:7c:4c:e3:63:
07:bd:4d:b9:56:f3:a0:29:dd:2c:35:71:d6:7c:fb:
8b:01:b8:8c:3d:d1:f1:3a:c4:02:7f:2b:72:a4:eb:
05:76:d7:ef:2a:cf:1a:01:8a:e6:10:58:b8:42:5c:
b0:73:81:91:80:14:21:27:09:28:71:15:73:0d:d3:
ef:84:2e:92:6d:50:7e:1a:4c:78:ca:43:14:df:0b:
9f:ba:49:47:f7:83:32:06:b6:9c:04:c3:81:e8:60:
05:a1:08:75:b2:d7:86:13:19:f0:75:d8:0f:d4:f8:
8f:c9:53:21:3c:e6:51:73:25:fd:83:c8:55:fc:95:
2b:06:6b:89:0a:f5:91:00:8e:8f:65:95:bd:66:a7:
1b:75:4b:1b:77:de:3b:16:00:1e:b9:92:05:60:7a:
8c:e1:7b:72:b7:78:76:d6:a2:6b:05:90:a4:af:2b:
82:1b:00:7f:cc:64:53:96:b5:3e:34:2c:c2:fa:e4:
33:b5:06:24:ac:ca:5a:ed:2b:3a:ed:73:00:0d:6e:
b1:d1:cb:e8:5c:b9:8b:d1:5d:79:44:a1:ef:1a:b6:
19:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:69:8F:BD:76:75:13:95:7B:EC:38:B3:1C:9E:7D:B0:A1:0C:54:CE
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/32mPvXZ1E5V77DizHJ59sKEMVM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.98.0/24
194.35.43.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:8e:a1:28:f4:41:5f:af:48:53:d3:86:ce:83:0b:b1:3d:bd:
15:44:85:93:35:96:33:e4:05:bb:96:6c:5b:f4:bf:36:08:d5:
6e:7b:f7:8f:5c:ee:9a:60:ed:15:3e:1d:d7:f3:b7:34:cf:2a:
45:ca:00:60:c0:fc:73:70:05:60:66:2c:e6:82:bc:5e:48:12:
b3:53:e8:9e:84:bf:6e:75:8d:69:e1:a9:78:d6:4a:71:4a:97:
d0:d0:ca:70:44:c5:9a:ba:87:6b:ac:52:41:ed:1b:4c:36:e8:
2f:43:bf:5f:f8:b7:72:60:47:29:0c:0f:7e:f6:76:68:e0:8f:
71:38:74:e1:45:5b:cc:ad:fc:79:bb:8f:1d:19:16:86:30:98:
fd:5c:a2:e0:a5:bb:df:66:f8:74:59:48:ad:20:ad:6e:50:bb:
a6:d9:9e:46:b0:f8:49:c2:49:0f:e1:d7:38:59:fb:e4:e9:fb:
2e:24:6a:e4:da:70:67:0d:80:cd:15:99:f3:29:75:e4:82:9f:
33:6f:31:d5:28:e9:76:4d:7c:05:ed:04:2c:af:83:be:83:bc:
25:fe:87:8e:53:5d:cc:0e:2b:41:5b:98:cc:76:ba:33:4b:b2:
c6:a0:fa:b8:45:62:6f:2a:e2:15:71:a6:51:eb:c1:20:08:fc:
c6:04:54:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:46:52 2025 by rpki-client