Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/hhrm1Em1WlxZZH38Jm2yxN4no3I.roa
File: hhrm1Em1WlxZZH38Jm2yxN4no3I.roa (raw, json)
Hash identifier: 3IW1YAxLQw3KLIWXwxwYcOQuTgohlVo0d+wGlA+Yr7I=
Subject key identifier: 86:1A:E6:D4:49:B5:5A:5C:59:64:7D:FC:26:6D:B2:C4:DE:27:A3:72
Certificate issuer: /CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Certificate serial: 019422FC30910AE6379653ADCB6D3CFCC3CF
Authority key identifier: 8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/hhrm1Em1WlxZZH38Jm2yxN4no3I.roa
Signing time: Wed 01 Jan 2025 17:49:00 +0000
ROA not before: Wed 01 Jan 2025 17:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200548
IP address blocks: 37.16.92.0/22 maxlen: 22
37.16.92.0/24 maxlen: 24
37.16.93.0/24 maxlen: 24
37.16.94.0/24 maxlen: 24
37.16.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:30:91:0a:e6:37:96:53:ad:cb:6d:3c:fc:c3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Validity
Not Before: Jan 1 17:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=861ae6d449b55a5c59647dfc266db2c4de27a372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3c:5e:23:19:15:be:da:e9:e0:b7:a2:b5:5b:
0a:d4:8b:2b:c9:1a:5b:74:2b:d5:74:c1:74:bc:ae:
39:66:c2:db:68:b3:64:7c:ed:43:96:7b:3c:6b:44:
65:cb:57:e9:f0:01:f3:4a:bd:62:6a:05:96:dc:81:
2d:14:da:f2:ef:b9:eb:14:f1:1d:c5:c3:d9:aa:e9:
94:27:1c:81:75:09:c5:03:f3:c8:56:4b:df:ec:b7:
34:3a:95:66:26:f2:6f:c3:9c:f4:99:32:a2:54:71:
4f:8a:35:6c:e6:a7:73:b4:07:5e:f7:5e:b3:fc:40:
f6:51:d5:8e:af:36:ee:14:35:55:4f:8e:ff:9b:4f:
82:ce:1c:7c:b5:59:7f:f1:bf:e8:3b:6d:72:ad:2d:
66:29:5f:80:26:7a:bb:be:c1:64:14:7b:5b:63:44:
d2:4f:f7:3f:eb:a3:7a:c2:c6:de:e8:3d:22:b7:df:
75:1f:58:05:c2:3d:10:aa:ae:a9:ad:ef:2b:0d:d9:
3d:3b:4e:c1:0b:cf:19:00:57:b8:be:7d:89:d2:16:
ac:80:84:83:ac:ac:a2:e9:49:dd:25:6b:56:7d:f3:
76:cf:fa:c3:eb:50:1d:50:a2:6c:13:a6:32:91:9d:
aa:40:5f:4f:6d:1a:2f:9a:77:82:53:18:af:ce:b6:
5a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1A:E6:D4:49:B5:5A:5C:59:64:7D:FC:26:6D:B2:C4:DE:27:A3:72
X509v3 Authority Key Identifier:
keyid:8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/hhrm1Em1WlxZZH38Jm2yxN4no3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.92.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:76:57:ce:57:a9:bc:e4:b7:c4:4e:22:54:6e:2c:1f:93:27:
2b:e8:3e:9d:9c:46:b3:c7:45:2c:5f:fb:a1:e0:d5:5f:0d:17:
a8:3a:7a:80:f8:92:b5:c1:f3:fe:ac:f8:85:dc:0a:c3:6f:83:
6d:f7:7f:7a:c4:1c:1b:a0:0b:7f:5f:d1:54:b4:83:af:b8:ff:
01:be:d8:71:1e:52:e8:8c:1c:ce:a1:61:13:dc:01:1d:f8:8c:
69:2d:bf:43:be:7f:42:8f:50:dd:7f:0b:e4:82:7f:e1:c3:40:
0c:4d:3c:26:7f:30:96:d9:d3:aa:3a:a5:38:be:2c:aa:32:2a:
c8:a9:52:5e:42:7a:c8:24:a9:8b:94:19:e5:06:05:e5:d5:69:
82:74:bc:d2:8c:21:70:06:0e:13:a5:84:57:d3:75:9a:90:9e:
ca:0d:91:df:c0:cb:4a:d4:55:ec:44:0e:f1:85:04:c8:81:da:
8e:58:3c:47:00:e6:0d:85:f8:6c:aa:70:c7:5f:70:d1:0c:65:
05:82:99:24:b3:e7:7f:d4:8a:63:87:96:91:3c:29:dd:eb:cf:
0e:90:ff:af:5e:f6:82:bb:1d:f2:0f:86:97:ac:3c:59:b3:18:
9c:4f:c0:d7:31:82:f5:ae:87:19:45:20:61:2f:ae:1a:77:95:
89:30:d8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:32 2025 by rpki-client