Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/q9V7Xus9JaAOVqWDDUO8V0frUJg.roa
File: q9V7Xus9JaAOVqWDDUO8V0frUJg.roa (raw, json)
Hash identifier: BOqisVRqsjZEstDgk3UUu1R2Uohg8LTPrkUF2hoHl7o=
Subject key identifier: AB:D5:7B:5E:EB:3D:25:A0:0E:56:A5:83:0D:43:BC:57:47:EB:50:98
Certificate issuer: /CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Certificate serial: 0194274798CF6AFC883127BD702274D2DD22
Authority key identifier: AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/q9V7Xus9JaAOVqWDDUO8V0frUJg.roa
Signing time: Thu 02 Jan 2025 13:49:51 +0000
ROA not before: Thu 02 Jan 2025 13:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34592
IP address blocks: 37.137.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:98:cf:6a:fc:88:31:27:bd:70:22:74:d2:dd:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Validity
Not Before: Jan 2 13:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abd57b5eeb3d25a00e56a5830d43bc5747eb5098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:69:90:e1:e6:e3:2b:ae:1b:09:9d:0f:37:6d:
20:c2:d1:d7:c8:20:99:7b:4b:46:a6:ea:68:c3:05:
bf:c4:9d:23:d6:82:44:5e:8b:26:39:c2:1d:34:65:
cd:57:a4:98:13:e8:91:b1:40:76:59:a3:02:c0:7b:
91:ae:a3:d8:a3:78:68:65:c6:76:27:67:42:f5:cd:
d8:0d:7c:fb:1a:84:07:3f:eb:18:26:1f:6c:38:18:
09:ed:3d:8a:e5:eb:8b:7f:aa:ce:aa:27:be:8e:2f:
b3:e2:90:57:91:1e:c6:64:1b:00:c2:71:eb:cc:b7:
ef:10:f3:a4:d1:5b:8f:4b:98:a4:6e:95:89:1e:36:
0c:4d:56:85:8d:18:1a:a6:dd:36:da:65:d4:de:da:
8a:0d:2c:5c:12:26:03:4a:90:61:bb:a0:62:6b:0c:
12:c8:e7:59:98:f4:4f:a0:3a:89:b7:24:1b:8c:c3:
69:2a:b4:99:32:6c:60:1d:4e:7e:b3:1b:18:fd:53:
59:48:55:e4:43:7c:89:cb:ca:93:dc:99:91:6b:42:
ab:62:01:a6:5b:7a:6b:94:18:47:48:2f:b0:ba:c4:
2e:f4:a8:5f:10:cf:8f:ed:40:66:06:da:81:fc:95:
68:f4:69:45:e3:65:f6:9c:32:8e:56:7d:b6:bb:7c:
d9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D5:7B:5E:EB:3D:25:A0:0E:56:A5:83:0D:43:BC:57:47:EB:50:98
X509v3 Authority Key Identifier:
keyid:AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/q9V7Xus9JaAOVqWDDUO8V0frUJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.137.37.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:c0:44:a7:a3:0e:b6:4e:5e:bd:fa:88:80:a8:4c:ed:ab:cc:
ce:46:f0:6f:22:e8:64:11:73:9e:b9:ef:5a:43:37:05:99:f4:
a3:63:64:fa:d0:d7:ed:55:b9:c1:16:e5:0b:a1:09:35:59:e4:
ad:6a:c4:01:1c:55:25:52:34:6c:8a:9f:90:96:46:a8:d0:7e:
21:cb:47:7d:37:62:07:88:ea:06:bd:2f:75:e4:53:cd:1b:ea:
ec:d7:12:2a:e1:42:9f:58:ef:2a:2f:29:db:f3:79:9f:0c:82:
9c:6a:f4:c8:6e:6d:3a:f6:6e:57:28:7b:ea:01:8d:d0:c2:1c:
29:71:b8:ba:44:79:b1:3e:0c:d6:cd:83:4b:2c:c0:b2:04:ca:
25:99:af:43:c0:68:e9:b3:fd:95:94:02:ca:fd:78:74:ae:13:
20:13:61:0e:d2:fa:67:45:b0:e3:94:36:e6:07:aa:30:cc:18:
a7:97:51:2d:be:49:87:81:bf:a0:3a:78:94:11:b8:32:8e:69:
eb:84:e4:a3:3e:df:4e:70:69:b3:3a:a5:ab:cb:af:56:df:a8:
d5:fb:6c:cf:21:b1:c2:3e:dc:43:e0:30:88:2d:f2:50:cd:9d:
b3:6b:da:5b:f1:a8:8b:fe:0e:2b:20:b2:a5:56:a6:32:0a:3b:
d5:b3:0b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:07 2025 by rpki-client