Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/IgyiZQsGF35ZpqMjFvvmpe-Uiy0.roa
File: IgyiZQsGF35ZpqMjFvvmpe-Uiy0.roa (raw, json)
Hash identifier: pAyIL1yLWM74WtAtlIRzPUKtL/NRSv2opfBvsE4P7Hg=
Subject key identifier: 22:0C:A2:65:0B:06:17:7E:59:A6:A3:23:16:FB:E6:A5:EF:94:8B:2D
Certificate issuer: /CN=2ac78fd517a75f77f3f4fd229ac5e6732560c6e1
Certificate serial: 019422203F540F612AF11733744577D73FCD
Authority key identifier: 2A:C7:8F:D5:17:A7:5F:77:F3:F4:FD:22:9A:C5:E6:73:25:60:C6:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/IgyiZQsGF35ZpqMjFvvmpe-Uiy0.roa
Signing time: Wed 01 Jan 2025 13:48:46 +0000
ROA not before: Wed 01 Jan 2025 13:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56860
IP address blocks: 37.235.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:3f:54:0f:61:2a:f1:17:33:74:45:77:d7:3f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac78fd517a75f77f3f4fd229ac5e6732560c6e1
Validity
Not Before: Jan 1 13:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=220ca2650b06177e59a6a32316fbe6a5ef948b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:95:56:e9:13:74:d8:01:59:5c:6d:93:00:1e:
01:a1:bf:cb:4f:1d:c8:82:db:ab:48:3e:ba:b8:71:
fa:07:bd:8a:a7:9a:9f:34:e1:9b:47:02:d8:eb:d2:
62:2b:52:be:e7:72:80:10:b6:2a:3e:03:dc:67:1d:
5a:d5:7b:c4:8f:15:3a:7e:10:2b:5f:94:a1:65:af:
a7:a2:7f:f9:8d:d8:70:cf:2d:f3:82:1b:28:cd:9a:
fa:27:ea:04:b7:f1:07:67:7d:30:b4:ef:6c:d1:1b:
f4:29:44:f4:80:ca:e7:ba:4f:ef:73:02:a8:32:35:
cb:7a:3f:3d:be:4f:a8:be:de:c7:d2:9b:d2:34:57:
93:b2:93:19:43:8c:a4:1a:15:28:1e:12:2c:2c:6e:
4d:4f:85:6b:df:23:f1:f7:e4:f2:bf:12:3e:57:f1:
4a:d6:b2:c5:66:79:27:87:c9:ac:e8:c7:6b:43:ed:
00:26:1b:43:11:96:11:ab:af:62:51:4f:f4:0d:28:
c8:15:2a:5a:97:17:a6:6a:df:a8:29:d7:5d:eb:0b:
45:eb:9d:af:47:83:9e:d7:39:52:c9:a5:8a:37:1f:
eb:16:e2:db:6c:78:dd:b8:0d:8b:bd:25:c0:ed:2b:
67:31:ee:11:b8:f4:59:4b:ec:ab:b3:8c:c7:04:73:
c5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0C:A2:65:0B:06:17:7E:59:A6:A3:23:16:FB:E6:A5:EF:94:8B:2D
X509v3 Authority Key Identifier:
keyid:2A:C7:8F:D5:17:A7:5F:77:F3:F4:FD:22:9A:C5:E6:73:25:60:C6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/IgyiZQsGF35ZpqMjFvvmpe-Uiy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.76.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:40:da:3d:5d:8d:b7:42:db:52:37:e7:7d:e2:29:8f:a1:a4:
61:11:cc:e4:9b:d0:11:32:30:ff:e8:bb:3e:c7:cd:14:3a:52:
1d:3f:6a:9c:09:8b:1f:e6:f1:3c:9b:e1:25:5a:a6:88:1c:fc:
1c:ab:aa:7b:dd:2e:6e:53:85:71:a6:d9:7a:e4:25:90:3b:77:
2f:39:e5:22:49:0e:70:cd:c0:89:e1:f4:72:78:c8:7f:49:c7:
b8:46:d5:7a:ae:be:62:90:76:77:79:fc:8b:9b:66:5f:ed:33:
59:17:a3:59:3c:a3:7c:de:c1:44:bb:90:b2:7c:49:5e:ce:80:
b9:a4:25:d9:6a:be:aa:0d:d0:98:0f:c6:0a:ab:95:68:30:64:
99:da:e4:a6:32:11:66:c3:91:36:9f:01:18:aa:fc:55:5b:da:
73:e0:2a:73:30:25:55:0c:3c:60:7e:16:7a:76:a1:2a:84:26:
5b:02:9b:3d:15:30:6b:d1:ae:7a:58:69:3f:cb:91:87:55:2d:
a7:33:69:36:d3:c0:b4:df:ac:96:69:57:d8:53:78:4a:75:b5:
2c:5b:f3:d2:14:e7:b6:e2:40:6d:99:1b:9b:6c:c4:d3:85:ec:
1e:4b:ec:9d:16:6c:2f:c3:b0:b4:71:d8:0c:6f:82:10:dc:dd:
88:5a:22:b8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiID9UD2Eq8RczdEV31z/NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzc4ZmQ1MTdhNzVmNzdmM2Y0ZmQyMjlhYzVlNjczMjU2
MGM2ZTEwHhcNMjUwMTAxMTM0ODQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjBjYTI2NTBiMDYxNzdlNTlhNmEzMjMxNmZiZTZhNWVmOTQ4YjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZVW6RN02AFZXG2TAB4Bob/LTx3I
gturSD66uHH6B72Kp5qfNOGbRwLY69JiK1K+53KAELYqPgPcZx1a1XvEjxU6fhAr
X5ShZa+non/5jdhwzy3zghsozZr6J+oEt/EHZ30wtO9s0Rv0KUT0gMrnuk/vcwKo
MjXLej89vk+ovt7H0pvSNFeTspMZQ4ykGhUoHhIsLG5NT4Vr3yPx9+TyvxI+V/FK
1rLFZnknh8ms6MdrQ+0AJhtDEZYRq69iUU/0DSjIFSpalxemat+oKddd6wtF652v
R4Oe1zlSyaWKNx/rFuLbbHjduA2LvSXA7StnMe4RuPRZS+yrs4zHBHPFawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCIMomULBhd+WaajIxb75qXvlIstMB8GA1UdIwQY
MBaAFCrHj9UXp1938/T9IprF5nMlYMbhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NlUDFSZW5YM2Z6OVAwaW1zWG1jeVZneHVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jOGYwMmItMGFiYy00MWZlLWJjNTQt
YWM4MDBjNmQ5NzZmLzEvSWd5aVpRc0dGMzVacHFNakZ2dm1wZS1VaXkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9jOGYwMmItMGFiYy00MWZlLWJjNTQtYWM4MDBjNmQ5NzZm
LzEvS3NlUDFSZW5YM2Z6OVAwaW1zWG1jeVZneHVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJetMMA0G
CSqGSIb3DQEBCwUAA4IBAQCcQNo9XY23QttSN+d94imPoaRhEczkm9ARMjD/6Ls+
x80UOlIdP2qcCYsf5vE8m+ElWqaIHPwcq6p73S5uU4Vxptl65CWQO3cvOeUiSQ5w
zcCJ4fRyeMh/Sce4RtV6rr5ikHZ3efyLm2Zf7TNZF6NZPKN83sFEu5CyfElezoC5
pCXZar6qDdCYD8YKq5VoMGSZ2uSmMhFmw5E2nwEYqvxVW9pz4CpzMCVVDDxgfhZ6
dqEqhCZbAps9FTBr0a56WGk/y5GHVS2nM2k208C036yWaVfYU3hKdbUsW/PSFOe2
4kBtmRubbMTTheweS+ydFmwvw7C0cdgMb4IQ3N2IWiK4
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:20 2025 by rpki-client