Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/hxPyuSyLFHa_vWQcuEZVtl-uCW8.roa
File: hxPyuSyLFHa_vWQcuEZVtl-uCW8.roa (raw, json)
Hash identifier: vWGbszgkxUzcaxd29p8mODx9xq9U6HoRuw90T59i6p8=
Subject key identifier: 87:13:F2:B9:2C:8B:14:76:BF:BD:64:1C:B8:46:55:B6:5F:AE:09:6F
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C6EB58539BCE2D3BABCB57CFC9F10
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/hxPyuSyLFHa_vWQcuEZVtl-uCW8.roa
Signing time: Thu 02 Jan 2025 09:50:27 +0000
ROA not before: Thu 02 Jan 2025 09:50:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34267
IP address blocks: 37.19.32.0/19 maxlen: 19
37.19.32.0/20 maxlen: 20
84.42.32.0/19 maxlen: 24
84.42.72.0/21 maxlen: 24
94.75.128.0/18 maxlen: 18
109.198.192.0/19 maxlen: 19
109.198.192.0/21 maxlen: 21
213.155.192.0/19 maxlen: 19
213.155.192.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:6e:b5:85:39:bc:e2:d3:ba:bc:b5:7c:fc:9f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8713f2b92c8b1476bfbd641cb84655b65fae096f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:66:bd:6f:37:44:39:a9:5d:5c:29:57:87:b8:
0d:cf:0d:56:ab:05:f7:a0:4d:e5:2d:ba:80:e8:cb:
26:da:22:d1:1e:3f:7a:5e:f2:77:11:45:eb:f9:90:
97:3e:9e:85:fe:f4:7f:6a:34:51:7e:d0:73:a6:ad:
33:c3:cf:92:1b:41:f7:b3:21:d5:e5:13:aa:33:09:
6a:93:cb:11:96:92:de:5f:f4:6f:8c:66:6c:3f:56:
ef:e5:1c:6d:75:30:99:42:59:88:e9:80:ac:e8:7b:
65:f3:4f:12:70:ce:f2:4f:43:ce:2e:91:85:6a:78:
3f:66:24:65:52:37:d2:96:5f:97:b6:c1:9f:85:fc:
70:3c:04:dc:b4:62:a1:88:25:e5:f8:e9:ff:78:fc:
0f:89:a1:b9:87:76:22:c5:84:d9:1c:0e:c1:8c:25:
f3:92:0c:ad:39:63:46:88:2e:48:57:d6:f8:e3:39:
ca:8e:39:f1:f2:57:51:00:af:f6:24:7c:94:46:c5:
2a:9a:80:07:cf:fd:9f:ec:1d:99:c2:ca:e6:cd:9a:
6a:1f:2a:ed:23:a3:92:dc:de:10:50:0a:8d:ab:17:
74:31:20:a3:70:4b:8d:3f:46:b9:ce:73:db:ba:3f:
97:17:c7:86:7d:1e:f5:6d:42:ed:f5:47:fc:1a:ca:
1a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:13:F2:B9:2C:8B:14:76:BF:BD:64:1C:B8:46:55:B6:5F:AE:09:6F
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/hxPyuSyLFHa_vWQcuEZVtl-uCW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.19.32.0/19
84.42.32.0/19
84.42.72.0/21
94.75.128.0/18
109.198.192.0/19
213.155.192.0/19
Signature Algorithm: sha256WithRSAEncryption
38:a2:84:7e:85:ad:69:29:7c:bf:34:7e:1e:f0:61:39:26:0c:
b7:d2:2a:d8:88:94:f9:7d:0a:25:10:d1:59:ba:66:17:7c:e5:
6c:7c:76:1c:14:5c:87:24:b6:47:00:8d:d3:fb:10:e0:9a:3b:
14:ca:24:b8:c1:cb:69:77:00:a4:01:10:e9:6d:0b:61:db:bb:
81:99:59:48:29:54:d4:99:12:85:42:58:61:4a:39:0b:47:9a:
b7:92:cc:08:69:d4:c8:ef:62:d9:7b:8e:85:54:be:8f:c1:ff:
67:25:73:52:d6:71:bf:74:73:88:8f:ff:df:e1:17:83:0d:7e:
e5:6e:1e:58:80:48:b3:98:c9:58:5e:d6:a9:5c:7c:5d:e9:09:
10:95:d5:c5:64:c2:81:71:76:61:34:ff:a3:4a:dc:3e:65:44:
9f:cc:ea:e9:0b:7f:ee:8e:2c:ec:65:31:1e:41:54:1f:f7:a5:
e1:24:5b:04:d7:bc:e5:c6:74:e5:cc:bd:bb:07:16:72:3a:bb:
90:45:11:4e:58:74:58:b7:c3:fb:33:02:51:14:e8:06:bc:cb:
04:12:c3:ee:98:3a:af:a1:1b:e3:f2:7f:98:2c:76:11:ad:06:
ab:d1:94:9d:3f:d5:36:e3:68:b3:d0:bd:7b:78:e9:6a:a0:7c:
8a:ca:c0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:58 2025 by rpki-client