Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/1YRX6kH3MO9A8GEB4BX9UHxPMkk.roa
File: 1YRX6kH3MO9A8GEB4BX9UHxPMkk.roa (raw, json)
Hash identifier: 6YmbCUnXcQiUlqTSVDho9qn5E8NzfmOqOHyX1o/Uiw0=
Subject key identifier: D5:84:57:EA:41:F7:30:EF:40:F0:61:01:E0:15:FD:50:7C:4F:32:49
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018FCC901DDF6A9EB0B065C3E388489263BE
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/1YRX6kH3MO9A8GEB4BX9UHxPMkk.roa
Signing time: Fri 31 May 2024 02:52:27 +0000
ROA not before: Fri 31 May 2024 02:52:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 37.153.132.0/24 maxlen: 24
84.247.20.0/24 maxlen: 24
89.37.106.0/24 maxlen: 24
89.37.128.0/24 maxlen: 24
89.42.213.0/24 maxlen: 24
91.250.244.0/24 maxlen: 24
176.223.190.0/24 maxlen: 24
188.240.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:cc:90:1d:df:6a:9e:b0:b0:65:c3:e3:88:48:92:63:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: May 31 02:52:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d58457ea41f730ef40f06101e015fd507c4f3249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7d:32:3a:12:43:c2:43:07:b5:b0:4c:f0:34:
00:7c:e3:64:bd:4e:0c:a8:02:fe:7f:b2:6d:24:2f:
83:ab:e0:fc:9e:d6:1a:b9:53:17:62:40:a5:9d:ce:
11:b6:42:36:17:a3:c1:76:93:84:87:cd:c8:83:75:
e8:0e:57:c4:15:3e:60:c6:4c:00:10:47:1b:b1:6b:
a2:80:2a:07:2c:10:45:98:75:fb:a7:ef:c5:42:54:
42:96:a3:23:63:6e:09:eb:8a:e8:ee:ed:e4:22:53:
9a:46:83:9d:98:df:5a:98:73:5a:85:0d:f1:b7:17:
83:be:f2:a0:0a:2b:1d:d4:67:49:12:af:fd:14:86:
06:e8:35:9e:72:ee:be:cb:6f:7b:9a:49:33:07:a1:
10:b3:49:e9:ee:b4:74:52:75:44:89:bc:07:d1:d4:
79:66:79:b8:42:2f:15:c3:67:b4:d4:f6:da:eb:a3:
73:05:14:3e:18:27:f5:a3:1d:c8:6c:c4:72:70:f8:
00:64:07:3f:f3:c6:75:08:a4:1e:9c:49:03:c7:e8:
05:43:17:60:0e:5c:27:18:a6:bb:98:9a:96:2c:83:
b1:59:38:6d:b8:05:aa:9f:a6:5b:4e:12:94:b9:e8:
52:9e:91:5e:46:2e:4c:19:ed:22:2f:3f:9d:6f:5b:
b7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:84:57:EA:41:F7:30:EF:40:F0:61:01:E0:15:FD:50:7C:4F:32:49
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/1YRX6kH3MO9A8GEB4BX9UHxPMkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.132.0/24
84.247.20.0/24
89.37.106.0/24
89.37.128.0/24
89.42.213.0/24
91.250.244.0/24
176.223.190.0/24
188.240.83.0/24
Signature Algorithm: sha256WithRSAEncryption
61:67:dc:fa:44:68:4d:5b:f9:75:bc:5c:4e:21:39:e0:38:c6:
7c:01:c0:1a:b4:6d:b7:12:ad:bf:9b:82:03:4f:b1:0f:21:d9:
a4:19:ce:d1:da:4c:12:ca:b8:78:5c:c3:c9:61:df:59:ac:97:
fb:a4:0c:11:dc:7f:3b:d9:5e:c3:ad:06:02:9c:d2:1d:fd:20:
60:03:9c:fb:a8:40:1e:52:e8:f0:d1:51:6f:da:e3:19:7f:de:
32:9b:25:8e:25:04:48:03:b6:ba:2e:79:6f:23:42:1c:06:93:
53:75:a2:8c:e5:ab:fb:53:16:c4:2e:0a:0e:d3:15:ad:b3:da:
3b:ae:2e:b7:a9:ce:9a:15:1d:4a:dd:b3:18:ab:e8:9b:2c:b7:
d2:cc:6f:17:ed:28:37:b1:58:80:82:42:54:00:e2:9f:40:f4:
a7:99:45:ff:38:e0:54:93:65:ba:67:ef:52:6a:43:15:38:9e:
4f:e7:63:76:4a:45:c9:e5:f5:78:55:06:9c:93:9c:5c:e5:5e:
a8:b8:01:a9:9c:2b:c6:31:9c:80:13:9e:0e:36:54:34:87:9e:
33:a5:b3:e2:f5:dc:77:82:17:1c:e1:26:ba:0d:31:ed:8a:c3:
5f:ee:f7:3f:94:e2:bf:e8:53:82:92:2c:f1:cf:5b:27:c7:4b:
a7:2c:3b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:03 2025 by rpki-client