Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/AedwyOZIh1v-2im4ZMAx97DTRpo.roa
File: AedwyOZIh1v-2im4ZMAx97DTRpo.roa (raw, json)
Hash identifier: DbUxINBRfEQf4Wxbn/KisI+8e2YWuUas3nHL1UMHIYw=
Subject key identifier: 01:E7:70:C8:E6:48:87:5B:FE:DA:29:B8:64:C0:31:F7:B0:D3:46:9A
Certificate issuer: /CN=29993007c7c92df6178e7cb43183fd7f52a526d8
Certificate serial: 0194236A1665CEC3963D832D4FD0897D9270
Authority key identifier: 29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/AedwyOZIh1v-2im4ZMAx97DTRpo.roa
Signing time: Wed 01 Jan 2025 19:49:02 +0000
ROA not before: Wed 01 Jan 2025 19:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39582
IP address blocks: 37.77.0.0/19 maxlen: 24
37.77.1.0/24 maxlen: 24
37.77.2.0/24 maxlen: 24
37.77.3.0/24 maxlen: 24
37.77.4.0/24 maxlen: 24
37.77.5.0/24 maxlen: 24
37.77.6.0/24 maxlen: 24
37.77.7.0/24 maxlen: 24
37.77.8.0/24 maxlen: 24
37.77.9.0/24 maxlen: 24
37.77.10.0/24 maxlen: 24
37.77.15.0/24 maxlen: 24
37.77.16.0/24 maxlen: 24
37.77.17.0/24 maxlen: 24
37.77.18.0/24 maxlen: 24
37.77.20.0/24 maxlen: 24
37.77.21.0/24 maxlen: 24
37.77.22.0/24 maxlen: 24
37.77.23.0/24 maxlen: 24
37.77.24.0/24 maxlen: 24
37.77.26.0/24 maxlen: 24
37.77.30.0/24 maxlen: 24
37.77.31.0/24 maxlen: 24
2a02:4300::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:16:65:ce:c3:96:3d:83:2d:4f:d0:89:7d:92:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29993007c7c92df6178e7cb43183fd7f52a526d8
Validity
Not Before: Jan 1 19:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01e770c8e648875bfeda29b864c031f7b0d3469a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:84:f9:77:8d:af:13:86:60:e0:88:81:d4:41:
b1:dc:56:c0:67:a4:ca:c0:f1:ce:d2:67:54:bd:c7:
3b:81:2e:fe:6a:63:f7:eb:ea:f9:07:ec:5a:84:f4:
24:c6:5c:cb:80:51:15:e9:88:3e:5a:2c:bf:d1:ca:
a6:52:29:f5:d8:23:61:4e:43:45:3b:0e:ed:e4:b2:
9c:d4:3e:f2:30:74:3e:a1:e6:4d:48:ec:4a:ca:86:
e8:ca:0c:b0:15:a1:b2:c4:a7:d1:55:ff:5a:ef:0c:
b9:53:c7:62:7e:e9:ee:9d:46:05:2e:65:56:22:c8:
a8:0e:ae:2e:26:1a:36:c7:37:ba:53:58:4e:70:42:
e3:a3:a2:a0:24:9f:6f:9a:12:bf:b6:12:30:a1:c2:
8c:e9:be:0d:d2:90:8c:88:c0:be:18:08:30:98:46:
1f:e3:3e:d7:c8:df:7f:c1:b3:67:8d:8b:7c:ea:f5:
09:78:57:e5:27:b9:3d:6c:19:c6:fb:31:c4:55:4e:
21:62:80:dc:5e:e8:e3:9d:4e:0b:75:be:12:e2:1e:
87:3f:5e:d9:7f:f9:a9:c3:6c:b6:24:99:6f:c7:c9:
89:8e:5f:d4:3a:52:5e:11:c4:17:d4:db:69:f0:f5:
91:a2:d3:24:6d:c8:2b:10:77:dd:04:de:fa:a7:a1:
61:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E7:70:C8:E6:48:87:5B:FE:DA:29:B8:64:C0:31:F7:B0:D3:46:9A
X509v3 Authority Key Identifier:
keyid:29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/AedwyOZIh1v-2im4ZMAx97DTRpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.0.0/19
IPv6:
2a02:4300::/32
Signature Algorithm: sha256WithRSAEncryption
06:91:6c:15:e6:a7:69:7a:6b:7e:c7:db:1c:c7:35:98:d2:37:
ad:df:f7:17:d7:0e:56:b6:a6:5c:5c:24:59:b2:f5:97:1a:d9:
5b:e5:00:73:94:40:05:f8:62:a3:4d:19:1f:f1:71:78:0f:ff:
63:e6:f0:4a:39:09:e5:d6:ff:d7:30:0b:9d:80:d1:8e:cf:fd:
e0:f8:40:34:0e:31:42:c1:81:69:42:17:95:5d:09:cc:dd:d4:
b3:9e:82:6c:fe:da:e3:54:a9:10:ed:a8:aa:4e:74:c4:83:93:
b7:c1:ac:44:8d:06:f8:81:c4:06:17:87:46:f9:a5:c6:0c:6b:
eb:60:c1:bf:29:21:34:f8:6a:f8:63:d8:cb:97:ee:a9:f7:a2:
e0:0d:68:51:44:5e:d8:f9:53:20:7a:83:26:ac:ec:f4:c5:49:
78:a5:42:01:ea:1e:7f:2e:a1:bd:8d:6d:45:93:19:04:7c:ae:
e6:06:a1:4e:e5:da:45:19:b5:2e:64:3a:5e:66:d2:db:31:7f:
79:33:e6:cb:40:ce:a4:29:1d:e3:94:e7:43:70:5c:82:51:a8:
2f:2c:a7:04:ec:fc:a2:d5:9f:d0:90:ef:59:98:2a:aa:fb:ef:
32:3c:74:b8:9e:46:34:23:78:bf:d8:b0:41:1d:70:71:39:72:
74:1e:e3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:17 2025 by rpki-client