Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/2ZWGjOJRjPHh5vUmuBkXmOeyAXA.roa
File: 2ZWGjOJRjPHh5vUmuBkXmOeyAXA.roa (raw, json)
Hash identifier: kLXH6SccoLYnkJO+CuKpGrRpPoXv66yopZLZsS2CgSg=
Subject key identifier: D9:95:86:8C:E2:51:8C:F1:E1:E6:F5:26:B8:19:17:98:E7:B2:01:70
Certificate issuer: /CN=53529924b233ac563c08e0c313e29213fd969669
Certificate serial: 0194266C3A3E59B61FF991874438BFE3C9E1
Authority key identifier: 53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/2ZWGjOJRjPHh5vUmuBkXmOeyAXA.roa
Signing time: Thu 02 Jan 2025 09:50:14 +0000
ROA not before: Thu 02 Jan 2025 09:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5603
IP address blocks: 37.18.224.0/20 maxlen: 24
37.18.224.0/22 maxlen: 24
37.18.228.0/23 maxlen: 23
37.18.230.0/23 maxlen: 23
37.18.232.0/21 maxlen: 21
185.58.180.0/22 maxlen: 24
185.58.180.0/23 maxlen: 23
185.58.182.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:3a:3e:59:b6:1f:f9:91:87:44:38:bf:e3:c9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53529924b233ac563c08e0c313e29213fd969669
Validity
Not Before: Jan 2 09:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d995868ce2518cf1e1e6f526b8191798e7b20170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:54:a0:20:8a:3f:5f:3b:ce:e1:50:0b:ac:e3:
f6:84:e4:18:ba:1c:da:fe:9e:63:77:29:e4:28:79:
12:b9:81:a3:b1:7e:22:e8:a5:63:8a:91:0b:d0:71:
fa:56:7a:b5:14:7a:b4:05:72:00:b1:20:f2:79:1c:
b9:72:d5:5e:d6:6f:fc:73:d7:5d:ea:d0:62:42:9a:
71:d5:44:f5:26:09:e9:8b:df:80:99:c4:74:87:da:
8e:b9:53:23:9b:85:b0:0f:05:50:68:96:bb:7d:22:
7b:62:3b:d9:0d:c2:92:94:7e:00:7d:6c:86:e0:00:
fd:d6:a0:0c:79:8f:4e:f2:47:c4:61:49:99:f3:83:
cf:18:3e:aa:ef:de:79:c0:f1:02:1b:75:bb:e9:60:
73:3b:82:76:c5:00:75:17:03:e6:b0:c4:c7:0b:25:
fa:95:40:3c:8f:51:18:75:f9:e8:e4:97:ac:77:80:
e0:aa:bc:32:c3:56:ce:3f:2f:47:ed:26:2a:14:b2:
a3:48:8b:e3:49:1b:92:f3:26:bc:48:a7:6e:ec:f7:
ea:d5:6c:d1:9f:4e:24:61:b5:e1:8f:ad:01:03:4f:
cd:fd:6e:02:97:a8:f2:07:d7:36:21:b0:43:a1:08:
3f:6c:5b:0b:26:16:b7:0d:48:78:28:ac:37:67:68:
ce:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:95:86:8C:E2:51:8C:F1:E1:E6:F5:26:B8:19:17:98:E7:B2:01:70
X509v3 Authority Key Identifier:
keyid:53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/2ZWGjOJRjPHh5vUmuBkXmOeyAXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.224.0/20
185.58.180.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:79:26:2d:b9:ad:4f:8e:1c:d9:67:13:4e:c5:19:df:ed:f2:
59:ca:db:d0:ef:31:04:36:79:08:fa:1d:a7:57:b8:a8:98:6d:
83:d0:b7:9a:20:3d:86:06:77:d8:00:57:48:a5:c4:a6:58:35:
55:5c:2e:d9:62:f4:53:e5:b2:7b:0f:3e:0f:45:77:ac:b0:f4:
3d:e0:82:01:e1:62:17:29:6e:8f:fe:2b:58:09:fd:67:2b:95:
78:b1:43:29:5c:67:59:fd:a0:f1:87:75:63:a1:68:bb:47:4a:
b5:bd:b0:9c:35:4c:ec:1b:ea:4e:99:f8:d5:31:d2:b3:a6:05:
74:d9:20:d5:d7:2c:7f:a0:9d:09:ec:6c:e7:9d:a4:9e:58:2e:
5a:07:4e:ed:14:72:18:65:c2:b4:c1:52:7c:77:2e:a9:48:c4:
c4:66:8d:04:03:97:94:af:3e:4d:b4:e3:15:0d:a0:fc:9f:61:
0f:df:36:93:1c:c8:01:fb:d3:ea:e4:28:43:d2:04:66:27:6b:
75:77:f2:1e:6f:8f:cb:a8:09:ad:ef:5d:94:6a:f0:e1:c0:8c:
c9:d0:29:3c:a6:3c:6b:ab:06:98:32:84:a8:74:10:f0:86:3e:
74:9d:02:9c:4c:ad:08:29:fe:b0:af:97:65:42:a9:e5:24:63:
0a:89:1f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:41:15 2025 by rpki-client