Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/37QCkG1k9gzLrRMVOTELOapS-4Y.roa
File: 37QCkG1k9gzLrRMVOTELOapS-4Y.roa (raw, json)
Hash identifier: fObIS1yLlqyANULO1cGplwcB5m0pXnjdZmigUly+6NA=
Subject key identifier: DF:B4:02:90:6D:64:F6:0C:CB:AD:13:15:39:31:0B:39:AA:52:FB:86
Certificate issuer: /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Certificate serial: 0194221F6CBCB4790D54BD7F4BC3C885A003
Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/37QCkG1k9gzLrRMVOTELOapS-4Y.roa
Signing time: Wed 01 Jan 2025 13:47:52 +0000
ROA not before: Wed 01 Jan 2025 13:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211179
IP address blocks: 185.55.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:6c:bc:b4:79:0d:54:bd:7f:4b:c3:c8:85:a0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Validity
Not Before: Jan 1 13:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfb402906d64f60ccbad131539310b39aa52fb86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c7:77:c8:e3:a9:41:3f:e6:a9:45:7a:ca:95:
a8:cf:32:3c:2e:2a:c3:5f:59:84:e4:7e:0b:fd:f9:
82:b7:31:fa:e3:6f:4f:ca:00:3d:c5:af:5d:3f:55:
e2:60:b2:9d:98:74:aa:f6:ba:58:d3:db:16:a9:ae:
b3:b0:92:21:a6:b9:99:c0:e3:d9:6a:d7:a4:5c:36:
f1:25:8e:5a:b6:c5:81:e6:51:dd:2e:39:bd:0c:1d:
10:1f:cc:f8:7a:43:74:c2:ab:91:eb:15:e0:6c:f8:
cc:77:79:2c:44:04:25:43:75:67:71:b6:6b:d1:6c:
4d:98:7c:98:d5:39:5b:39:f4:c1:ca:7c:fb:d5:a0:
5b:79:7b:14:1e:40:b4:92:94:f7:5d:ee:c1:35:0a:
40:04:e2:1b:d9:d3:e2:4b:0e:7f:56:55:83:30:0a:
36:ac:83:df:79:92:71:e0:f2:cf:aa:3b:f3:ce:ed:
32:8f:36:a6:e5:59:e2:88:48:60:15:70:b9:70:bc:
d9:e4:db:d6:36:b0:7e:3b:72:e6:ba:28:fa:2c:6c:
77:05:c0:32:e4:c2:e6:bd:62:1d:0d:1a:81:c7:a9:
92:47:f1:f5:f7:41:21:fd:63:62:db:6d:67:ee:9d:
35:6e:63:ae:b0:8a:27:8c:30:b6:25:04:3b:d3:f9:
86:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B4:02:90:6D:64:F6:0C:CB:AD:13:15:39:31:0B:39:AA:52:FB:86
X509v3 Authority Key Identifier:
keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/37QCkG1k9gzLrRMVOTELOapS-4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.240.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:a2:83:6e:cf:43:98:54:69:6e:4c:ef:18:39:da:f9:56:88:
14:b5:66:b1:21:05:4a:61:26:5a:88:f9:4d:fd:32:7b:30:69:
ee:0e:cb:cb:8e:6c:5d:47:8d:79:86:1a:06:3a:7f:67:df:15:
ed:59:9f:7c:0f:71:b1:04:8f:43:fe:23:66:8d:57:fb:09:d8:
62:58:a3:68:37:ad:b4:14:7d:5b:1f:2e:f4:2f:c8:3d:53:45:
22:f1:3c:b5:9f:70:54:94:03:2e:5f:15:24:c8:4f:db:a8:ec:
50:fe:b7:76:80:55:48:3e:8c:5a:49:d8:de:ed:6d:7e:07:2a:
e1:1b:c5:0f:8b:59:7a:09:e5:64:1d:2e:2b:eb:50:d0:08:7a:
e8:02:87:c7:05:fd:33:0c:ff:1c:c4:f9:6c:b3:5a:12:a8:63:
bd:b2:07:26:6d:95:ba:be:e5:38:ed:1e:78:17:92:74:52:e1:
e0:67:26:fe:46:4c:bf:e3:2a:e7:63:a2:84:cd:fa:6d:a9:56:
4d:79:1b:e0:ac:d8:34:28:4e:03:2a:f2:8a:b6:ee:4d:c2:7e:
cc:f2:bb:5a:30:76:58:5e:59:86:bf:7e:1b:a9:9c:49:97:99:
f1:76:f0:f4:55:54:fb:6b:19:fc:64:17:75:95:44:13:d5:9f:
03:2d:93:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:20:45 2025 by rpki-client