Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/fZx-mDB13JnuV_-VzM2j7qkuqi0.roa
File: fZx-mDB13JnuV_-VzM2j7qkuqi0.roa (raw, json)
Hash identifier: zv9S//eX11qAMytqBqLEiGaYvvDY8kAtaLQl7dqZVZU=
Subject key identifier: 7D:9C:7E:98:30:75:DC:99:EE:57:FF:95:CC:CD:A3:EE:A9:2E:AA:2D
Certificate issuer: /CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
Certificate serial: 0194228D12A47C0F55D5D803A4222DD5FD8C
Authority key identifier: AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/fZx-mDB13JnuV_-VzM2j7qkuqi0.roa
Signing time: Wed 01 Jan 2025 15:47:38 +0000
ROA not before: Wed 01 Jan 2025 15:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198508
IP address blocks: 37.75.224.0/21 maxlen: 21
185.168.4.0/22 maxlen: 22
185.168.4.0/24 maxlen: 24
185.168.5.0/24 maxlen: 24
185.168.6.0/24 maxlen: 24
185.168.7.0/24 maxlen: 24
2a00:8440::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:12:a4:7c:0f:55:d5:d8:03:a4:22:2d:d5:fd:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
Validity
Not Before: Jan 1 15:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d9c7e983075dc99ee57ff95cccda3eea92eaa2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:76:48:94:9d:32:b5:4e:fe:0f:31:2e:e1:af:
83:26:09:dd:6d:e1:74:52:96:ba:21:4c:c8:96:a7:
20:52:0b:be:38:45:5f:0a:be:3a:f5:a9:c5:22:1e:
5e:ac:93:5e:c7:12:3b:37:4f:d9:c9:ed:54:bd:99:
fc:03:1b:68:4d:3d:b9:7e:3c:ab:78:50:ca:a0:a2:
0c:b7:6a:cb:d0:e4:a0:39:64:59:ce:e9:95:cc:98:
6e:85:b9:f6:7a:9d:e9:9e:85:51:cc:91:06:5e:62:
d0:1f:ba:0f:2e:eb:90:fb:a0:38:60:1b:04:ff:64:
0e:51:c2:a0:ed:55:32:ca:b7:f9:d1:9e:a7:55:4e:
9e:74:4d:f7:95:1a:67:ed:28:53:72:ae:4e:3e:92:
37:63:5b:55:d1:9f:75:92:dd:da:9c:f1:0e:f2:c0:
f3:27:d9:cb:f9:1b:ba:65:34:dc:71:98:a3:29:88:
4b:b7:61:45:5e:df:b0:a9:0f:4e:72:cb:89:3c:17:
7d:a2:35:80:ec:84:e6:42:35:27:10:a2:df:c3:1a:
43:e9:b1:73:9c:99:78:d6:2a:4c:98:c2:75:df:75:
0d:73:dd:0a:a9:0e:3a:6f:80:49:3d:e8:aa:75:a8:
95:4e:3d:a9:04:d9:6e:c4:fd:5a:2d:3b:ad:b1:2f:
72:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9C:7E:98:30:75:DC:99:EE:57:FF:95:CC:CD:A3:EE:A9:2E:AA:2D
X509v3 Authority Key Identifier:
keyid:AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/fZx-mDB13JnuV_-VzM2j7qkuqi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.75.224.0/21
185.168.4.0/22
IPv6:
2a00:8440::/32
Signature Algorithm: sha256WithRSAEncryption
90:98:c1:1a:09:48:d2:17:99:dc:01:db:04:26:45:1b:fd:ed:
71:37:42:d3:66:21:76:52:09:45:fe:84:f2:cd:2f:28:0f:ea:
73:c8:71:00:49:97:58:cc:88:12:be:bb:bd:ee:16:2b:61:12:
25:6a:73:b6:20:13:3b:25:e5:05:c5:c2:19:6b:9f:8c:a2:80:
a0:32:26:e7:34:04:7d:0f:8c:be:1d:7e:e5:f7:e3:ec:17:88:
89:58:80:87:3b:a2:b9:b8:bf:0f:75:48:a0:5f:ce:92:7d:c2:
6e:c7:9f:56:91:51:b4:2d:d7:1d:23:e3:6a:a3:e5:bb:f0:2e:
87:9c:99:10:9b:c5:8f:b9:68:f1:88:7d:3f:b2:b9:eb:59:77:
b9:c6:65:41:74:bc:42:d6:b7:8c:c0:ee:e3:0a:76:91:30:ad:
c8:8a:7e:60:2c:60:3c:ec:bc:70:68:77:bc:09:ef:e7:92:ee:
5a:eb:df:53:da:6e:7f:c9:fc:c9:8c:28:1e:65:7e:12:6c:33:
fe:1f:06:55:28:41:bf:ed:51:f3:15:bf:06:2c:54:5a:c7:40:
e2:cb:b8:9d:f8:7e:c2:02:27:99:1b:d7:6f:22:9e:7d:99:69:
29:80:e5:06:20:4e:3a:46:2e:f6:0e:0b:22:0a:63:6f:8d:bc:
95:44:d6:d5
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQijRKkfA9V1dgDpCIt1f2MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhN2I2MTM3ZjVhZjNjMjJjODVhMTkwOGQ0MGIyOTQxZWUy
YzA2ZjQwHhcNMjUwMTAxMTU0NzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDljN2U5ODMwNzVkYzk5ZWU1N2ZmOTVjY2NkYTNlZWE5MmVhYTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHZIlJ0ytU7+DzEu4a+DJgndbeF0
Upa6IUzIlqcgUgu+OEVfCr469anFIh5erJNexxI7N0/Zye1UvZn8AxtoTT25fjyr
eFDKoKIMt2rL0OSgOWRZzumVzJhuhbn2ep3pnoVRzJEGXmLQH7oPLuuQ+6A4YBsE
/2QOUcKg7VUyyrf50Z6nVU6edE33lRpn7ShTcq5OPpI3Y1tV0Z91kt3anPEO8sDz
J9nL+Ru6ZTTccZijKYhLt2FFXt+wqQ9OcsuJPBd9ojWA7ITmQjUnEKLfwxpD6bFz
nJl41ipMmMJ133UNc90KqQ46b4BJPeiqdaiVTj2pBNluxP1aLTutsS9yYwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFH2cfpgwddyZ7lf/lczNo+6pLqotMB8GA1UdIwQY
MBaAFKp7YTf1rzwiyFoZCNQLKUHuLAb0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW50aE5fV3ZQQ0xJV2hrSTFBc3BRZTRzQnZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My81ZTA2ZmEtMzdmOS00YTFjLTgxMWEt
ZDZhMzA1Y2JmNDZjLzEvZlp4LW1EQjEzSm51Vl8tVnpNMmo3cWt1cWkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My81ZTA2ZmEtMzdmOS00YTFjLTgxMWEtZDZhMzA1Y2JmNDZj
LzEvcW50aE5fV3ZQQ0xJV2hrSTFBc3BRZTRzQnZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDJUvgAwQC
uagEMA0EAgACMAcDBQAqAIRAMA0GCSqGSIb3DQEBCwUAA4IBAQCQmMEaCUjSF5nc
AdsEJkUb/e1xN0LTZiF2UglF/oTyzS8oD+pzyHEASZdYzIgSvru97hYrYRIlanO2
IBM7JeUFxcIZa5+MooCgMibnNAR9D4y+HX7l9+PsF4iJWICHO6K5uL8PdUigX86S
fcJux59WkVG0LdcdI+Nqo+W78C6HnJkQm8WPuWjxiH0/srnrWXe5xmVBdLxC1reM
wO7jCnaRMK3Iin5gLGA87LxwaHe8Ce/nku5a699T2m5/yfzJjCgeZX4SbDP+HwZV
KEG/7VHzFb8GLFRax0Diy7id+H7CAieZG9dvIp59mWkpgOUGIE46Ri72DgsiCmNv
jbyVRNbV
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:24:20 2025 by rpki-client