Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/5xcSPqM5FqBggD3xhK_H_WBIj8c.roa
File: 5xcSPqM5FqBggD3xhK_H_WBIj8c.roa (raw, json)
Hash identifier: 6UaEvDEdIHAI+VC/wqQ4jP8F3NZ9weH+TS5AN/LWzwY=
Subject key identifier: E7:17:12:3E:A3:39:16:A0:60:80:3D:F1:84:AF:C7:FD:60:48:8F:C7
Certificate issuer: /CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a
Certificate serial: 01942445093BAFBEC8A21F89F298A7728092
Authority key identifier: D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/5xcSPqM5FqBggD3xhK_H_WBIj8c.roa
Signing time: Wed 01 Jan 2025 23:48:11 +0000
ROA not before: Wed 01 Jan 2025 23:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200023
IP address blocks: 37.140.252.0/24 maxlen: 24
185.200.132.0/22 maxlen: 22
194.61.128.0/22 maxlen: 22
194.61.128.0/24 maxlen: 24
194.61.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:09:3b:af:be:c8:a2:1f:89:f2:98:a7:72:80:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a
Validity
Not Before: Jan 1 23:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e717123ea33916a060803df184afc7fd60488fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e7:f5:1f:02:3e:7b:dd:2c:58:04:41:b1:57:
e5:cc:5b:48:a8:3a:1c:a4:1d:78:2e:e8:5b:6d:05:
91:09:e6:7f:4c:6a:8f:97:0a:f9:33:bd:77:d8:f1:
ed:aa:5d:0f:7b:90:2f:81:ba:8d:21:33:19:57:3f:
2c:f8:2d:83:7b:8b:23:8a:21:db:98:39:cd:e7:4c:
af:17:97:af:24:8b:65:e8:74:41:74:06:d9:5f:6d:
7b:90:37:c6:2e:48:34:67:dd:1c:3d:e6:0f:37:04:
35:07:b5:c1:d3:72:5c:f8:f9:f8:ba:d4:30:10:a2:
a5:42:aa:48:d7:f2:ec:58:5f:41:79:9a:1e:63:6c:
0d:9e:d9:6a:c1:1d:69:a9:da:87:1d:27:d5:f8:bf:
cf:12:03:fd:d9:45:d5:10:9b:a0:7b:15:46:e0:3e:
fe:30:92:3e:93:cd:fe:0c:b3:2e:87:7e:21:56:d1:
dc:49:e1:ad:34:bf:c4:e2:cb:15:79:39:c2:83:63:
35:d7:64:c2:c9:2f:66:88:4d:e7:a9:a4:c6:b4:3c:
7e:fa:13:70:f6:df:0e:f0:7f:ae:d0:77:c6:75:41:
52:7d:4c:ea:31:7c:63:db:3d:ef:5a:9f:36:3c:d3:
6e:6d:69:ae:e8:cc:79:6d:3f:9f:05:8c:57:a9:ac:
65:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:17:12:3E:A3:39:16:A0:60:80:3D:F1:84:AF:C7:FD:60:48:8F:C7
X509v3 Authority Key Identifier:
keyid:D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/5xcSPqM5FqBggD3xhK_H_WBIj8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.252.0/24
185.200.132.0/22
194.61.128.0/22
Signature Algorithm: sha256WithRSAEncryption
c7:8e:0f:72:f7:5f:31:9d:3d:2f:bf:3c:37:cb:82:d3:ed:db:
0e:9d:47:e8:b0:85:7f:4a:c2:b4:2e:13:5d:47:d1:ed:38:e3:
66:a1:b4:5e:64:43:90:a1:a4:be:23:b7:4a:39:ee:27:87:fe:
27:8f:39:dc:fc:4c:41:b1:b8:4a:37:62:ce:d3:0d:e1:d2:7e:
14:f0:c8:39:12:d0:77:c6:25:37:dc:7d:0b:d1:90:9c:d2:b2:
57:b6:2c:d9:09:be:93:69:dc:98:79:13:60:e3:11:7d:19:8e:
0f:9a:f7:d4:e8:8d:8f:a7:6b:1d:26:6e:62:ab:4a:63:a9:88:
8e:88:ac:9b:25:eb:68:a1:15:c5:d5:f2:38:99:02:0f:01:a9:
b4:d0:f1:59:f6:a0:03:4b:0b:d3:1c:e0:2e:6c:f7:19:d0:7f:
f7:f4:f8:44:c0:80:c3:c3:8f:da:4e:8b:c1:6e:2e:48:59:cc:
b8:e1:39:e2:54:3e:9c:4f:52:9e:c8:2e:20:37:d3:1f:de:0e:
40:00:0c:71:70:03:4a:5b:1a:d7:f3:34:5a:fa:06:3f:69:08:
8c:bd:cd:24:22:ac:39:0d:a9:de:6c:78:ea:e7:f3:ab:37:88:
9a:43:14:20:25:d9:75:24:3e:54:78:95:39:6d:40:78:c8:e8:
b3:cd:02:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:34:46 2025 by rpki-client