Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/zQYGnUVB4bBy-t9A3BsXP2JPTI8.roa
File: zQYGnUVB4bBy-t9A3BsXP2JPTI8.roa (raw, json)
Hash identifier: yYhiUqDeYjOIAS1CW8QCSgxrWRWrSjdPUM0N7RvDxVg=
Subject key identifier: CD:06:06:9D:45:41:E1:B0:72:FA:DF:40:DC:1B:17:3F:62:4F:4C:8F
Certificate issuer: /CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Certificate serial: 019423694EF641D0ABAFF3A014FCDA86BCD2
Authority key identifier: 4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/zQYGnUVB4bBy-t9A3BsXP2JPTI8.roa
Signing time: Wed 01 Jan 2025 19:48:11 +0000
ROA not before: Wed 01 Jan 2025 19:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39305
IP address blocks: 37.221.84.0/24 maxlen: 24
37.221.85.0/24 maxlen: 24
37.221.86.0/24 maxlen: 24
2a09:f200::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:4e:f6:41:d0:ab:af:f3:a0:14:fc:da:86:bc:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Validity
Not Before: Jan 1 19:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd06069d4541e1b072fadf40dc1b173f624f4c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fc:f8:fa:b1:27:a9:85:27:14:41:93:ec:b9:
01:a1:5c:da:fa:be:a3:ea:ba:db:e9:e4:94:fe:ce:
7e:f2:c3:cd:3c:bd:82:db:03:ac:46:7a:7c:fe:c2:
da:ad:79:f4:a4:74:0e:ff:45:54:5f:60:f4:9e:16:
ae:87:25:72:a8:61:9d:43:93:90:96:31:22:30:da:
4c:17:71:73:54:67:78:d6:17:1a:59:7b:85:c7:89:
d1:8a:f8:11:11:6e:45:05:29:5a:45:e5:92:ea:3a:
6e:09:d7:39:88:22:99:67:1a:d7:db:6d:ea:73:bf:
d1:ea:65:09:35:60:25:49:48:41:3c:ab:5b:80:72:
03:48:7e:14:9f:c3:49:85:7c:ab:5a:c4:20:74:41:
6f:e0:42:6d:11:18:dd:31:1d:76:e6:8d:03:bb:59:
a7:34:9f:b4:b5:45:53:6f:b7:2a:4a:4f:a0:4c:f4:
33:14:fe:5a:bd:5e:f0:d5:bd:c0:54:63:50:0b:bd:
1e:40:82:8b:7c:0f:a8:61:e1:6a:d9:c3:42:98:38:
01:63:63:f8:38:27:fb:d3:06:38:fb:b3:f9:e3:24:
e0:12:7a:2e:7d:ac:7c:ba:07:c3:2c:40:51:c9:fa:
0d:e9:f3:8c:d6:d4:95:af:30:42:21:cd:fa:8a:50:
e2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:06:06:9D:45:41:E1:B0:72:FA:DF:40:DC:1B:17:3F:62:4F:4C:8F
X509v3 Authority Key Identifier:
keyid:4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/zQYGnUVB4bBy-t9A3BsXP2JPTI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.84.0-37.221.86.255
IPv6:
2a09:f200::/29
Signature Algorithm: sha256WithRSAEncryption
78:62:a3:8c:c1:72:7f:1c:84:39:de:81:81:4d:39:8e:83:1c:
f6:71:06:6e:dc:5f:9a:d5:fd:35:3d:f8:d3:e1:03:92:04:25:
6b:4a:be:26:ce:1b:7d:0a:76:e9:5b:21:69:fa:4a:e3:fb:a4:
70:18:fb:2c:cb:a6:e1:1d:8d:33:5a:0e:b4:96:c3:d6:2d:05:
bb:21:8a:ee:52:80:3c:bf:c6:35:ac:41:2e:14:e1:43:4f:a2:
eb:69:52:46:f1:c7:35:92:45:dc:54:27:8a:f6:45:f0:17:86:
e8:57:22:7d:bf:f1:86:fa:e6:dc:e6:b4:95:b9:b9:bd:56:cb:
99:25:19:bb:fb:91:b7:c9:f7:13:a5:46:a3:6d:1c:fa:e4:c9:
09:1a:f3:2d:48:ee:3f:0e:c1:a1:85:77:59:02:5b:74:dd:3d:
e2:7f:75:87:1d:d9:1d:26:56:ce:0e:57:93:7e:fd:8e:a1:4d:
c8:71:ed:ae:6b:cb:91:86:9a:37:91:23:04:83:f3:01:ab:ec:
b2:42:6e:00:b6:21:ac:37:3c:54:9c:81:08:e9:ed:d7:b0:1a:
97:fa:32:1c:d2:53:18:8d:49:3a:60:79:90:11:c5:e2:dd:c3:
95:c8:4b:d8:ac:83:09:b8:c6:2c:5a:7d:73:93:86:cc:7f:02:
09:e4:14:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:08:06 2025 by rpki-client