Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/nTRkDpYpiL-ve1IY46M2TqndeFk.roa
File: nTRkDpYpiL-ve1IY46M2TqndeFk.roa (raw, json)
Hash identifier: SEjOrg3ZcX1knDKPyX19VTb93fK3PLiRwqrksI18Hm8=
Subject key identifier: 9D:34:64:0E:96:29:88:BF:AF:7B:52:18:E3:A3:36:4E:A9:DD:78:59
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01941FFA6F6419241C38A5DE86E906DCFEC0
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/nTRkDpYpiL-ve1IY46M2TqndeFk.roa
Signing time: Wed 01 Jan 2025 03:48:13 +0000
ROA not before: Wed 01 Jan 2025 03:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216344
IP address blocks: 37.32.43.0/24 maxlen: 24
37.32.46.0/24 maxlen: 24
185.212.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:6f:64:19:24:1c:38:a5:de:86:e9:06:dc:fe:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 1 03:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d34640e962988bfaf7b5218e3a3364ea9dd7859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1e:e9:86:c0:87:12:82:ec:48:b8:8f:4b:2e:
5d:25:7a:98:8d:04:9b:96:50:8f:26:67:d6:1a:f0:
0c:f0:5f:d3:c7:06:d2:47:92:e9:0d:ef:e1:9e:0e:
bf:25:34:f2:aa:5c:88:fe:17:88:59:7d:1c:e1:4f:
b9:8f:97:43:48:64:73:72:d5:09:79:f1:8b:2b:85:
17:55:51:fb:c1:bf:af:8e:99:ab:dd:9b:12:e4:65:
c6:26:c0:57:14:1a:97:f7:73:da:08:f1:ac:46:0a:
16:49:d0:a7:86:b6:50:24:f7:71:f0:51:ab:8c:d6:
f5:95:18:f1:19:89:82:dd:b7:75:dd:d4:b4:f0:18:
bc:23:06:ac:63:fd:38:39:39:e4:c5:26:80:2d:77:
3d:64:29:94:86:1b:9c:9c:4e:b1:af:38:ef:0b:d8:
1b:7d:ba:f1:d9:da:ce:0f:47:2b:e3:f5:c5:56:42:
89:d4:04:89:b1:ba:91:b2:66:aa:c9:a1:04:d2:04:
5c:61:82:5f:2e:3f:e9:7c:b6:b0:0a:7e:d1:06:21:
18:e2:cc:4f:80:50:49:4a:eb:08:ee:a3:87:72:43:
aa:6c:c2:84:6a:27:17:76:e6:78:39:2b:3c:2c:16:
2e:2d:ac:db:ba:3d:69:ed:9a:62:62:de:7c:7c:38:
34:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:34:64:0E:96:29:88:BF:AF:7B:52:18:E3:A3:36:4E:A9:DD:78:59
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/nTRkDpYpiL-ve1IY46M2TqndeFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.43.0/24
37.32.46.0/24
185.212.51.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:f5:6c:77:74:b1:31:89:eb:41:4b:cb:03:fd:3f:2e:80:d5:
39:8a:bb:36:1f:b3:31:d3:0e:af:66:5a:7a:d4:09:8a:48:9c:
63:4b:d9:6d:67:60:6d:34:28:dd:9b:85:06:e8:27:07:ca:24:
0e:81:c7:20:54:17:f7:ba:e1:13:84:7b:84:b8:3d:a1:2e:2b:
63:ac:ce:06:a0:c4:5a:a5:20:b4:06:b8:d5:a1:bf:87:5b:6e:
f8:35:3c:28:3b:a7:f7:5d:e3:73:2b:1b:11:c9:d8:44:3c:53:
7f:85:ce:cc:69:00:d6:de:3c:e2:0a:20:ac:c1:67:b0:92:8a:
13:0f:6a:2b:7a:c0:32:e0:8b:d8:13:ec:6f:4a:ad:f0:06:38:
a4:48:0e:ca:53:46:d4:23:98:2f:e5:91:b0:e0:d7:b2:70:34:
9d:03:97:58:4a:6d:ee:0c:9b:d6:ff:a6:46:63:0b:27:d5:ad:
34:fa:6b:db:a0:24:15:23:cd:bc:6c:22:14:c0:a6:e2:dc:a5:
a1:e9:07:98:13:59:17:f5:c1:a1:d0:12:0e:d6:77:68:7e:7a:
f3:7a:7c:af:12:2f:5b:02:ff:a8:c2:e8:fe:36:e6:4b:b8:17:
51:e6:e7:b1:b5:7e:60:38:be:ad:a7:e7:0d:33:15:6e:c3:d4:
2b:b0:70:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:19:10 2025 by rpki-client