Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/7ckiXqFCsl9Ii0LOr5UmFiqADBU.roa
File: 7ckiXqFCsl9Ii0LOr5UmFiqADBU.roa (raw, json)
Hash identifier: 9bGwX0kwTRRgIdjNNDlgMuEQgvhNB3ZWI22IbqLrXvk=
Subject key identifier: ED:C9:22:5E:A1:42:B2:5F:48:8B:42:CE:AF:95:26:16:2A:80:0C:15
Certificate issuer: /CN=15628f9fdaab8b85494bc3388091a122b0bba5c8
Certificate serial: 0194258E3037CD48D00611E2E3785F2CA20E
Authority key identifier: 15:62:8F:9F:DA:AB:8B:85:49:4B:C3:38:80:91:A1:22:B0:BB:A5:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/7ckiXqFCsl9Ii0LOr5UmFiqADBU.roa
Signing time: Thu 02 Jan 2025 05:47:42 +0000
ROA not before: Thu 02 Jan 2025 05:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202964
IP address blocks: 37.208.89.0/24 maxlen: 24
37.208.90.0/24 maxlen: 24
37.208.91.0/24 maxlen: 24
37.208.92.0/24 maxlen: 24
37.208.93.0/24 maxlen: 24
37.208.94.0/24 maxlen: 24
37.208.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:30:37:cd:48:d0:06:11:e2:e3:78:5f:2c:a2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15628f9fdaab8b85494bc3388091a122b0bba5c8
Validity
Not Before: Jan 2 05:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edc9225ea142b25f488b42ceaf9526162a800c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:68:70:a7:98:f6:ae:aa:80:07:ce:f6:0d:fe:
4d:a7:af:d2:d6:87:c1:3b:65:26:fb:79:32:a0:2e:
bd:bf:5b:5e:ff:5c:cf:a6:21:12:53:9d:37:c8:f0:
fc:4b:c9:1d:c8:4f:12:dc:c6:23:16:1e:f7:97:0a:
b6:a4:f9:74:1e:97:dc:4f:30:54:68:db:fd:b8:98:
6d:4b:65:45:13:eb:cc:f3:b5:46:16:cb:dc:e5:63:
14:22:23:dc:4d:81:54:7c:a5:d8:22:1c:29:83:99:
ae:6b:53:f8:f8:5c:80:db:8e:24:82:46:59:a3:ab:
02:f4:a1:b6:29:99:68:49:bc:fa:b1:6f:0d:34:19:
16:07:44:72:c7:7e:7a:79:2a:76:39:fe:29:f1:51:
10:07:1d:83:2e:aa:40:09:e5:d9:e8:b1:d2:a3:38:
37:5c:4d:1c:25:3d:0e:c2:4a:32:20:ea:e4:be:76:
95:4c:6b:73:b5:ed:37:88:c5:48:c6:5f:a1:d6:5d:
24:5b:af:ca:d5:85:2f:be:a1:90:41:66:fa:4f:35:
e8:4c:b3:07:ba:e8:55:db:8e:bb:e8:47:be:a9:98:
85:77:d2:04:9b:ae:64:ce:f8:1b:7d:be:0d:af:42:
a9:ea:48:6c:89:ae:06:1d:3b:64:9b:25:18:b3:36:
e3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C9:22:5E:A1:42:B2:5F:48:8B:42:CE:AF:95:26:16:2A:80:0C:15
X509v3 Authority Key Identifier:
keyid:15:62:8F:9F:DA:AB:8B:85:49:4B:C3:38:80:91:A1:22:B0:BB:A5:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/7ckiXqFCsl9Ii0LOr5UmFiqADBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.208.89.0-37.208.95.255
Signature Algorithm: sha256WithRSAEncryption
2e:9f:de:94:32:08:46:2b:4a:cd:45:4a:18:12:1a:ce:0a:75:
0d:ea:11:ca:7b:c0:3b:46:2a:3b:d3:f5:4e:e9:ef:6c:22:9c:
16:16:b3:a0:ac:b1:fc:f6:19:a2:04:93:7e:ff:94:43:b2:d4:
e2:2f:46:9b:38:9f:d9:8c:5a:bd:5e:a8:3a:66:ff:ac:02:1c:
f1:34:f1:c2:32:d4:cf:28:ab:59:ba:21:5e:67:76:e1:c0:d2:
f9:fd:f5:c0:17:5d:5e:4d:4c:9c:1f:f3:38:3e:ff:86:94:aa:
41:eb:89:27:ef:cf:bf:b7:5d:4f:98:49:5d:d5:09:3e:0d:13:
b5:06:28:d6:7f:15:da:b3:ef:ff:8a:d5:84:6b:a8:7b:19:dd:
41:9b:29:ee:77:3e:60:a2:70:31:99:0b:01:10:97:0c:a7:bc:
dd:8c:3e:af:82:65:08:13:af:6b:f6:be:9d:40:b5:08:a9:61:
46:02:2a:f0:1e:5f:28:ea:3e:fa:74:17:52:6a:f3:da:fb:60:
f5:58:e9:ea:75:b6:25:13:34:3e:56:9f:5b:5d:70:15:dc:4c:
96:60:ad:a4:2c:37:f3:8e:8e:9a:16:1e:0e:5f:21:3e:09:f6:
df:3c:be:3e:1c:6e:7d:7e:fb:74:cc:1a:c8:5a:84:e9:30:0e:
11:0e:53:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:55:08 2025 by rpki-client