Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/1pAz37RdEVhV1aan_PgdCjpve0Y.roa
File: 1pAz37RdEVhV1aan_PgdCjpve0Y.roa (raw, json)
Hash identifier: rQhxnMjP2xDxwks6donEkbxULPX4bj4CPzRtjrPqVFI=
Subject key identifier: D6:90:33:DF:B4:5D:11:58:55:D5:A6:A7:FC:F8:1D:0A:3A:6F:7B:46
Certificate issuer: /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Certificate serial: 019427481F63CACA11906076B306B7290D23
Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/1pAz37RdEVhV1aan_PgdCjpve0Y.roa
Signing time: Thu 02 Jan 2025 13:50:25 +0000
ROA not before: Thu 02 Jan 2025 13:50:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57675
IP address blocks: 37.32.64.0/24 maxlen: 24
37.32.65.0/24 maxlen: 24
37.32.66.0/24 maxlen: 24
37.32.67.0/24 maxlen: 24
37.32.68.0/24 maxlen: 24
37.32.69.0/24 maxlen: 24
37.32.70.0/24 maxlen: 24
37.32.71.0/24 maxlen: 24
37.32.73.0/24 maxlen: 24
37.32.76.0/24 maxlen: 24
185.129.92.0/24 maxlen: 24
185.129.93.0/24 maxlen: 24
185.129.94.0/24 maxlen: 24
185.129.95.0/24 maxlen: 24
2a0f:1300::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:1f:63:ca:ca:11:90:60:76:b3:06:b7:29:0d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Validity
Not Before: Jan 2 13:50:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d69033dfb45d115855d5a6a7fcf81d0a3a6f7b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:14:8c:93:e4:14:ed:3f:f6:61:9b:ba:3b:57:
f3:9f:4c:dd:8b:ea:ad:5e:03:74:d7:36:8a:d5:4c:
be:d8:1b:e6:3f:f7:03:1d:73:3f:a3:78:d3:37:75:
a4:f4:5f:ae:8e:fa:08:32:8e:20:76:f5:7a:a7:fa:
17:c7:dd:b5:d0:5e:d8:ae:20:03:ea:e4:59:4d:40:
8b:ce:70:f5:2f:03:48:07:db:19:75:69:70:28:bb:
ab:04:d8:02:df:ce:41:4b:dc:ce:50:65:ef:a5:7d:
04:b2:6c:75:6b:48:69:2b:af:f7:d5:f4:47:6a:e1:
ba:9f:ac:42:ab:24:e6:f6:e4:bf:ab:f3:c8:6b:0e:
4f:43:b2:db:6f:67:0a:a4:33:91:cd:f1:62:7b:e3:
9c:9b:57:26:18:1f:98:13:db:6b:a9:80:27:dd:06:
92:5b:8c:09:3c:4c:d1:6e:62:c8:51:54:34:a2:87:
a1:c8:e1:52:0b:34:77:5e:eb:a0:03:ce:d2:fb:b0:
d9:f7:c9:8a:d7:fc:89:23:b2:6e:e9:57:b1:13:6e:
e4:4a:aa:f6:94:89:7b:14:16:3e:04:38:57:e9:f4:
c4:9c:e4:15:c5:7f:8c:d9:27:24:78:80:8f:6f:34:
0f:99:4a:d7:31:00:d6:81:dd:d8:e8:01:46:2f:7f:
f8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:90:33:DF:B4:5D:11:58:55:D5:A6:A7:FC:F8:1D:0A:3A:6F:7B:46
X509v3 Authority Key Identifier:
keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/1pAz37RdEVhV1aan_PgdCjpve0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.64.0/21
37.32.73.0/24
37.32.76.0/24
185.129.92.0/22
IPv6:
2a0f:1300::/29
Signature Algorithm: sha256WithRSAEncryption
4c:d0:3a:fc:be:a9:ed:e8:a6:3e:91:14:83:62:dd:13:c1:9e:
0c:2e:34:b4:35:0e:6a:25:77:63:cf:21:11:12:80:60:28:48:
35:7f:e9:27:d3:01:a4:cd:f7:fb:63:7c:b5:f3:35:89:76:e7:
df:fa:27:77:81:63:91:6e:39:08:22:f4:67:22:86:6d:1e:ab:
d2:26:3c:3f:22:2a:00:73:d0:4c:40:03:b9:52:7f:7d:44:b5:
62:e4:8d:31:64:c2:1b:8a:56:5c:91:93:67:8e:49:12:57:a7:
33:c2:6f:19:36:bd:2f:cd:12:79:b2:06:30:a1:27:5d:2f:ab:
41:d3:61:d9:fd:df:1f:14:20:bb:c8:d6:93:c3:8c:db:c5:6f:
09:d9:f8:ee:e8:21:f2:5c:1e:99:ef:9b:f3:9c:66:03:0a:28:
60:d3:fe:39:cd:56:d0:aa:b6:e0:3c:59:36:6d:4d:8b:e6:8c:
88:ba:90:c5:fa:4c:01:35:26:b2:82:ee:e9:da:4f:6d:19:4e:
c8:42:3f:6a:fe:a9:c6:4a:74:ee:1e:34:ee:8a:0b:05:3c:a3:
61:ed:2f:b8:b3:a8:04:f5:28:d3:9e:9e:67:df:1b:f5:44:e3:
dc:6b:9e:0e:a6:77:09:04:c2:97:82:df:41:0a:51:3e:ce:1e:
c6:7a:1c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:15:56 2025 by rpki-client