Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/cxXgE4ze3p5Y_SSxlmeJ4o5QzaU.roa
File: cxXgE4ze3p5Y_SSxlmeJ4o5QzaU.roa (raw, json)
Hash identifier: VnVBSnuyvJSL8u2y/xmozn76q7jfteZhwwoJt7Qqpuc=
Subject key identifier: 73:15:E0:13:8C:DE:DE:9E:58:FD:24:B1:96:67:89:E2:8E:50:CD:A5
Certificate issuer: /CN=37e0cb58ae23d473ae13a7341b7a73bdd1028a0d
Certificate serial: 01942521477007BBA9BBED616BA88EB7AD61
Authority key identifier: 37:E0:CB:58:AE:23:D4:73:AE:13:A7:34:1B:7A:73:BD:D1:02:8A:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/cxXgE4ze3p5Y_SSxlmeJ4o5QzaU.roa
Signing time: Thu 02 Jan 2025 03:48:45 +0000
ROA not before: Thu 02 Jan 2025 03:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206876
IP address blocks: 185.173.136.0/24 maxlen: 24
185.173.137.0/24 maxlen: 24
185.173.138.0/24 maxlen: 24
185.173.139.0/24 maxlen: 24
2a0b:5500::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:47:70:07:bb:a9:bb:ed:61:6b:a8:8e:b7:ad:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37e0cb58ae23d473ae13a7341b7a73bdd1028a0d
Validity
Not Before: Jan 2 03:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7315e0138cdede9e58fd24b1966789e28e50cda5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3e:d3:1d:24:22:97:69:90:67:ae:8b:ff:b8:
47:1a:0b:fa:96:c9:9b:b1:9e:9a:ae:76:9f:b9:0c:
01:94:75:cf:d7:0c:e0:3b:a7:a6:62:a8:70:28:cc:
ca:bd:5a:8e:0c:38:3b:d7:6d:a6:c3:d3:ef:f5:1e:
aa:8b:f3:70:0e:ef:c4:00:98:ea:3c:9d:22:81:b4:
eb:ba:f7:91:fd:b3:b7:bb:93:79:d0:bf:1f:0a:65:
44:59:d1:d7:c9:fa:bf:17:51:30:24:8e:36:42:bc:
b6:44:ce:2b:17:ab:e5:ee:26:82:20:ee:38:d0:4e:
40:ea:44:38:54:54:a3:4e:9c:31:f7:63:79:0a:b3:
d8:0f:3f:89:4f:44:e2:8d:da:04:96:8a:9e:3c:1a:
66:aa:01:cb:a8:e3:af:72:9d:e5:5d:50:03:2f:87:
6e:d9:43:8f:d7:34:ba:db:dd:58:53:b6:d2:95:eb:
01:8a:59:e4:6b:10:e0:1d:ab:c1:2c:8c:00:5e:31:
30:1d:30:9a:f1:78:8d:39:b6:8d:f1:65:9d:8b:12:
05:ff:f7:95:d7:3d:38:21:c5:62:ba:eb:58:b5:ee:
70:d6:33:e9:56:e0:be:9c:a6:3e:66:b5:75:e9:18:
88:d1:ce:55:6f:20:ac:ba:26:cb:91:91:2d:f7:44:
31:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:15:E0:13:8C:DE:DE:9E:58:FD:24:B1:96:67:89:E2:8E:50:CD:A5
X509v3 Authority Key Identifier:
keyid:37:E0:CB:58:AE:23:D4:73:AE:13:A7:34:1B:7A:73:BD:D1:02:8A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/cxXgE4ze3p5Y_SSxlmeJ4o5QzaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.136.0/22
IPv6:
2a0b:5500::/29
Signature Algorithm: sha256WithRSAEncryption
37:df:75:f0:0a:ac:29:3f:32:8b:b9:34:c3:35:8c:ee:9a:c2:
a8:04:92:c6:86:f7:a1:85:f6:ce:6f:83:a0:c6:84:4f:12:4d:
70:54:4e:68:2c:ac:e1:57:27:65:4b:a9:0c:b2:a2:fe:cc:60:
fe:2f:5d:5b:c7:d7:dc:4d:6f:1c:e3:93:fc:d8:6c:96:dc:4d:
7d:9c:7e:4f:33:df:77:b6:7e:f0:6c:10:e0:db:b8:58:3f:64:
cb:50:05:c1:cb:e6:6f:19:4d:09:0d:82:b1:b9:78:53:a5:f2:
bd:3d:b6:74:3f:38:e3:c2:a6:58:26:d7:19:68:34:43:2e:2a:
cb:f2:8e:72:d5:09:5e:bd:6e:af:1f:06:9c:51:d2:c3:4c:d7:
58:2f:6e:0a:aa:a1:15:52:ce:f5:e0:30:cd:0b:44:4e:a4:28:
9e:26:1b:75:00:40:4c:da:cc:9f:0d:7c:94:25:b2:50:73:e1:
ba:87:a3:11:a3:a2:5c:5c:29:98:cd:bb:3d:86:bb:0a:0f:41:
60:b9:9c:74:0d:e4:6d:f4:8e:23:6d:7c:ad:aa:fd:5b:2c:22:
4a:31:ed:cd:16:43:8f:20:b2:82:3f:0c:45:99:3c:3f:99:ae:
44:f1:73:15:52:33:42:e4:76:a2:ea:5a:23:fa:73:1a:e5:42:
84:7b:c0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:07:31 2025 by rpki-client