Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/C9bq6HqiO8wvPt8Ohvw7Ya0CzfI.roa
File: C9bq6HqiO8wvPt8Ohvw7Ya0CzfI.roa (raw, json)
Hash identifier: eBedAMyLvvyEc8yS2VDwWUUS44f1pIhLP9yn06vWvAA=
Subject key identifier: 0B:D6:EA:E8:7A:A2:3B:CC:2F:3E:DF:0E:86:FC:3B:61:AD:02:CD:F2
Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5
Certificate serial: 019423D6AAFEF97A6BE2BAD179D734C162FD
Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/C9bq6HqiO8wvPt8Ohvw7Ya0CzfI.roa
Signing time: Wed 01 Jan 2025 21:47:38 +0000
ROA not before: Wed 01 Jan 2025 21:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57928
IP address blocks: 37.157.8.0/23 maxlen: 24
37.157.10.0/24 maxlen: 24
37.157.12.0/22 maxlen: 24
193.41.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:aa:fe:f9:7a:6b:e2:ba:d1:79:d7:34:c1:62:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5
Validity
Not Before: Jan 1 21:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0bd6eae87aa23bcc2f3edf0e86fc3b61ad02cdf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:27:1b:76:2f:8a:f9:48:0f:6e:37:48:0c:d0:
6e:79:7e:1b:dd:f3:30:f0:fd:38:d5:5c:ef:a3:71:
f1:5a:85:b4:81:2c:da:8b:f0:3a:a6:a9:93:52:75:
1d:42:47:19:a6:fc:eb:97:a9:17:e9:8c:6e:b2:b3:
4d:ad:23:3b:a5:e7:25:b4:df:44:8d:bf:95:a9:73:
8a:eb:39:3f:ea:1c:4d:be:e2:84:af:4d:b1:d8:cc:
b0:04:31:9e:4e:ef:aa:1e:ed:e5:4a:e2:f3:9b:14:
93:9e:ca:82:64:5b:17:d9:d2:dd:c5:eb:4e:f7:eb:
51:d0:48:98:3d:97:73:ba:bb:6b:6e:a7:15:88:e0:
bc:f1:a5:06:03:1d:0d:af:64:c1:1c:4f:39:e9:42:
e2:b1:1c:e3:34:b2:fb:b8:f3:48:92:c0:13:87:ae:
bf:32:85:89:ef:45:3c:ac:7f:56:f9:90:14:06:19:
39:33:fd:62:60:65:0f:5d:13:72:bb:ec:a6:86:b4:
e3:ce:e7:a9:92:78:c2:72:81:d4:ce:43:05:29:06:
53:ce:23:54:37:c5:fc:4e:a2:1c:68:44:d5:11:b8:
cb:2d:7f:e0:9d:d2:d6:a4:d7:56:1b:f3:0a:d0:4e:
0a:98:c0:4b:50:50:3d:f8:7b:9e:8d:73:1b:72:a3:
35:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D6:EA:E8:7A:A2:3B:CC:2F:3E:DF:0E:86:FC:3B:61:AD:02:CD:F2
X509v3 Authority Key Identifier:
keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/C9bq6HqiO8wvPt8Ohvw7Ya0CzfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.8.0-37.157.10.255
37.157.12.0/22
193.41.95.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:05:49:e7:5b:3b:44:f2:3b:32:9e:fc:00:f1:f5:09:b8:2c:
c6:39:89:18:b2:a3:9e:54:d5:d3:23:7d:d4:6a:83:b6:7d:32:
ff:64:65:3d:cc:79:24:a9:b0:5a:16:2b:f8:c5:c2:ce:06:26:
26:dd:8a:70:3b:af:29:f2:86:a1:b3:c0:df:52:79:98:fa:06:
50:ee:28:d8:a1:be:9f:33:54:4b:d1:aa:f9:d9:3a:62:18:96:
3d:ea:a0:c8:d3:39:95:d2:6d:d3:01:b0:c9:ce:14:f8:7d:7d:
4c:1a:a8:33:4b:68:10:c6:77:4b:da:aa:04:d9:f6:b7:65:bc:
c3:d7:63:e8:1a:e3:b9:6c:66:c5:a9:3a:f9:d5:b8:50:82:b7:
be:b8:5c:4f:d8:c8:51:a4:1a:bc:d9:fe:97:2a:6f:2a:4d:af:
cd:6e:eb:8e:71:5f:d2:b5:74:f4:dd:8f:27:83:df:72:ed:df:
c3:f4:67:e4:bb:14:1a:10:16:97:b6:30:6a:f3:53:99:25:4e:
ab:61:9f:a6:23:fd:6f:4b:fa:cf:cc:4f:a4:fb:0b:5b:bf:b2:
84:5a:6c:89:14:98:78:4b:0f:df:46:7a:7e:1a:35:5b:93:19:
2c:c0:62:1e:9d:74:2d:c4:0c:81:64:47:2a:cc:9f:45:18:58:
96:5e:70:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:03:46 2025 by rpki-client