Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/1-6fdP5POZdCNRV8X1LoCajvovjw.roa
File: 1-6fdP5POZdCNRV8X1LoCajvovjw.roa (raw, json)
Hash identifier: RU4H0XePghxqFcwMjjofJ5l0uoKzMR9zIRLDjSECb0A=
Subject key identifier: FB:A7:DD:3F:93:CE:65:D0:8D:45:5F:17:D4:BA:02:6A:3B:E8:BE:3C
Certificate issuer: /CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c
Certificate serial: 01942748378DFCCEDB3558B1178D3159D4B9
Authority key identifier: 18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/1-6fdP5POZdCNRV8X1LoCajvovjw.roa
Signing time: Thu 02 Jan 2025 13:50:31 +0000
ROA not before: Thu 02 Jan 2025 13:50:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198312
IP address blocks: 37.0.96.0/24 maxlen: 24
37.0.97.0/24 maxlen: 24
37.0.98.0/24 maxlen: 24
37.0.100.0/24 maxlen: 24
37.0.102.0/24 maxlen: 24
37.0.103.0/24 maxlen: 24
2a03:6a60::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:37:8d:fc:ce:db:35:58:b1:17:8d:31:59:d4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c
Validity
Not Before: Jan 2 13:50:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fba7dd3f93ce65d08d455f17d4ba026a3be8be3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:78:18:de:37:ab:ea:fb:bb:00:c6:26:20:4d:
ab:74:ca:4c:ea:9a:4c:2b:79:42:c1:76:a5:b7:7b:
44:6f:cc:d4:76:4c:dd:be:b5:70:78:45:07:f5:29:
62:be:d3:2b:26:6f:41:78:53:80:a2:d6:16:62:14:
58:77:14:fd:3d:da:0f:33:ea:03:1a:b6:97:19:1f:
f4:53:2e:63:b9:a9:14:e9:f8:68:5c:12:6e:bf:65:
50:83:32:d1:a4:11:c3:64:df:34:58:74:e0:07:4b:
18:0a:85:03:72:1e:f1:62:b5:9d:79:0d:6e:e2:7e:
70:ff:dd:f4:51:c1:d2:fe:00:43:4e:79:1a:e8:e9:
92:5f:1c:dd:41:7a:f7:00:57:60:87:ef:a7:95:7e:
3d:f4:87:26:7f:55:a5:71:e0:db:ed:6f:b8:24:1f:
11:36:52:51:61:a6:08:8a:0e:5a:d6:42:18:1f:4a:
36:bc:12:ad:5f:5e:03:c4:aa:80:77:03:b0:d0:e0:
a3:e9:b1:4d:0d:cf:c0:37:da:79:97:e9:ff:dd:bc:
d9:95:ce:d0:91:dc:12:56:4f:25:67:3b:0a:31:ee:
43:c6:09:29:fb:ae:ee:d6:f6:5d:da:04:ad:16:d8:
13:09:6a:58:d3:54:30:0f:99:e8:9f:29:f8:b8:d1:
0a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A7:DD:3F:93:CE:65:D0:8D:45:5F:17:D4:BA:02:6A:3B:E8:BE:3C
X509v3 Authority Key Identifier:
keyid:18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/1-6fdP5POZdCNRV8X1LoCajvovjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.0.96.0-37.0.98.255
37.0.100.0/24
37.0.102.0/23
IPv6:
2a03:6a60::/32
Signature Algorithm: sha256WithRSAEncryption
45:15:d5:fa:d2:02:e0:73:68:2f:c9:84:4e:63:9f:36:77:10:
5c:b5:80:9b:39:11:e9:db:2b:7e:22:37:c0:3e:9b:9f:a8:f6:
b7:6b:eb:a5:f4:98:ab:65:79:57:7c:61:04:74:2e:ce:1d:e5:
6d:ef:54:f8:77:0a:3d:7e:ad:b6:13:ec:e2:c5:8b:2e:00:32:
3c:fa:cc:34:dd:14:96:c2:69:a1:8b:0c:d7:ef:6a:83:37:57:
95:70:2a:db:e2:53:5a:64:46:09:e7:4e:ad:1b:8c:c5:db:10:
92:0c:18:0d:60:73:5e:ed:d8:3b:82:ed:8f:0a:34:8f:bd:80:
31:b2:67:f6:db:d1:a5:d0:a2:44:1e:2b:b5:db:5d:a2:00:0a:
22:ca:bd:ce:e1:28:e3:a6:d0:6a:99:33:d0:ad:41:40:16:73:
1f:b5:e5:50:b2:93:89:a0:76:5c:c6:57:e8:19:cb:b7:7a:e6:
db:2d:96:60:a9:24:4e:8b:3e:ee:ca:e7:70:0a:cf:32:80:b0:
b6:83:51:22:93:48:05:46:e3:71:72:79:0f:9f:54:30:a5:62:
9a:64:fd:0a:b1:d1:2f:67:a5:c8:e9:ba:97:cc:34:f7:77:61:
26:f3:19:0f:f5:c3:9b:57:62:4d:83:1c:56:f9:8b:2f:cd:4d:
95:70:bd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:58:56 2025 by rpki-client