Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/XGDEPbtc7WSL9UqjAgvMfvuw4zE.roa
File: XGDEPbtc7WSL9UqjAgvMfvuw4zE.roa (raw, json)
Hash identifier: kp+3RGyWysprTwe33mB6LBHrd9lT7FkQfMmhfRn83iM=
Subject key identifier: 5C:60:C4:3D:BB:5C:ED:64:8B:F5:4A:A3:02:0B:CC:7E:FB:B0:E3:31
Certificate issuer: /CN=c01c50948f3737ffe0c3b76b241ce905628885d5
Certificate serial: 0194282745E9E6980C03C694ECA3DE025E67
Authority key identifier: C0:1C:50:94:8F:37:37:FF:E0:C3:B7:6B:24:1C:E9:05:62:88:85:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBxQlI83N__gw7drJBzpBWKIhdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/XGDEPbtc7WSL9UqjAgvMfvuw4zE.roa
Signing time: Thu 02 Jan 2025 17:54:09 +0000
ROA not before: Thu 02 Jan 2025 17:54:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59451
IP address blocks: 37.75.144.0/24 maxlen: 24
37.75.146.0/24 maxlen: 24
185.173.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:45:e9:e6:98:0c:03:c6:94:ec:a3:de:02:5e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c01c50948f3737ffe0c3b76b241ce905628885d5
Validity
Not Before: Jan 2 17:54:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c60c43dbb5ced648bf54aa3020bcc7efbb0e331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:14:65:78:d7:e3:f4:fd:c8:4e:10:2b:6b:c2:
b5:95:07:b3:02:68:cb:a7:be:79:f3:fe:61:43:52:
d6:3d:4e:92:56:3b:b1:01:56:f9:c3:3f:e7:26:3b:
19:64:da:eb:24:53:d6:c0:57:ff:47:3a:09:14:4d:
90:a3:31:fe:28:28:df:08:8c:80:ab:c9:2e:4c:d0:
d8:8e:b1:f3:67:19:cc:91:16:bc:b1:82:8e:a2:f5:
4f:54:c9:0e:1d:e4:d0:b7:16:2c:50:9e:2b:80:b7:
ce:d1:03:a0:6b:a8:97:34:4c:a7:42:6a:15:87:ed:
ce:1c:9e:e5:25:15:39:43:86:aa:73:ec:e6:ce:da:
9f:af:28:86:a5:7f:bc:31:da:64:f4:68:b1:70:7d:
a6:7d:e1:85:9f:ab:94:87:c9:ef:fc:7e:14:30:b2:
3b:bf:fc:45:60:66:ea:dd:37:e7:f9:f7:09:fd:03:
08:fa:59:02:44:04:c5:02:33:dd:15:a6:18:79:79:
30:cc:4e:94:82:d5:27:8b:8a:05:8a:7b:87:0a:10:
89:88:18:ef:8e:a6:4e:02:10:fa:80:2d:21:e5:af:
10:84:28:45:ef:1f:27:4e:64:96:f2:4e:7b:c3:8d:
6e:2b:b8:4a:42:15:a6:55:a7:79:86:0a:e1:98:b4:
b9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:60:C4:3D:BB:5C:ED:64:8B:F5:4A:A3:02:0B:CC:7E:FB:B0:E3:31
X509v3 Authority Key Identifier:
keyid:C0:1C:50:94:8F:37:37:FF:E0:C3:B7:6B:24:1C:E9:05:62:88:85:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBxQlI83N__gw7drJBzpBWKIhdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/XGDEPbtc7WSL9UqjAgvMfvuw4zE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.75.144.0/24
37.75.146.0/24
185.173.56.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:68:93:5f:d4:45:d2:7f:6f:45:c0:89:11:5d:58:ec:02:5d:
06:f3:9b:af:01:a4:df:a3:da:94:d4:e0:a2:5e:cb:66:eb:1f:
79:36:64:ee:04:90:d2:1b:40:30:77:87:ef:89:2a:97:57:3a:
70:5a:1a:28:bb:2a:d2:f2:fe:91:3b:5b:d9:1b:b2:25:a7:51:
e9:1c:d1:d7:04:56:a8:9e:7a:8a:d8:db:a8:87:f7:23:f7:39:
08:8a:95:e9:b7:5f:32:a1:30:2d:a7:9b:2a:86:8b:cf:eb:06:
66:0c:29:08:48:b5:c6:87:3f:11:a2:fa:b6:bf:ca:e6:69:f5:
4b:aa:2c:55:3b:47:4a:c6:7c:3c:eb:f0:9b:c9:2f:48:8b:a9:
48:09:a0:64:7d:a0:d0:34:d3:ad:08:a3:cd:d0:1c:a5:2f:60:
33:04:af:39:fe:af:0a:a0:ae:40:88:ef:80:d3:87:90:48:6b:
a6:18:fe:c6:11:d5:6b:9c:62:e9:fb:88:3f:e4:bb:a7:7b:52:
39:0f:db:f3:43:50:58:2e:df:0f:e4:15:ed:86:d7:3b:a3:57:
58:fb:ec:06:e8:e1:2e:91:79:e8:ce:10:5b:5e:5f:35:12:de:
13:dc:e5:4e:c8:56:5f:7f:17:6b:58:f6:05:76:33:f8:ab:ec:
ae:bf:1b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:16:54 2025 by rpki-client