Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/gz5Fn0iYS2J-2PWlXPOubZS66_c.roa
File: gz5Fn0iYS2J-2PWlXPOubZS66_c.roa (raw, json)
Hash identifier: 3ZNULpIUwqK52p1xdQUbvRyZUixjUvhEv6tYcx6J92Y=
Subject key identifier: 83:3E:45:9F:48:98:4B:62:7E:D8:F5:A5:5C:F3:AE:6D:94:BA:EB:F7
Certificate issuer: /CN=56e8521e80f2f071a31385bcdfbc31a621c68f94
Certificate serial: 01954522CA025992D95E97E47EFEEC2C3AE6
Authority key identifier: 56:E8:52:1E:80:F2:F0:71:A3:13:85:BC:DF:BC:31:A6:21:C6:8F:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/gz5Fn0iYS2J-2PWlXPOubZS66_c.roa
Signing time: Thu 27 Feb 2025 02:01:02 +0000
ROA not before: Thu 27 Feb 2025 02:01:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 37.252.17.0/24 maxlen: 24
37.252.19.0/24 maxlen: 24
37.252.20.0/24 maxlen: 24
37.252.21.0/24 maxlen: 24
37.252.22.0/24 maxlen: 24
37.252.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:45:22:ca:02:59:92:d9:5e:97:e4:7e:fe:ec:2c:3a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56e8521e80f2f071a31385bcdfbc31a621c68f94
Validity
Not Before: Feb 27 02:01:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=833e459f48984b627ed8f5a55cf3ae6d94baebf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3e:28:5a:24:14:1f:2f:bc:09:d3:88:dc:20:
7d:07:3a:10:12:70:79:65:93:69:ae:db:35:b4:ee:
7e:5c:f6:cb:63:5a:f2:1e:04:8c:4b:9f:93:b4:e4:
76:f8:a4:ac:5e:ad:fd:1d:fa:e9:73:65:98:d6:67:
85:79:64:9d:87:f7:e4:c0:b3:47:e2:cc:14:5d:93:
15:7a:1a:15:ea:c4:15:2d:21:0c:b4:38:ce:f2:6a:
de:49:53:cc:37:36:88:28:12:f4:3a:5b:aa:bb:27:
43:9b:3a:db:36:5f:f8:42:fc:a3:6a:cd:8e:73:48:
d6:f3:36:0d:8b:ce:ed:cf:40:52:f8:74:1e:fa:04:
a3:0b:4b:6a:5b:2c:5f:70:76:ed:92:8b:17:1f:dc:
98:9d:8c:d5:94:d3:a1:be:e3:1a:ce:47:5f:bb:5d:
ce:e5:7e:f2:e8:5c:03:dc:a5:f9:29:7f:63:87:a8:
c9:06:62:d3:24:82:3d:fc:32:1a:a4:6f:24:e5:75:
30:99:51:35:99:f7:9c:30:72:5c:e1:f2:60:ad:b1:
43:25:cb:27:ed:5f:00:32:c7:53:24:e7:d6:88:cc:
25:ce:81:fc:8f:6a:b7:76:3e:ba:d9:c3:31:0f:17:
d6:ab:a8:05:c3:ab:da:5a:ab:a0:a9:b8:0d:95:d9:
e7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:3E:45:9F:48:98:4B:62:7E:D8:F5:A5:5C:F3:AE:6D:94:BA:EB:F7
X509v3 Authority Key Identifier:
keyid:56:E8:52:1E:80:F2:F0:71:A3:13:85:BC:DF:BC:31:A6:21:C6:8F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/gz5Fn0iYS2J-2PWlXPOubZS66_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.17.0/24
37.252.19.0-37.252.23.255
Signature Algorithm: sha256WithRSAEncryption
5e:77:8a:d5:99:b8:d6:e4:c0:25:3f:d2:95:d2:84:0e:6c:06:
32:f1:5a:98:5b:69:b9:9e:9b:b7:71:c9:78:33:22:cf:e4:bc:
12:8e:a0:4b:56:6e:e2:fa:b3:51:c1:ec:a0:e6:88:76:6b:93:
80:f0:21:38:c0:5b:97:19:3d:ed:02:d9:0b:e0:e6:fd:4e:c9:
cd:95:9f:3f:24:b6:67:53:63:da:60:34:97:3b:0b:d3:26:e1:
de:1e:87:5e:0a:dc:7b:4a:92:cc:8c:e8:97:45:eb:80:4a:79:
09:97:7b:37:0f:fb:7b:a0:19:6b:64:3a:2d:0e:45:c4:3f:c0:
e5:a6:bb:0d:33:99:32:18:ef:fd:fa:61:45:21:3f:35:73:b1:
e2:f0:8d:7a:23:bd:1d:ff:77:87:ee:08:c0:1e:0f:f7:77:f8:
58:61:7e:19:b7:a0:d8:5b:f7:52:7f:9d:c4:d2:e5:26:2a:1e:
d7:a4:e7:23:78:2f:11:98:ea:45:13:b4:56:85:41:46:29:e8:
eb:0e:9a:42:63:8e:d8:15:b3:a9:2f:58:fb:7c:c1:22:9a:01:
83:fc:db:e8:4f:f1:14:27:d5:2e:78:f0:68:dc:c4:39:b3:ef:
03:fd:19:c8:b7:bb:25:f0:bb:53:ac:4c:54:53:79:cc:00:a5:
39:9e:6b:13
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:02 2025 by rpki-client on console.sobornost.net