Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/_UCwnQ4PKqOC7C7OdPmw-CJjSHQ.roa
File: _UCwnQ4PKqOC7C7OdPmw-CJjSHQ.roa (raw, json)
Hash identifier: gscNcw/Gz1J72/yzJLHOmYqUT9SiWCr7CBW3ut6udAM=
Subject key identifier: FD:40:B0:9D:0E:0F:2A:A3:82:EC:2E:CE:74:F9:B0:F8:22:63:48:74
Certificate issuer: /CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c
Certificate serial: 0193F38A437D6A6153C6A96647B1845CAA50
Authority key identifier: 18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/_UCwnQ4PKqOC7C7OdPmw-CJjSHQ.roa
Signing time: Mon 23 Dec 2024 12:42:24 +0000
ROA not before: Mon 23 Dec 2024 12:42:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198312
IP address blocks: 37.0.96.0/24 maxlen: 24
37.0.97.0/24 maxlen: 24
37.0.98.0/24 maxlen: 24
37.0.100.0/24 maxlen: 24
37.0.102.0/24 maxlen: 24
37.0.103.0/24 maxlen: 24
2a03:6a60::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f3:8a:43:7d:6a:61:53:c6:a9:66:47:b1:84:5c:aa:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c
Validity
Not Before: Dec 23 12:42:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd40b09d0e0f2aa382ec2ece74f9b0f822634874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bb:c1:ef:81:13:8f:ae:cc:84:c6:b4:e9:aa:
7a:ad:47:83:56:37:9d:e3:9f:48:6f:5d:50:b4:96:
84:79:42:61:c0:07:62:43:87:c9:03:95:5d:97:65:
4c:16:16:40:25:e9:13:d8:4d:61:05:0d:7d:80:0e:
e1:a5:3a:43:b2:cd:03:80:a3:43:44:2e:53:a4:b5:
88:6a:94:4d:98:c1:fb:a5:a2:b8:8b:03:2a:de:f7:
93:ae:65:95:89:72:67:0f:25:0a:af:e6:78:c3:7b:
54:c4:22:b5:23:37:a4:ce:a3:0f:a5:2e:83:b2:6c:
b9:1f:a4:76:14:9e:77:fa:df:4b:65:8c:31:1d:67:
b2:b1:58:e3:8d:e9:9b:41:01:03:e2:ed:0b:a1:c6:
c9:a9:6f:66:9d:07:55:2d:99:d3:1f:44:27:32:5b:
d3:5c:be:b1:8b:60:55:64:17:1e:5b:8c:9f:16:3d:
bc:59:b6:b3:7b:a4:24:fb:a1:f7:af:9d:18:59:5b:
6b:ab:c1:45:c8:76:fb:a8:ba:85:50:2f:f2:93:18:
c2:50:bd:3e:30:b4:40:e9:f4:aa:f5:ff:92:42:f1:
4f:ad:ac:94:38:83:5b:45:0c:8d:7e:2f:d4:a5:2f:
4e:e8:33:2a:0d:df:6e:29:33:a8:0a:50:5c:dc:19:
72:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:40:B0:9D:0E:0F:2A:A3:82:EC:2E:CE:74:F9:B0:F8:22:63:48:74
X509v3 Authority Key Identifier:
keyid:18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/_UCwnQ4PKqOC7C7OdPmw-CJjSHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.0.96.0-37.0.98.255
37.0.100.0/24
37.0.102.0/23
IPv6:
2a03:6a60::/32
Signature Algorithm: sha256WithRSAEncryption
1b:f5:cf:19:c4:9a:3f:11:36:ab:0a:65:fc:86:52:61:9e:3c:
96:5a:f2:30:60:09:b8:bb:39:75:8a:e8:c0:9c:d5:80:77:ad:
f1:ad:7a:0a:18:28:a7:b3:1f:2b:45:f1:b7:68:27:18:09:3f:
ec:92:b0:e6:af:10:b2:ba:e5:d5:14:e3:56:8e:e0:a3:5a:3f:
90:a3:e0:3c:a0:63:dc:f4:a6:09:07:b0:a2:d6:be:92:b1:8d:
39:77:bf:17:2f:31:83:1d:ff:85:1d:8e:92:d2:62:81:25:09:
12:df:a7:c1:93:0b:5f:80:8e:f5:b3:77:ef:1f:a5:b5:1f:5e:
a8:7c:1a:24:3d:0c:0a:5f:86:4a:93:ba:0f:4e:aa:fa:02:63:
98:71:2c:25:48:d3:12:17:0f:54:2a:1f:11:15:57:6a:a2:95:
0d:8b:cc:8c:bf:c0:df:7e:7e:b9:7e:11:47:73:80:6b:0c:a1:
df:e3:40:32:c8:7e:82:7a:7f:25:39:c9:3b:38:67:d2:65:2d:
c3:fc:a0:5e:eb:5e:cb:22:ce:21:f6:73:28:2c:2d:d0:59:63:
cd:71:42:b2:64:b2:33:1e:62:ff:3e:2e:f7:4a:7a:db:a7:2c:
ff:62:e3:40:79:b3:27:fa:3d:f0:e7:bb:62:8b:c4:36:88:cc:
d3:d2:0c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:32 2024 by rpki-client on console.sobornost.net