Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/CRUMVI4IEFa0uQ9bNyqpM0wpmNw.roa
File: CRUMVI4IEFa0uQ9bNyqpM0wpmNw.roa (raw, json)
Hash identifier: A1SooYBmNoV4i8rtw1zfPE6rUw5mbZDdhSnwHI1Fues=
Subject key identifier: 09:15:0C:54:8E:08:10:56:B4:B9:0F:5B:37:2A:A9:33:4C:29:98:DC
Certificate issuer: /CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Certificate serial: 0189925E67084D9C9871A71DD1EB2B7F29F6
Authority key identifier: 50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/CRUMVI4IEFa0uQ9bNyqpM0wpmNw.roa
Signing time: Wed 26 Jul 2023 13:23:27 +0000
ROA not before: Wed 26 Jul 2023 13:23:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204035
IP address blocks: 193.56.173.0/24 maxlen: 24
37.228.132.0/24 maxlen: 24
37.228.134.0/24 maxlen: 24
37.228.151.0/24 maxlen: 24
37.228.148.0/24 maxlen: 24
193.56.126.0/24 maxlen: 24
193.56.156.0/24 maxlen: 24
185.107.192.0/23 maxlen: 23
185.107.192.0/22 maxlen: 22
185.107.192.0/24 maxlen: 24
185.107.193.0/24 maxlen: 24
185.107.194.0/24 maxlen: 24
194.125.251.0/24 maxlen: 24
194.125.248.0/22 maxlen: 22
194.125.250.0/24 maxlen: 24
185.245.168.0/22 maxlen: 22
185.101.92.0/22 maxlen: 22
185.116.156.0/22 maxlen: 22
185.116.156.0/24 maxlen: 24
185.116.157.0/24 maxlen: 24
185.116.158.0/24 maxlen: 24
193.46.24.0/22 maxlen: 22
2a06:7f80::/29 maxlen: 29
2a06:7f80:3::/48 maxlen: 48
2a06:1c40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:92:5e:67:08:4d:9c:98:71:a7:1d:d1:eb:2b:7f:29:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Validity
Not Before: Jul 26 13:23:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09150c548e081056b4b90f5b372aa9334c2998dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1d:c3:59:55:59:8c:8d:b3:f7:c6:dc:76:32:
5b:98:c4:d4:bd:a3:28:5c:02:26:41:c2:15:c4:6b:
15:ec:81:c7:2a:c3:8d:f6:77:dc:ba:6c:1c:d6:26:
1b:6b:a7:a9:f9:2a:f8:6b:9a:e0:44:7d:70:f4:33:
66:4a:ab:aa:69:c3:5f:43:46:60:cf:88:4b:fb:cf:
ee:5a:9a:2b:f4:ea:f0:4d:32:d8:4e:1e:5f:f4:5f:
43:7c:23:55:d5:db:15:e2:db:5b:73:c1:90:01:8c:
98:ac:4c:10:ed:e8:26:29:09:52:f9:fc:e2:3c:26:
a4:a3:cd:a8:bb:8a:a8:d9:55:ba:10:ad:6f:bf:62:
9d:9c:80:07:31:5b:d4:0b:88:cb:d8:62:17:17:f7:
ee:fd:f2:b1:36:00:78:18:dc:b8:39:0e:69:61:ba:
76:54:43:0d:34:7e:9d:87:5e:d9:1e:4d:bc:92:d5:
ba:c2:ec:3d:40:5c:08:d9:d7:8c:41:30:d6:37:d7:
8d:cc:b1:f3:5f:ad:ef:cf:57:86:7a:0f:21:0d:f4:
4f:54:a2:18:0b:5f:a2:30:05:5c:aa:c4:ed:d1:30:
97:14:89:70:ad:2a:47:6e:34:7f:d1:2a:36:56:bc:
3b:cb:26:7e:ab:a6:59:c4:16:68:96:79:79:2a:0a:
77:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:15:0C:54:8E:08:10:56:B4:B9:0F:5B:37:2A:A9:33:4C:29:98:DC
X509v3 Authority Key Identifier:
keyid:50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/CRUMVI4IEFa0uQ9bNyqpM0wpmNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.228.132.0/24
37.228.134.0/24
37.228.148.0/24
37.228.151.0/24
185.101.92.0/22
185.107.192.0/22
185.116.156.0/22
185.245.168.0/22
193.46.24.0/22
193.56.126.0/24
193.56.156.0/24
193.56.173.0/24
194.125.248.0/22
IPv6:
2a06:1c40::/29
2a06:7f80::/29
Signature Algorithm: sha256WithRSAEncryption
2d:34:a5:e9:ec:fa:10:b9:d3:c2:61:ef:b2:34:cd:9a:b9:c5:
d8:5a:5e:f5:17:17:ec:d5:e0:c3:4c:11:fa:3d:c4:d2:f9:5b:
53:2f:26:1b:d0:1f:9a:08:0b:f5:c6:ea:35:99:ff:64:82:b0:
b1:2a:52:85:c3:db:47:51:2c:ba:f7:c5:ad:80:f5:27:eb:02:
ef:17:c6:00:7c:0d:58:95:6c:03:8c:2f:27:d8:7b:48:17:29:
ab:0f:fb:58:8b:36:b9:a1:09:af:41:12:57:a4:df:3f:9c:8a:
fc:5e:6e:92:50:71:b2:87:f7:69:48:63:b7:48:fa:73:ff:00:
ec:a7:e4:0b:eb:b3:a8:c9:e6:c0:2d:aa:47:91:f5:36:aa:e0:
f2:d1:42:db:ef:46:a5:7c:1c:dd:cf:54:e5:a6:2b:d1:16:d1:
fd:8e:88:b7:b4:27:13:6d:b0:46:05:bc:b4:f9:d1:51:99:c1:
1b:50:c8:33:3a:19:56:63:8c:33:10:dd:77:da:b4:be:53:28:
33:80:9b:de:4c:2b:fa:4f:94:fa:43:d9:ba:00:8e:0e:e0:2d:
05:d3:d3:83:c0:3c:49:19:77:a1:39:25:e0:a7:cb:04:2c:a8:
02:ee:34:9d:60:e5:2d:59:06:9b:15:f2:9f:07:b9:c0:50:4c:
27:ee:a0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:02:01 2025 by rpki-client