Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/HuzEOfqr6qTeA-0CNasv6aqpcPo.roa
File: HuzEOfqr6qTeA-0CNasv6aqpcPo.roa (raw, json)
Hash identifier: zkz+FjENBONF1NRzvBbOImMrMomZ5tOCHB7AtL/uYbo=
Subject key identifier: 1E:EC:C4:39:FA:AB:EA:A4:DE:03:ED:02:35:AB:2F:E9:AA:A9:70:FA
Certificate issuer: /CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Certificate serial: 019426D95923AAE00A475188895EB2615BA6
Authority key identifier: 50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/HuzEOfqr6qTeA-0CNasv6aqpcPo.roa
Signing time: Thu 02 Jan 2025 11:49:25 +0000
ROA not before: Thu 02 Jan 2025 11:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204035
IP address blocks: 37.228.132.0/24 maxlen: 24
37.228.134.0/24 maxlen: 24
37.228.148.0/22 maxlen: 22
37.228.148.0/24 maxlen: 24
37.228.149.0/24 maxlen: 24
37.228.150.0/24 maxlen: 24
37.228.151.0/24 maxlen: 24
146.19.118.0/24 maxlen: 24
185.101.92.0/22 maxlen: 22
185.101.92.0/24 maxlen: 24
185.101.93.0/24 maxlen: 24
185.101.94.0/24 maxlen: 24
185.101.95.0/24 maxlen: 24
185.107.192.0/22 maxlen: 22
185.107.192.0/23 maxlen: 23
185.107.192.0/24 maxlen: 24
185.107.193.0/24 maxlen: 24
185.107.194.0/24 maxlen: 24
185.116.156.0/22 maxlen: 22
185.116.156.0/24 maxlen: 24
185.116.157.0/24 maxlen: 24
185.116.158.0/24 maxlen: 24
185.116.159.0/24 maxlen: 24
185.245.168.0/22 maxlen: 22
193.46.24.0/22 maxlen: 22
193.56.126.0/24 maxlen: 24
193.56.129.0/24 maxlen: 24
193.56.156.0/24 maxlen: 24
193.56.173.0/24 maxlen: 24
194.125.248.0/22 maxlen: 22
194.125.248.0/24 maxlen: 24
194.125.249.0/24 maxlen: 24
194.125.250.0/24 maxlen: 24
194.125.251.0/24 maxlen: 24
2a06:1c40::/29 maxlen: 29
2a06:1c41::/32 maxlen: 32
2a06:7f80::/29 maxlen: 29
2a06:7f80:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:59:23:aa:e0:0a:47:51:88:89:5e:b2:61:5b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Validity
Not Before: Jan 2 11:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1eecc439faabeaa4de03ed0235ab2fe9aaa970fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ee:31:80:f4:40:9a:de:54:a8:45:63:42:bf:
e5:95:ef:3d:05:13:9e:aa:94:b0:d7:3e:51:93:87:
c7:ec:ae:20:ec:2b:27:1f:d0:ed:30:af:51:d0:7d:
b6:9a:8b:cc:5a:72:36:29:7c:65:1e:e3:04:17:ae:
08:b2:a2:3e:73:74:08:74:1e:4a:70:8a:0e:4d:bc:
65:38:1e:aa:03:9a:da:4c:aa:55:b4:f8:dd:aa:b2:
44:c9:4d:29:ba:61:7f:eb:3f:b5:14:7b:b5:aa:e6:
90:0c:cf:87:dc:bf:90:a2:a2:d7:25:df:2d:89:40:
3d:b7:6e:42:d4:97:7b:76:e4:2d:a2:13:85:01:14:
0b:43:d6:fd:0f:78:ed:c3:6a:56:ed:5d:49:e5:a1:
fd:50:6b:e1:a6:7a:55:0c:dd:df:87:0c:29:ad:f5:
d0:73:95:e9:de:25:8e:37:ba:9c:53:b5:68:5a:7b:
22:17:45:19:10:69:d2:8c:55:71:dd:84:68:9f:e0:
39:0d:c6:d9:fe:0d:8b:4b:1d:8b:d9:6f:58:c5:52:
4c:db:bf:7e:cf:4a:aa:16:f5:44:8b:a9:30:cd:3f:
10:7a:68:52:0e:69:b5:89:9f:8f:ac:45:fd:80:9f:
20:0b:47:02:94:33:cc:a2:29:ba:6e:98:33:c5:68:
f6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EC:C4:39:FA:AB:EA:A4:DE:03:ED:02:35:AB:2F:E9:AA:A9:70:FA
X509v3 Authority Key Identifier:
keyid:50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/HuzEOfqr6qTeA-0CNasv6aqpcPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.228.132.0/24
37.228.134.0/24
37.228.148.0/22
146.19.118.0/24
185.101.92.0/22
185.107.192.0/22
185.116.156.0/22
185.245.168.0/22
193.46.24.0/22
193.56.126.0/24
193.56.129.0/24
193.56.156.0/24
193.56.173.0/24
194.125.248.0/22
IPv6:
2a06:1c40::/29
2a06:7f80::/29
Signature Algorithm: sha256WithRSAEncryption
64:27:8f:c9:61:ef:ac:3c:29:b7:ff:a2:ed:03:d1:20:07:0c:
4c:ec:a1:5c:fa:eb:ff:6c:3b:75:fe:2c:57:e5:ff:e2:7d:e9:
de:5e:9d:0c:f0:57:41:3b:ff:8b:45:e1:6f:ad:2c:70:8b:8f:
6b:7a:9d:e8:fb:a4:3b:11:0a:84:99:a8:22:4d:c9:84:02:6b:
c8:4e:f7:3d:1c:97:43:00:ba:b0:84:b0:a6:fd:c8:e7:b7:cf:
f4:4b:2a:fa:96:36:e0:ff:3e:2d:4e:c6:af:a1:85:cd:5e:10:
d5:4c:03:e1:ac:f5:72:1b:92:b4:e5:bb:32:4a:ea:cf:1a:f2:
72:bc:87:f1:90:6e:e4:e6:78:26:fc:ed:97:da:8a:75:54:29:
d4:01:59:6b:02:59:cf:cb:02:7d:c0:b5:f4:5b:b6:be:50:d3:
d9:b1:e4:d3:10:2e:a6:9a:8e:12:06:fe:e7:36:f0:23:2d:a7:
41:48:e1:4c:77:89:af:99:99:1a:74:4d:32:d0:59:66:60:2d:
45:24:76:81:45:b7:72:47:d4:c2:c1:7a:78:ab:03:0a:46:41:
10:a9:32:8c:1f:1f:84:0c:e0:4c:87:d9:73:60:23:6b:b6:4f:
1c:d1:fd:50:29:43:b0:66:87:7c:e0:c9:67:3b:e4:a2:d9:50:
af:1e:ac:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:56:34 2025 by rpki-client