Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/5S9DzB-Zkm3msjgPAbdmsNofi_E.roa
File: 5S9DzB-Zkm3msjgPAbdmsNofi_E.roa (raw, json)
Hash identifier: JVrfzyFqi2bm7cADIRU0rzxEk+g6lOHGxW3e0YIX/NA=
Subject key identifier: E5:2F:43:CC:1F:99:92:6D:E6:B2:38:0F:01:B7:66:B0:DA:1F:8B:F1
Certificate issuer: /CN=46935081c77a8745e7b62b93b82da2962379b2e2
Certificate serial: 019422FC2B56857A6130A20FD5D5A1A5CE6C
Authority key identifier: 46:93:50:81:C7:7A:87:45:E7:B6:2B:93:B8:2D:A2:96:23:79:B2:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RpNQgcd6h0XntiuTuC2iliN5suI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/5S9DzB-Zkm3msjgPAbdmsNofi_E.roa
Signing time: Wed 01 Jan 2025 17:48:58 +0000
ROA not before: Wed 01 Jan 2025 17:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33983
IP address blocks: 37.35.64.0/21 maxlen: 21
37.35.64.0/24 maxlen: 24
37.35.65.0/24 maxlen: 24
37.35.66.0/24 maxlen: 24
37.35.67.0/24 maxlen: 24
37.35.68.0/24 maxlen: 24
37.35.69.0/24 maxlen: 24
37.35.70.0/24 maxlen: 24
37.35.71.0/24 maxlen: 24
84.22.32.0/19 maxlen: 19
84.22.32.0/24 maxlen: 24
84.22.33.0/24 maxlen: 24
84.22.34.0/24 maxlen: 24
84.22.35.0/24 maxlen: 24
84.22.36.0/24 maxlen: 24
84.22.37.0/24 maxlen: 24
84.22.38.0/24 maxlen: 24
84.22.39.0/24 maxlen: 24
84.22.40.0/24 maxlen: 24
84.22.41.0/24 maxlen: 24
84.22.42.0/24 maxlen: 24
84.22.43.0/24 maxlen: 24
84.22.44.0/24 maxlen: 24
84.22.45.0/24 maxlen: 24
84.22.46.0/24 maxlen: 24
84.22.47.0/24 maxlen: 24
84.22.48.0/24 maxlen: 24
84.22.49.0/24 maxlen: 24
84.22.50.0/24 maxlen: 24
84.22.51.0/24 maxlen: 24
84.22.52.0/24 maxlen: 24
84.22.53.0/24 maxlen: 24
84.22.54.0/24 maxlen: 24
84.22.55.0/24 maxlen: 24
84.22.56.0/24 maxlen: 24
84.22.57.0/24 maxlen: 24
84.22.58.0/24 maxlen: 24
84.22.59.0/24 maxlen: 24
84.22.60.0/24 maxlen: 24
84.22.61.0/24 maxlen: 24
84.22.62.0/24 maxlen: 24
84.22.63.0/24 maxlen: 24
185.173.204.0/22 maxlen: 22
185.173.204.0/24 maxlen: 24
185.173.205.0/24 maxlen: 24
185.173.206.0/24 maxlen: 24
185.173.207.0/24 maxlen: 24
2a0b:6300::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:2b:56:85:7a:61:30:a2:0f:d5:d5:a1:a5:ce:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46935081c77a8745e7b62b93b82da2962379b2e2
Validity
Not Before: Jan 1 17:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e52f43cc1f99926de6b2380f01b766b0da1f8bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:04:f7:ba:01:96:eb:e2:f4:20:f5:e3:fa:98:
4f:da:86:93:b1:ef:f5:e0:41:8c:f3:fe:c2:cd:19:
4b:90:d4:14:8d:90:9f:b2:81:e5:bd:e1:ed:dd:9d:
2b:1b:8f:83:76:90:cd:55:38:a8:3c:45:2f:0b:27:
32:8b:92:91:b4:98:9e:84:00:41:cd:b8:e5:c1:e3:
a6:75:36:19:28:8b:4f:e8:da:19:48:c4:01:29:6b:
57:db:f5:cc:dd:b3:bf:d8:1d:77:d6:4d:cb:c2:2c:
e6:05:9c:2f:e9:4e:f5:d0:b8:32:15:89:5c:a1:6c:
65:4c:b7:cc:d4:3a:6d:18:de:ee:f2:8c:c0:1d:6f:
e8:fa:9b:76:97:54:1e:ba:c9:19:3b:1f:4a:3a:10:
fb:89:17:3a:ab:78:7c:d4:ca:5e:99:57:45:9e:49:
e8:f0:62:9e:f1:0f:9f:0d:86:1b:1c:ba:f4:db:44:
80:2b:ff:fd:4d:4f:e9:7d:5a:22:6b:0b:68:59:ff:
c8:01:9b:2f:47:d2:c3:ad:21:48:21:9e:ce:b6:ee:
60:5c:68:c0:57:bf:51:7f:b6:65:f0:c3:54:38:af:
89:6d:40:c3:ae:e2:06:4c:11:96:a5:26:48:57:30:
d8:d0:b3:5b:0c:b7:7b:34:d6:6a:24:7f:e2:ef:bb:
dd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2F:43:CC:1F:99:92:6D:E6:B2:38:0F:01:B7:66:B0:DA:1F:8B:F1
X509v3 Authority Key Identifier:
keyid:46:93:50:81:C7:7A:87:45:E7:B6:2B:93:B8:2D:A2:96:23:79:B2:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpNQgcd6h0XntiuTuC2iliN5suI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/5S9DzB-Zkm3msjgPAbdmsNofi_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.35.64.0/21
84.22.32.0/19
185.173.204.0/22
IPv6:
2a0b:6300::/29
Signature Algorithm: sha256WithRSAEncryption
35:26:0a:da:a7:ee:96:95:0e:05:7a:a7:92:43:e9:02:e4:90:
30:f9:b7:9e:47:f0:32:0b:0e:6b:91:11:1a:b3:90:33:04:d1:
de:f5:1f:b2:11:7a:20:3c:75:55:90:43:de:0d:8d:85:c8:7a:
48:05:4d:dd:bc:7a:a3:dc:ee:e1:1b:ab:3f:0b:2b:7e:38:f6:
22:a5:ec:65:3a:c3:ae:0c:f5:a8:2d:33:a6:b3:77:bd:78:c7:
f8:a4:12:f0:c7:41:9d:fd:0c:a2:1f:6d:de:ff:ef:59:a4:e3:
e4:99:b4:16:60:1f:5f:73:bb:77:1b:7c:86:31:9d:bf:9f:02:
5f:ae:ec:04:41:98:c7:14:b1:d2:8b:0d:8b:da:3e:91:8f:e5:
a9:d9:4e:97:48:86:b8:1f:ec:e6:c5:ae:f6:d4:39:8f:58:94:
00:92:df:a7:17:36:cf:ee:1d:92:9e:30:8b:e3:9c:61:59:d4:
81:0e:b1:40:85:b6:b8:8e:fe:ff:13:69:45:3c:a5:04:87:4c:
b6:47:6e:0c:63:bf:69:60:25:49:ae:cf:6d:ab:12:61:97:68:
13:97:1f:43:ee:fe:60:57:77:33:0f:ee:80:01:d3:7f:2e:22:
d6:63:76:86:6c:59:13:9e:b3:37:cd:cd:b2:dc:cf:fd:d0:c5:
81:fe:7a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:13:10 2025 by rpki-client