Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IbJl5etRpAckQHQpc9ZIqHFphYM.roa
File: IbJl5etRpAckQHQpc9ZIqHFphYM.roa (raw, json)
Hash identifier: Q8sOqOlSZYmdc2KD05GqU4XdqJtRwlzQk01jONxdmnw=
Subject key identifier: 21:B2:65:E5:EB:51:A4:07:24:40:74:29:73:D6:48:A8:71:69:85:83
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195D7BF8ECF9069D9A1211AC234E1DF19B0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IbJl5etRpAckQHQpc9ZIqHFphYM.roa
Signing time: Thu 27 Mar 2025 13:16:50 +0000
ROA not before: Thu 27 Mar 2025 13:16:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 37.139.130.0/24 maxlen: 24
45.149.243.0/24 maxlen: 24
79.110.61.0/24 maxlen: 24
85.217.144.0/23 maxlen: 24
185.225.74.0/23 maxlen: 24
193.149.28.0/22 maxlen: 24
212.115.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d7:bf:8e:cf:90:69:d9:a1:21:1a:c2:34:e1:df:19:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 27 13:16:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21b265e5eb51a4072440742973d648a871698583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0d:da:6a:9e:55:69:f9:8a:e4:92:a3:6c:39:
99:ef:0a:0b:19:d5:e4:80:ce:e9:3c:21:5d:5d:d3:
ab:76:9d:75:84:29:cd:b4:49:90:80:be:d8:b2:a0:
84:37:40:f8:c0:c0:ee:b8:85:20:21:3e:52:b2:19:
37:fc:a9:23:28:6f:5d:8f:0e:3c:22:46:79:f7:c4:
de:be:8f:51:46:91:d6:6a:28:74:e4:0a:cd:92:fe:
f0:07:b4:96:c2:c6:54:18:7a:be:06:79:b4:f1:eb:
e2:30:4d:8f:3c:de:c5:58:00:0c:30:d7:10:89:de:
5b:2e:d0:1e:41:67:97:5b:cf:59:f6:51:a3:79:60:
b0:2f:8d:77:e8:db:43:fa:d2:25:b1:ac:9e:55:bc:
7e:a1:ba:41:4a:00:db:4f:ca:bd:90:45:4c:e6:30:
10:9a:79:8f:28:e2:48:98:84:19:4d:f6:f3:96:c7:
86:4d:79:6f:45:27:75:57:0a:1e:e1:13:a1:45:70:
38:e7:2d:75:ad:da:4b:ab:7e:9c:a1:ae:4f:9d:0c:
c6:8d:6b:b6:89:01:68:7e:dc:7a:34:33:a7:6f:ea:
d0:30:fb:01:3c:c0:0d:4e:fa:02:78:27:72:20:e7:
4e:07:4a:dc:f3:7c:10:bc:c0:a5:41:a6:31:14:b1:
3f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B2:65:E5:EB:51:A4:07:24:40:74:29:73:D6:48:A8:71:69:85:83
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IbJl5etRpAckQHQpc9ZIqHFphYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.130.0/24
45.149.243.0/24
79.110.61.0/24
85.217.144.0/23
185.225.74.0/23
193.149.28.0/22
212.115.41.0/24
Signature Algorithm: sha256WithRSAEncryption
54:5c:61:17:48:20:9b:ca:4b:86:99:72:5a:1e:3c:27:21:52:
73:f2:86:d0:25:21:be:d2:a8:bd:81:59:8a:7c:c5:95:06:39:
06:3a:83:fe:bf:71:89:6d:46:94:cc:ce:db:26:41:4e:65:7e:
41:c7:b2:75:60:f1:14:d2:b5:83:3a:ab:04:47:17:69:5d:2a:
c3:fb:cd:75:e8:2b:91:e9:be:83:f0:ae:c7:f8:71:73:9c:5f:
a2:63:5c:2b:07:7f:3b:c1:31:e7:82:ec:12:70:7e:26:dc:0c:
ad:39:a9:b1:6d:c3:25:d9:67:df:5f:bf:5a:0a:6b:06:fa:83:
dc:87:dc:ef:40:6a:71:ac:98:29:fa:c2:7c:2e:0e:cd:1c:10:
99:e4:08:55:8d:10:34:1c:f1:77:86:08:36:94:95:41:e7:c4:
24:1d:c0:cb:75:36:81:02:94:c2:2b:44:89:4b:a0:ed:5c:73:
06:db:d7:13:f0:cf:80:2a:16:bd:77:82:59:d9:e1:9d:e9:63:
e5:2e:ef:09:2a:79:90:82:77:94:9c:3d:02:d1:3d:17:29:84:
7a:42:41:8c:db:75:29:3c:60:96:d8:14:6a:b1:4c:e9:32:40:
d5:fc:a1:fc:52:4a:29:60:03:1f:50:75:c2:88:24:86:3b:49:
f0:e4:71:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:50:58 2025 by rpki-client