Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bcabb9-fbdb-4311-a29c-c17de50fd5fb/1/_n3xsTf977BHaNvbTVPWTNqZXHE.roa
File: _n3xsTf977BHaNvbTVPWTNqZXHE.roa (raw, json)
Hash identifier: AynTIcQw3oxJyI9Snhxfprvyv/uUFPbMc9ZoRWS2HLo=
Subject key identifier: FE:7D:F1:B1:37:FD:EF:B0:47:68:DB:DB:4D:53:D6:4C:DA:99:5C:71
Certificate issuer: /CN=185d46b7c9d321c9ba189e66b1933c1324197cec
Certificate serial: 092BC0B5
Authority key identifier: 18:5D:46:B7:C9:D3:21:C9:BA:18:9E:66:B1:93:3C:13:24:19:7C:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GF1Gt8nTIcm6GJ5msZM8EyQZfOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/bcabb9-fbdb-4311-a29c-c17de50fd5fb/1/_n3xsTf977BHaNvbTVPWTNqZXHE.roa
Signing time: Sat 01 Jan 2022 12:02:49 +0000
ROA not before: Sat 01 Jan 2022 12:02:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29182
IP address blocks: 37.46.134.0/23 maxlen: 23
91.240.84.0/23 maxlen: 23
91.240.86.0/23 maxlen: 23
185.43.4.0/23 maxlen: 23
185.43.6.0/23 maxlen: 23
37.46.132.0/23 maxlen: 23
37.46.130.0/23 maxlen: 23
37.46.128.0/23 maxlen: 23
213.159.208.0/23 maxlen: 23
213.159.212.0/23 maxlen: 23
213.159.210.0/23 maxlen: 23
213.159.214.0/23 maxlen: 23
185.63.188.0/22 maxlen: 22
80.87.202.0/24 maxlen: 24
80.87.200.0/23 maxlen: 23
80.87.203.0/24 maxlen: 24
212.109.192.0/22 maxlen: 22
212.109.196.0/23 maxlen: 23
212.109.198.0/23 maxlen: 23
212.109.216.0/23 maxlen: 23
212.109.218.0/23 maxlen: 23
212.109.223.0/24 maxlen: 24
212.109.222.0/24 maxlen: 24
212.109.222.0/23 maxlen: 23
212.109.220.0/23 maxlen: 23
83.220.170.0/23 maxlen: 23
83.220.168.0/23 maxlen: 23
83.220.172.0/23 maxlen: 23
83.220.174.0/23 maxlen: 23
185.146.156.0/23 maxlen: 23
185.146.158.0/23 maxlen: 23
80.87.192.0/23 maxlen: 23
80.87.194.0/23 maxlen: 23
80.87.198.0/23 maxlen: 23
80.87.196.0/23 maxlen: 23
77.246.158.0/23 maxlen: 23
77.246.156.0/22 maxlen: 22
77.246.156.0/23 maxlen: 23
82.202.160.0/23 maxlen: 23
82.202.164.0/24 maxlen: 24
82.202.162.0/23 maxlen: 23
82.202.165.0/24 maxlen: 24
82.202.170.0/23 maxlen: 23
82.202.168.0/23 maxlen: 23
82.202.172.0/23 maxlen: 23
82.202.166.0/23 maxlen: 23
82.202.174.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153862325 (0x92bc0b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185d46b7c9d321c9ba189e66b1933c1324197cec
Validity
Not Before: Jan 1 12:02:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe7df1b137fdefb04768dbdb4d53d64cda995c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b5:95:4d:aa:e2:b2:cc:be:2e:d9:03:e2:77:
e6:32:de:22:c4:37:5c:e6:2f:57:5b:73:2a:91:cc:
58:97:3d:14:48:91:6c:a6:99:a5:11:c8:8a:48:9f:
0f:0c:f7:66:6c:28:20:0d:a0:66:8b:41:83:3c:1a:
8b:6e:24:0f:6e:a3:2d:d8:c3:30:31:01:1e:1d:e5:
1f:62:b0:fc:d1:ef:d7:de:84:2f:2d:ae:33:21:da:
57:7d:b5:3c:73:c9:b1:04:10:d1:f5:7e:71:ca:fb:
48:eb:d8:73:f7:1d:b1:3a:1a:71:4e:f9:f0:85:b2:
bb:c9:69:e1:85:e9:41:4c:25:2a:59:b2:91:4d:87:
58:cf:23:33:b3:be:3d:76:55:07:76:c8:30:5f:74:
c6:f3:d2:9d:da:f4:db:21:6d:4a:c1:f4:49:8b:eb:
d8:ec:49:25:50:07:e0:08:64:a2:cd:c9:7f:9f:a2:
4b:2d:8f:44:4a:dd:b2:b8:59:36:a1:f8:92:a8:00:
84:5e:48:c7:af:5d:6e:36:8c:66:2e:5c:b5:66:29:
b6:6e:79:d9:68:e0:1d:52:5a:e2:29:6e:8c:71:20:
ea:7d:3b:19:38:cf:22:05:6d:49:0c:02:ab:8c:10:
47:b2:8a:38:7f:59:4b:0e:7d:29:5e:3c:d9:65:72:
b5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7D:F1:B1:37:FD:EF:B0:47:68:DB:DB:4D:53:D6:4C:DA:99:5C:71
X509v3 Authority Key Identifier:
keyid:18:5D:46:B7:C9:D3:21:C9:BA:18:9E:66:B1:93:3C:13:24:19:7C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GF1Gt8nTIcm6GJ5msZM8EyQZfOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bcabb9-fbdb-4311-a29c-c17de50fd5fb/1/_n3xsTf977BHaNvbTVPWTNqZXHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bcabb9-fbdb-4311-a29c-c17de50fd5fb/1/GF1Gt8nTIcm6GJ5msZM8EyQZfOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.128.0/21
77.246.156.0/22
80.87.192.0-80.87.203.255
82.202.160.0/20
83.220.168.0/21
91.240.84.0/22
185.43.4.0/22
185.63.188.0/22
185.146.156.0/22
212.109.192.0/21
212.109.216.0/21
213.159.208.0/21
Signature Algorithm: sha256WithRSAEncryption
e1:5b:88:3f:f4:bc:83:bf:54:f6:4a:c6:d2:75:f3:de:90:00:
03:60:c8:c4:b5:15:79:ed:d4:6b:54:49:04:87:3a:ea:fa:77:
e1:03:36:6c:63:e2:50:1c:de:c6:98:6c:21:b6:e6:8d:da:08:
ef:43:df:6f:64:f5:78:b5:39:8f:26:cb:b5:55:7d:dc:47:6e:
8a:b0:06:e9:a9:db:68:8c:44:f8:d1:a5:92:d5:d4:c7:5c:44:
9f:e0:e5:94:19:78:a5:74:2a:c0:a3:16:49:4f:0e:88:f4:e8:
7b:72:0f:e8:d4:08:d5:90:c5:90:77:5d:c8:31:1f:40:7d:a5:
38:07:76:02:c2:8d:21:c5:3d:1c:25:9e:96:ae:db:04:40:b1:
1d:78:14:66:75:62:c5:14:8f:ec:20:ff:67:60:67:0e:e7:a4:
5f:27:41:42:cf:30:7e:3c:a6:26:bf:70:fd:36:95:71:cb:ba:
f7:ed:ef:8a:42:3c:ad:43:ce:a1:1f:8d:be:93:f3:18:bd:1b:
59:04:c6:cb:5e:05:ad:26:a8:36:f7:52:56:35:36:cc:8e:d6:
ba:58:4c:9d:7a:cc:5d:91:65:a2:f4:64:ef:38:f5:49:47:03:
0c:3b:7d:a5:83:a9:d1:6b:f0:2b:fe:98:bc:e1:69:fe:ee:80:
c1:7a:09:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:00:29 2025 by rpki-client