Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/de_r8BjvstFLoszEoIUd1vs5X6o.roa
File: de_r8BjvstFLoszEoIUd1vs5X6o.roa (raw, json)
Hash identifier: ueYm0EedeLLfPi4coVp5NOEY5NRJCpTVB9T0QkdeT0g=
Subject key identifier: 75:EF:EB:F0:18:EF:B2:D1:4B:A2:CC:C4:A0:85:1D:D6:FB:39:5F:AA
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0194258F8843FBC2BF737E1252F9C0865545
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/de_r8BjvstFLoszEoIUd1vs5X6o.roa
Signing time: Thu 02 Jan 2025 05:49:11 +0000
ROA not before: Thu 02 Jan 2025 05:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2856
IP address blocks: 37.97.112.0/22 maxlen: 24
46.173.252.0/23 maxlen: 23
81.161.52.0/22 maxlen: 24
91.237.92.0/23 maxlen: 23
91.246.200.0/23 maxlen: 23
94.232.100.0/22 maxlen: 24
109.197.236.0/22 maxlen: 22
176.96.88.0/22 maxlen: 22
176.110.216.0/22 maxlen: 22
193.36.220.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:88:43:fb:c2:bf:73:7e:12:52:f9:c0:86:55:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 2 05:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75efebf018efb2d14ba2ccc4a0851dd6fb395faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:90:ab:bb:d6:fa:7b:6e:40:11:b4:a8:b9:69:
8f:7c:e7:b2:ff:3d:22:dc:5a:70:2a:8d:ba:68:75:
bf:f4:71:fe:ac:96:16:7b:f6:66:8b:da:b5:45:cf:
2c:09:16:3a:07:30:1a:f7:42:c4:fe:ff:43:bb:76:
58:24:36:18:40:04:85:2a:48:99:d2:1e:f4:9e:4f:
0b:40:90:d9:d4:91:67:20:41:e1:a4:fe:4e:7b:fa:
40:a7:14:8a:e2:be:2d:39:5f:f8:5e:aa:18:bd:8a:
04:cc:45:15:06:a7:ac:79:c6:b2:1f:00:3c:12:7e:
49:d7:14:51:fc:90:cc:de:50:a1:8b:25:35:e2:bf:
de:2b:d6:2c:8d:77:9c:00:79:6d:5b:b4:3f:a9:85:
8d:28:0b:ed:04:f6:a9:c1:59:e0:96:25:f5:81:1d:
1e:c4:2f:3e:0f:a6:8d:c0:7f:21:4c:14:a2:f7:f2:
d0:37:99:d4:30:8b:33:55:9f:0c:59:a8:3a:9f:28:
d1:1f:88:01:a6:36:9e:ad:c6:8a:08:f4:4f:ef:0a:
60:60:4f:88:94:c7:7f:7b:c2:63:9e:b9:02:e2:74:
b4:a4:29:88:96:74:1d:d6:c6:b7:1f:ee:e3:00:6c:
14:f5:cb:dc:14:cd:ea:2c:a6:69:a0:7e:81:22:03:
52:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:EF:EB:F0:18:EF:B2:D1:4B:A2:CC:C4:A0:85:1D:D6:FB:39:5F:AA
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/de_r8BjvstFLoszEoIUd1vs5X6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.97.112.0/22
46.173.252.0/23
81.161.52.0/22
91.237.92.0/23
91.246.200.0/23
94.232.100.0/22
109.197.236.0/22
176.96.88.0/22
176.110.216.0/22
193.36.220.0/23
Signature Algorithm: sha256WithRSAEncryption
33:16:43:7a:4e:97:37:e7:dc:00:16:00:2b:6e:5c:42:cf:f5:
d3:69:b2:a7:ed:a7:cb:75:95:7f:e1:08:68:1d:4d:12:11:1e:
d8:79:09:12:87:ce:64:b7:33:f3:77:4e:fa:1e:21:88:58:02:
97:84:8c:b0:76:97:9b:73:f0:d8:1c:cd:2c:02:54:4b:48:5f:
73:fa:c0:58:b4:e6:54:e7:fe:0f:04:bc:3a:41:38:67:19:bd:
8c:f7:d9:b5:fa:a4:6f:f3:6a:67:d4:be:fb:71:f0:de:83:a4:
a0:2e:1c:67:78:8b:e6:f3:c3:40:d1:db:66:a3:52:82:78:cd:
02:19:bf:95:53:73:16:4b:9b:fa:91:0d:c1:f9:71:8b:4b:dc:
f9:ec:a3:9a:f2:fa:d6:99:2c:1d:46:ab:c1:7c:56:08:7c:f3:
eb:f5:79:e4:b3:d5:57:9a:a8:b0:98:ef:4b:28:65:1c:c0:bd:
cd:dd:e2:63:1b:77:7c:22:fa:6b:73:47:5e:a9:23:29:43:1e:
9b:e1:9f:22:c6:3f:69:dc:36:e6:5d:7f:d6:a2:8c:82:1f:cf:
77:78:33:7f:dc:ce:99:54:08:12:73:b6:04:b2:36:23:cd:a8:
8e:d4:6a:c2:95:45:a5:63:13:f8:25:6d:67:77:e9:a1:4c:a0:
e0:bb:73:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:20:21 2025 by rpki-client