Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/etzxX8Mp3GA5B_Ib_FwZaYGOzN0.roa
File: etzxX8Mp3GA5B_Ib_FwZaYGOzN0.roa (raw, json)
Hash identifier: czgCcSBN5hngSuxIm+qVaTYWO5esEt0dHSvgoGTBh/0=
Subject key identifier: 7A:DC:F1:5F:C3:29:DC:60:39:07:F2:1B:FC:5C:19:69:81:8E:CC:DD
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 01948E427152381699CC10CF49455F49657B
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/etzxX8Mp3GA5B_Ib_FwZaYGOzN0.roa
Signing time: Wed 22 Jan 2025 13:45:06 +0000
ROA not before: Wed 22 Jan 2025 13:45:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2856
IP address blocks: 37.97.112.0/22 maxlen: 24
46.173.252.0/23 maxlen: 23
81.161.52.0/22 maxlen: 24
94.232.100.0/22 maxlen: 24
109.197.236.0/22 maxlen: 22
176.110.216.0/22 maxlen: 22
193.36.220.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8e:42:71:52:38:16:99:cc:10:cf:49:45:5f:49:65:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 22 13:45:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7adcf15fc329dc603907f21bfc5c1969818eccdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:44:38:c3:7f:20:a1:12:c2:61:03:0e:48:63:
5a:a2:ce:10:8f:9b:23:4d:bc:88:1b:8c:57:5c:c0:
8a:e9:8e:7c:a1:2b:df:15:fe:05:06:f8:54:d0:2f:
13:e0:6a:13:ee:9e:0e:cd:48:a4:7f:a1:c8:d9:77:
55:01:36:94:a2:d8:87:46:72:d1:b5:05:ae:d6:2c:
79:2c:b3:27:bc:7e:34:de:c7:37:21:19:49:27:e5:
e1:1a:13:95:a0:4f:6f:18:0f:c6:c6:ca:21:21:0b:
4e:25:46:33:79:81:5b:53:44:60:c4:2e:6c:c1:14:
57:e9:31:5d:f8:2f:a2:4b:d4:a0:1d:c1:0b:e9:69:
39:50:44:af:96:a1:9c:15:84:6f:83:73:e4:35:95:
d8:de:9c:c7:0d:43:21:df:7d:89:90:2d:db:bc:7e:
de:f1:56:f2:aa:c7:12:1a:54:85:b5:aa:e8:13:13:
e1:b7:a0:f8:d5:11:97:76:63:d1:3f:ae:18:b2:71:
9b:6b:a6:bb:3d:b5:31:a5:80:c8:b9:83:6f:c0:46:
c9:ac:07:96:16:30:b4:87:65:96:ba:cd:eb:75:cd:
fd:d7:21:8c:81:13:fa:54:af:b8:26:f1:30:66:8d:
17:59:2f:42:2c:71:f9:2c:c9:a2:13:98:8b:cd:55:
32:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DC:F1:5F:C3:29:DC:60:39:07:F2:1B:FC:5C:19:69:81:8E:CC:DD
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/etzxX8Mp3GA5B_Ib_FwZaYGOzN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.97.112.0/22
46.173.252.0/23
81.161.52.0/22
94.232.100.0/22
109.197.236.0/22
176.110.216.0/22
193.36.220.0/23
Signature Algorithm: sha256WithRSAEncryption
26:ca:80:6d:18:2c:8f:2c:25:8d:5c:7f:fa:56:fb:cb:ce:cc:
64:27:cc:eb:ae:37:42:60:54:97:92:4b:68:2f:90:c2:b9:96:
e7:34:0b:37:32:9a:c2:aa:5b:be:15:59:72:16:96:8e:f5:da:
d5:7b:b4:9b:f7:d3:61:3a:7a:f4:b9:c9:47:1d:96:4d:4e:16:
a8:c7:43:97:05:41:8e:c0:1c:d4:c9:4e:3d:f8:30:db:b7:28:
91:52:f0:1d:02:1f:ca:00:03:0a:ed:25:4b:75:05:11:38:d5:
ef:18:74:2e:41:73:4f:50:a1:cf:b6:c6:22:63:da:1c:69:3f:
25:3c:9e:4e:03:7c:c3:88:10:5f:fc:7c:10:44:d6:33:ff:99:
71:d9:67:a4:1d:68:34:94:f4:16:44:78:b8:10:b6:0f:b5:25:
57:a4:61:44:a6:14:a9:61:4f:95:b6:d1:29:9f:15:57:09:f5:
eb:22:8b:4d:fc:b0:07:b6:af:49:ef:94:08:c0:00:0a:42:0e:
ca:f7:72:3f:98:7e:02:d5:21:82:8d:71:2a:8a:a9:e0:7e:b1:
b5:b6:ae:83:94:f9:44:d3:90:6a:6c:6b:ad:84:78:39:84:63:
89:9c:5f:03:a8:a1:9a:32:f2:83:db:dd:2b:b7:5d:b5:ff:c6:
36:84:06:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:34:54 2025 by rpki-client