Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/DSrOePZeE_ZcedJ0JOE0GdXU_8s.roa
File: DSrOePZeE_ZcedJ0JOE0GdXU_8s.roa (raw, json)
Hash identifier: 9kP/T6vNk7lQdh64mEzMEVFlszCqbo/kiBpMzJzb0y4=
Subject key identifier: 0D:2A:CE:78:F6:5E:13:F6:5C:79:D2:74:24:E1:34:19:D5:D4:FF:CB
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01942445296BCF0B0F648DBD89B368DF4270
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/DSrOePZeE_ZcedJ0JOE0GdXU_8s.roa
Signing time: Wed 01 Jan 2025 23:48:19 +0000
ROA not before: Wed 01 Jan 2025 23:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62300
IP address blocks: 37.221.81.0/24 maxlen: 24
62.192.136.0/22 maxlen: 22
194.32.241.0/24 maxlen: 24
194.61.8.0/24 maxlen: 24
213.109.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:29:6b:cf:0b:0f:64:8d:bd:89:b3:68:df:42:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d2ace78f65e13f65c79d27424e13419d5d4ffcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d9:35:af:8e:45:f5:89:53:4d:fb:0a:28:1c:
23:2c:04:b3:b0:92:fc:5d:b0:81:d0:c9:ae:de:ec:
79:bd:23:0b:b0:ee:55:28:56:58:9e:69:26:7e:0c:
b0:9c:09:cb:33:34:75:5d:e4:8b:b6:c0:34:28:1c:
94:9c:9b:bf:7b:f4:a2:14:5d:a4:22:7f:7a:51:ce:
c2:a9:c3:74:a4:e6:f1:45:4c:06:da:9a:ed:39:3b:
7c:f5:c5:83:2b:f7:b3:f7:43:de:53:d9:1a:57:eb:
ce:a5:52:dc:40:7f:7d:6b:61:a8:c3:e0:e9:eb:dd:
37:7e:17:e3:ee:df:31:ef:57:14:a4:1d:45:3c:b7:
94:bc:2e:2b:84:15:92:60:3e:fc:54:c9:56:b2:86:
46:72:46:1c:27:17:4c:bb:44:68:6a:ac:d0:15:50:
10:cc:56:fd:a1:da:70:33:bb:4c:46:84:c1:0b:4e:
a5:3b:db:8f:1c:e0:fd:0e:f2:51:b2:32:d7:6f:72:
06:10:a9:c3:47:f1:36:46:c0:35:71:43:07:51:36:
e7:de:06:f7:36:90:1c:1e:ab:fb:26:e3:37:ee:3d:
16:71:50:65:2b:8d:da:1b:51:dd:13:ff:64:60:97:
f1:61:f3:b5:0f:97:dc:81:fc:16:fa:ce:e3:78:0d:
fa:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2A:CE:78:F6:5E:13:F6:5C:79:D2:74:24:E1:34:19:D5:D4:FF:CB
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/DSrOePZeE_ZcedJ0JOE0GdXU_8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.81.0/24
62.192.136.0/22
194.32.241.0/24
194.61.8.0/24
213.109.202.0/24
Signature Algorithm: sha256WithRSAEncryption
22:cf:ec:93:f3:bd:50:ad:8f:59:be:a1:60:79:4a:e7:b8:f6:
a4:6d:98:0b:05:f0:9c:30:ec:2f:f6:2e:19:70:0c:09:29:2e:
1f:a4:6f:dc:f2:72:f9:d8:eb:cd:3f:bc:70:bc:2d:3e:32:b4:
f9:22:09:ed:3c:95:1e:95:2d:ac:de:b9:8c:bc:4a:96:a0:9d:
5f:c9:26:61:57:ba:76:0b:5a:c9:1f:91:c9:b3:76:08:ab:6e:
28:fc:50:7c:a8:62:47:fc:0b:7a:f1:aa:82:67:1e:a3:01:96:
5b:b5:47:4b:2a:af:e6:c3:d6:7d:e4:df:5d:fa:10:23:94:19:
e2:f8:d5:67:e8:e8:d0:b5:71:02:e9:06:28:83:80:b4:93:f5:
15:64:6a:73:8f:3f:7d:ad:ca:18:5e:02:a3:37:3b:77:b6:96:
7a:6c:3a:cf:e0:8e:c7:e9:d2:c8:d2:a6:bb:ea:2d:59:00:db:
35:f0:68:12:9e:6b:b4:62:d7:ed:4e:f6:a1:d6:ff:2b:42:3e:
42:f3:5c:c7:26:21:91:80:6d:4f:c2:e7:a0:50:fa:4a:fe:23:
8d:4d:f2:2f:c0:3a:42:09:3d:b8:91:6c:c0:ef:b4:02:eb:4c:
fb:35:f4:12:ce:ae:45:2e:37:f0:d6:03:da:bc:34:b5:d0:6e:
aa:01:13:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:49:15 2025 by rpki-client