Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/7vsA1v30L-EvapyEhsawVnzX9GU.roa
File: 7vsA1v30L-EvapyEhsawVnzX9GU.roa (raw, json)
Hash identifier: bRu9FOmbAeQe4WHRQXkO2rlCmHy68lCzrRUy2/hunRQ=
Subject key identifier: EE:FB:00:D6:FD:F4:2F:E1:2F:6A:9C:84:86:C6:B0:56:7C:D7:F4:65
Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial: 0188FBC91223CBC450C6D78C65E4049E939C
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/7vsA1v30L-EvapyEhsawVnzX9GU.roa
Signing time: Tue 27 Jun 2023 07:37:18 +0000
ROA not before: Tue 27 Jun 2023 07:37:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34358
IP address blocks: 37.251.255.0/24 maxlen: 24
89.36.130.0/24 maxlen: 24
89.36.132.0/23 maxlen: 24
89.36.129.0/24 maxlen: 24
89.36.128.0/23 maxlen: 23
89.36.128.0/24 maxlen: 24
89.36.134.0/24 maxlen: 24
89.36.135.0/24 maxlen: 24
93.115.112.0/21 maxlen: 21
37.251.248.0/21 maxlen: 21
46.102.144.0/22 maxlen: 22
89.42.11.0/24 maxlen: 24
193.242.120.0/24 maxlen: 24
188.215.48.0/21 maxlen: 21
86.105.192.0/24 maxlen: 24
89.38.248.0/24 maxlen: 24
89.38.250.0/23 maxlen: 23
89.38.249.0/24 maxlen: 24
89.38.252.0/22 maxlen: 22
89.45.192.0/21 maxlen: 21
89.45.192.0/23 maxlen: 23
193.239.130.0/23 maxlen: 23
91.200.120.0/22 maxlen: 22
91.200.120.0/23 maxlen: 23
91.200.122.0/23 maxlen: 23
89.32.44.0/24 maxlen: 24
89.32.44.0/22 maxlen: 22
89.45.168.0/21 maxlen: 21
37.251.160.0/20 maxlen: 20
109.95.8.0/21 maxlen: 21
94.24.76.0/23 maxlen: 23
94.24.78.0/24 maxlen: 24
94.24.72.0/22 maxlen: 22
94.24.29.0/24 maxlen: 24
37.251.128.0/19 maxlen: 19
94.24.48.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fb:c9:12:23:cb:c4:50:c6:d7:8c:65:e4:04:9e:93:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Validity
Not Before: Jun 27 07:37:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eefb00d6fdf42fe12f6a9c8486c6b0567cd7f465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:01:82:fc:67:af:ac:14:6a:01:62:cf:9a:12:
b0:ee:1b:ed:a3:4f:6c:3f:76:09:0d:e0:c0:88:0e:
26:7d:9f:16:87:fa:34:86:c8:07:53:f9:71:02:31:
9b:90:33:fa:67:3d:e8:11:c5:74:e3:02:e2:ef:14:
8b:ef:1a:63:df:94:21:a2:93:9d:36:71:13:aa:d9:
1f:65:4f:f6:7f:9e:a4:d1:51:1d:5e:4f:37:f2:50:
53:7f:a4:39:aa:22:20:2a:7e:b9:ef:31:8a:2b:51:
c8:c3:14:39:21:d1:8b:8c:0d:cf:2d:40:88:d9:5d:
88:a0:26:cd:79:33:ed:8d:03:65:dc:6e:a6:b6:d9:
f6:fc:a2:0f:88:7c:62:9e:cf:e0:a4:da:c6:16:a3:
68:d0:1a:64:46:fc:63:2b:33:6c:8c:a1:71:30:d3:
28:27:69:4d:bd:ad:61:f3:b8:a7:5b:fb:57:29:61:
82:c1:cd:26:85:5f:26:17:60:c4:eb:8a:b3:f8:e0:
2b:f4:82:f8:7e:f7:dc:2d:39:47:4d:bb:af:be:08:
31:61:81:d6:17:fa:02:a6:cd:e9:14:89:57:d0:a3:
04:53:34:84:08:a7:3d:42:b2:4d:d2:d4:74:31:e8:
e6:36:5e:bb:f4:99:8f:f1:58:66:cb:f3:c6:7d:1f:
ff:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FB:00:D6:FD:F4:2F:E1:2F:6A:9C:84:86:C6:B0:56:7C:D7:F4:65
X509v3 Authority Key Identifier:
keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/7vsA1v30L-EvapyEhsawVnzX9GU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.251.128.0-37.251.175.255
37.251.248.0/21
46.102.144.0/22
86.105.192.0/24
89.32.44.0/22
89.36.128.0-89.36.130.255
89.36.132.0/22
89.38.248.0/21
89.42.11.0/24
89.45.168.0/21
89.45.192.0/21
91.200.120.0/22
93.115.112.0/21
94.24.29.0/24
94.24.48.0/21
94.24.72.0-94.24.78.255
109.95.8.0/21
188.215.48.0/21
193.239.130.0/23
193.242.120.0/24
Signature Algorithm: sha256WithRSAEncryption
25:4f:96:19:9e:1e:73:30:c8:ba:ae:3b:71:78:cd:8c:f3:23:
67:34:28:53:c4:40:00:dd:db:35:29:53:7d:e9:d6:cf:18:03:
08:42:c0:2d:2e:b1:9d:32:6a:e6:f8:1b:89:64:9a:70:b5:6b:
47:63:64:01:79:b4:1a:53:10:10:01:b4:74:99:f4:b3:8d:00:
f3:f2:af:cb:d3:7e:56:1b:a9:a6:0d:de:a9:f3:08:64:55:75:
a9:98:a2:1d:4e:ad:68:39:f8:d4:77:fe:2a:c2:d9:46:65:47:
17:bc:dd:63:17:07:9e:ff:43:f2:04:55:1a:f1:4b:c4:31:df:
e6:00:88:e2:d1:98:3c:d7:ed:ae:a9:00:40:d2:1d:3c:11:b4:
26:71:37:cb:61:89:47:27:e4:31:a0:96:0f:1a:dd:f6:3b:56:
51:30:13:97:06:a7:85:47:fe:d4:6c:32:d1:f0:48:23:53:7f:
cd:4b:15:83:2b:a0:3a:c4:02:8c:f0:f7:5d:f0:d4:77:a1:83:
63:6b:61:ae:43:c6:ee:71:db:b4:58:d6:81:38:c2:80:35:22:
55:a3:e8:f2:3e:86:df:2b:e4:9d:a5:0f:f4:c0:5f:80:89:a4:
ca:e9:fa:b5:9e:3f:2a:91:7d:62:cc:3a:ff:c3:4c:1f:6f:8c:
4b:62:f4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:25:11 2025 by rpki-client