Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/3raexFFj3tPstgifa_l8jJHkazQ.roa
File: 3raexFFj3tPstgifa_l8jJHkazQ.roa (raw, json)
Hash identifier: tJRmWB+nxgvOJkVjhkrY7i53nGolZQoscv3aKM9NJDk=
Subject key identifier: DE:B6:9E:C4:51:63:DE:D3:EC:B6:08:9F:6B:F9:7C:8C:91:E4:6B:34
Certificate issuer: /CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Certificate serial: 019427468E3DBE05B2F3496BD967FEC65385
Authority key identifier: 6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/3raexFFj3tPstgifa_l8jJHkazQ.roa
Signing time: Thu 02 Jan 2025 13:48:42 +0000
ROA not before: Thu 02 Jan 2025 13:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198193
IP address blocks: 37.10.70.0/24 maxlen: 24
37.10.108.0/24 maxlen: 24
91.216.73.0/24 maxlen: 24
91.216.77.0/24 maxlen: 24
91.216.100.0/24 maxlen: 24
91.216.122.0/24 maxlen: 24
185.28.216.0/22 maxlen: 24
185.42.20.0/22 maxlen: 24
185.91.192.0/22 maxlen: 24
185.104.164.0/22 maxlen: 24
185.217.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:8e:3d:be:05:b2:f3:49:6b:d9:67:fe:c6:53:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Validity
Not Before: Jan 2 13:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=deb69ec45163ded3ecb6089f6bf97c8c91e46b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:db:ca:fd:97:0f:35:10:18:4c:c2:4c:73:c7:
c4:9c:b5:e1:92:17:ce:b5:b4:01:62:2a:14:cb:3c:
8b:ad:c0:ab:74:5a:6a:12:5f:aa:21:8d:24:c2:7d:
ee:8b:f5:45:8f:e8:37:19:76:3d:f4:d2:60:a8:db:
cf:6c:60:03:68:39:2f:46:bc:1d:d5:43:19:68:dc:
d3:23:66:05:45:bb:df:9c:9a:6a:bb:24:a4:27:46:
fe:ac:ba:16:d7:f7:ce:50:14:f9:51:84:13:c4:af:
ff:08:99:a5:ff:94:47:27:e4:1c:bc:4c:74:2a:94:
7e:f6:5c:2a:ac:6b:ec:b3:5f:2f:63:65:f0:a4:33:
e1:38:8d:e4:b8:e3:06:41:3c:4f:41:89:eb:0c:0a:
16:42:1f:7b:65:48:90:dd:23:56:df:39:fc:06:6c:
9d:de:16:7f:d7:76:4c:d3:34:8a:39:63:73:40:e1:
e5:48:08:91:be:51:ec:3d:b7:4e:7f:de:01:8d:b1:
71:d2:80:62:6c:09:ba:1f:22:5a:59:cd:c5:75:ed:
1c:b0:a5:91:bf:eb:da:79:f5:28:33:21:4f:0d:db:
eb:ee:3a:e9:dd:28:1e:ed:3e:9a:79:ed:b9:bd:3b:
ac:c3:df:74:d0:b9:77:7d:93:57:5c:be:ab:6e:99:
07:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B6:9E:C4:51:63:DE:D3:EC:B6:08:9F:6B:F9:7C:8C:91:E4:6B:34
X509v3 Authority Key Identifier:
keyid:6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/3raexFFj3tPstgifa_l8jJHkazQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.10.70.0/24
37.10.108.0/24
91.216.73.0/24
91.216.77.0/24
91.216.100.0/24
91.216.122.0/24
185.28.216.0/22
185.42.20.0/22
185.91.192.0/22
185.104.164.0/22
185.217.112.0/22
Signature Algorithm: sha256WithRSAEncryption
38:eb:25:37:4c:b2:25:a5:5f:5c:4f:48:7c:1a:2f:8a:ec:1b:
66:fd:3e:c4:68:49:40:0f:c8:3f:d8:85:1a:45:e6:23:86:d4:
b0:52:fc:79:3f:d2:12:4d:b3:38:d1:29:37:ab:e0:58:b0:f4:
f2:06:43:42:24:03:9f:e0:ff:55:82:e0:aa:e6:46:7d:b1:33:
d9:d0:22:61:bc:82:70:68:82:6b:53:23:65:a9:1b:6a:9e:f5:
6d:db:79:32:32:55:86:13:f3:53:3f:28:71:29:ab:c4:4d:e5:
f2:22:cb:cb:32:9c:99:0a:aa:3d:69:90:b6:19:38:e5:9c:bf:
78:b0:10:ec:cb:c5:f3:98:a8:44:3f:86:da:68:63:f3:c2:40:
af:b5:71:3d:76:a6:01:f4:bf:71:0d:72:3d:06:cf:e9:c0:61:
d3:fa:59:65:be:9e:28:10:e3:c4:fe:2c:7b:d2:35:ec:74:0d:
0b:ec:34:a2:20:72:89:c9:33:6a:e7:e7:b0:d5:26:9d:a0:92:
01:3e:87:45:f4:c7:94:fc:50:6f:09:89:c9:09:0b:90:ac:8e:
d3:8f:1a:ef:0a:74:72:20:48:c2:a4:d0:a5:6b:47:20:51:2d:
21:fd:cf:b2:db:1e:d9:a1:29:f1:be:65:db:92:69:96:ba:87:
c1:41:5f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:32:10 2025 by rpki-client