Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/ATev8_uhunQc5j7herGHoXGBx0s.roa
File: ATev8_uhunQc5j7herGHoXGBx0s.roa (raw, json)
Hash identifier: raqWEdHQFWUAKbr4xna0wvj80ivdH8FgqZZk8a2xIoc=
Subject key identifier: 01:37:AF:F3:FB:A1:BA:74:1C:E6:3E:E1:7A:B1:87:A1:71:81:C7:4B
Certificate issuer: /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Certificate serial: 019426D9D4AF3E74A7A552724A98DBC950C0
Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/ATev8_uhunQc5j7herGHoXGBx0s.roa
Signing time: Thu 02 Jan 2025 11:49:57 +0000
ROA not before: Thu 02 Jan 2025 11:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 37.49.232.0/23 maxlen: 24
37.49.236.0/22 maxlen: 24
77.95.70.0/23 maxlen: 24
77.95.71.0/24 maxlen: 24
185.1.144.0/24 maxlen: 24
193.105.232.0/24 maxlen: 24
2001:7f8:47:47::/64 maxlen: 64
2001:7f8:54::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d4:af:3e:74:a7:a5:52:72:4a:98:db:c9:50:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Validity
Not Before: Jan 2 11:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0137aff3fba1ba741ce63ee17ab187a17181c74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d7:fe:0d:da:fc:48:67:f6:7c:70:34:4c:bd:
01:60:1e:8f:57:cc:17:f1:5f:11:27:55:f7:1d:f7:
26:bc:be:8e:53:65:75:67:ae:75:cb:41:0b:58:c6:
96:01:d5:cf:e9:ca:08:a9:c8:2c:3d:80:10:86:c1:
7d:8b:31:a8:12:d0:53:f8:c1:29:12:f9:d9:80:a3:
94:dc:29:d2:b6:0b:5d:64:da:b7:93:cc:df:7d:34:
1a:5c:7b:55:e6:9a:bc:22:f3:00:46:ab:68:78:6f:
3c:81:4f:5f:4f:37:0e:70:24:f5:a9:73:15:11:65:
cc:8e:ee:5c:3f:a4:57:2f:35:8b:4d:c1:25:b9:a3:
73:89:f3:38:e9:37:61:88:b5:93:34:75:da:8a:02:
d2:d4:2e:7c:21:f8:e2:eb:40:b1:21:c7:94:0e:2b:
14:5d:68:25:0d:62:85:ab:34:46:b2:70:f5:d8:25:
c6:45:45:69:e0:64:d7:97:5c:41:4e:fa:4b:f6:62:
e1:4a:cb:75:59:84:23:fd:61:9e:35:b4:78:01:2c:
37:f8:89:1e:7d:56:52:d1:56:c5:6b:17:2a:21:7e:
05:dd:e1:7f:b2:ea:21:4a:fe:f5:71:fb:70:ed:b7:
2a:f1:b3:50:f3:5f:b1:83:69:ae:46:11:ca:c4:a4:
c9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:37:AF:F3:FB:A1:BA:74:1C:E6:3E:E1:7A:B1:87:A1:71:81:C7:4B
X509v3 Authority Key Identifier:
keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/ATev8_uhunQc5j7herGHoXGBx0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.232.0/23
37.49.236.0/22
77.95.70.0/23
185.1.144.0/24
193.105.232.0/24
IPv6:
2001:7f8:47:47::/64
2001:7f8:54::/48
Signature Algorithm: sha256WithRSAEncryption
93:57:51:a2:ee:f6:e6:4b:5e:d3:2c:9a:c4:4d:85:4e:d4:43:
98:7d:63:69:ea:c6:0e:a4:ab:e2:31:45:71:61:9c:a2:72:0d:
03:0e:66:62:20:4a:c3:65:4c:02:42:4a:56:b6:a8:e1:66:c8:
b4:a7:b3:70:f2:7e:5b:47:c8:9a:89:76:ad:45:4e:6f:bb:c3:
25:11:f1:61:d8:a5:bd:81:2a:a2:b3:a2:dd:e0:04:5e:61:43:
cd:2a:0d:12:75:a5:9e:e8:6a:3b:2a:45:26:3e:53:1d:45:89:
86:02:fc:c5:d9:aa:9d:b8:f0:74:2a:9b:30:36:3d:1f:db:af:
c6:b3:ca:20:ef:04:5c:59:3b:0e:32:6e:a9:35:ae:68:68:59:
b2:de:a4:47:d2:ec:3d:76:9f:7b:97:ee:a7:9d:6d:e2:de:07:
35:23:3c:2e:ea:21:68:8a:6c:c0:6d:58:19:96:fc:e6:0d:0d:
c7:7d:5f:a2:e5:cf:2f:06:88:06:0e:a8:db:77:28:a6:0d:e5:
1a:ea:0c:8b:58:f9:ab:20:2e:4e:94:7b:21:f3:74:5a:4d:17:
b1:01:20:34:e2:03:09:7f:c5:80:2e:52:2f:a2:98:f8:3d:3d:
4b:85:e0:af:3a:08:30:29:f9:c9:b3:26:bf:b6:e1:5a:56:ee:
8c:c8:0d:4e
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgISAZQm2dSvPnSnpVJySpjbyVDAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMWQ2MmI3ZmQ5ZmNmYzg3ZGZlYTk4NzUxNTc2N2M4Mzhl
MjFiYjkwHhcNMjUwMTAyMTE0OTU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTM3YWZmM2ZiYTFiYTc0MWNlNjNlZTE3YWIxODdhMTcxODFjNzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tf+Ddr8SGf2fHA0TL0BYB6PV8wX
8V8RJ1X3HfcmvL6OU2V1Z651y0ELWMaWAdXP6coIqcgsPYAQhsF9izGoEtBT+MEp
EvnZgKOU3CnStgtdZNq3k8zffTQaXHtV5pq8IvMARqtoeG88gU9fTzcOcCT1qXMV
EWXMju5cP6RXLzWLTcEluaNzifM46TdhiLWTNHXaigLS1C58Ifji60CxIceUDisU
XWglDWKFqzRGsnD12CXGRUVp4GTXl1xBTvpL9mLhSst1WYQj/WGeNbR4ASw3+Ike
fVZS0VbFaxcqIX4F3eF/suohSv71cftw7bcq8bNQ81+xg2muRhHKxKTJSwIDAQAB
o4ICPTCCAjkwHQYDVR0OBBYEFAE3r/P7obp0HOY+4Xqxh6FxgcdLMB8GA1UdIwQY
MBaAFDEdYrf9n8/Iff6ph1FXZ8g44hu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81NzY4OGUtYTk2NC00OTMzLTg2MzEt
ODUwZjM0OTA2MjI5LzEvQVRldjhfdWh1blFjNWo3aGVyR0hvWEdCeDBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy81NzY4OGUtYTk2NC00OTMzLTg2MzEtODUwZjM0OTA2MjI5
LzEvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjAkBAIAATAeAwQBJTHoAwQC
JTHsAwQBTV9GAwQAuQGQAwQAwWnoMBoEAgACMBQDCQAgAQf4AEcARwMHACABB/gA
VDANBgkqhkiG9w0BAQsFAAOCAQEAk1dRou725kte0yyaxE2FTtRDmH1jaerGDqSr
4jFFcWGconINAw5mYiBKw2VMAkJKVrao4WbItKezcPJ+W0fImol2rUVOb7vDJRHx
YdilvYEqorOi3eAEXmFDzSoNEnWlnuhqOypFJj5THUWJhgL8xdmqnbjwdCqbMDY9
H9uvxrPKIO8EXFk7DjJuqTWuaGhZst6kR9LsPXafe5fup51t4t4HNSM8LuohaIps
wG1YGZb85g0Nx31fouXPLwaIBg6o23copg3lGuoMi1j5qyAuTpR7IfN0Wk0XsQEg
NOIDCX/FgC5SL6KY+D09S4XgrzoIMCn5ybMmv7bhWlbujMgNTg==
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:25:18 2025 by rpki-client