Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/OOdn_eKar1KCdJprcgtHqzIkV_4.roa
File: OOdn_eKar1KCdJprcgtHqzIkV_4.roa (raw, json)
Hash identifier: 3RR1tuTcIqDzfF6+qiuEtiV1qvaNgwgPTBw+DsGae6I=
Subject key identifier: 38:E7:67:FD:E2:9A:AF:52:82:74:9A:6B:72:0B:47:AB:32:24:57:FE
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 01940338C39EDA2379F3FBAD757412258E9D
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/OOdn_eKar1KCdJprcgtHqzIkV_4.roa
Signing time: Thu 26 Dec 2024 13:47:19 +0000
ROA not before: Thu 26 Dec 2024 13:47:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44486
IP address blocks: 37.114.32.0/24 maxlen: 24
37.114.33.0/24 maxlen: 24
37.114.34.0/24 maxlen: 24
37.114.35.0/24 maxlen: 24
37.114.36.0/24 maxlen: 24
37.114.38.0/23 maxlen: 24
37.114.42.0/24 maxlen: 24
37.114.43.0/24 maxlen: 24
37.114.45.0/24 maxlen: 24
37.114.47.0/24 maxlen: 24
37.114.48.0/24 maxlen: 24
37.114.49.0/24 maxlen: 24
37.114.51.0/24 maxlen: 24
37.114.52.0/24 maxlen: 24
37.114.53.0/24 maxlen: 24
37.114.54.0/24 maxlen: 24
37.114.55.0/24 maxlen: 24
37.114.56.0/24 maxlen: 24
37.114.57.0/24 maxlen: 24
37.114.59.0/24 maxlen: 24
37.114.60.0/24 maxlen: 24
37.114.61.0/24 maxlen: 24
37.114.62.0/24 maxlen: 24
43.251.162.0/23 maxlen: 23
103.252.88.0/22 maxlen: 22
176.100.32.0/24 maxlen: 24
176.100.33.0/24 maxlen: 24
176.100.34.0/24 maxlen: 24
176.100.35.0/24 maxlen: 24
176.100.38.0/24 maxlen: 24
185.14.94.0/24 maxlen: 24
185.14.95.0/24 maxlen: 24
2a00:ccc1:100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:03:38:c3:9e:da:23:79:f3:fb:ad:75:74:12:25:8e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Dec 26 13:47:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38e767fde29aaf5282749a6b720b47ab322457fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:63:bc:cf:8c:1f:56:a3:82:58:7b:68:85:2e:
3c:60:8b:ab:e9:d9:6a:82:2d:dc:f2:24:b3:d5:fd:
08:b5:d8:d3:23:fd:16:d8:56:3b:95:09:9e:dd:ca:
67:9d:e8:ea:64:e4:bb:eb:8e:e9:4a:e9:3d:7f:c7:
de:69:c7:66:f0:44:19:a0:f7:ad:95:88:e7:6c:c1:
b9:1d:c3:df:cc:c4:88:b7:40:78:95:75:6d:fe:ac:
95:c4:84:dc:08:ab:43:cb:f9:74:35:a6:83:22:22:
3c:2a:c9:87:cd:cc:46:61:06:4f:7b:71:a9:63:6e:
93:23:86:2d:0a:f9:9f:bd:db:88:93:2a:29:e2:06:
9e:c2:14:c8:af:a5:6d:31:5a:22:17:92:31:1b:73:
3a:8f:86:b1:0d:83:24:6b:f6:0a:9e:9b:3f:c1:3d:
16:3f:0f:df:5e:be:7f:b8:d0:6d:99:c9:6e:67:57:
d5:94:aa:ac:b2:0c:91:c4:9e:b6:a5:77:50:da:5c:
58:67:0f:aa:64:6a:63:5a:77:f5:2e:be:b3:fd:c3:
10:eb:78:7a:1f:64:27:72:63:e2:e8:97:43:8c:98:
99:d0:dd:82:e3:61:9d:8c:1e:98:9d:e4:d7:c4:7e:
35:6a:5d:64:78:2d:5c:b9:c4:90:99:81:c4:c3:1e:
4d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E7:67:FD:E2:9A:AF:52:82:74:9A:6B:72:0B:47:AB:32:24:57:FE
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/OOdn_eKar1KCdJprcgtHqzIkV_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.32.0-37.114.36.255
37.114.38.0/23
37.114.42.0/23
37.114.45.0/24
37.114.47.0-37.114.49.255
37.114.51.0-37.114.57.255
37.114.59.0-37.114.62.255
43.251.162.0/23
103.252.88.0/22
176.100.32.0/22
176.100.38.0/24
185.14.94.0/23
IPv6:
2a00:ccc1:100::/40
Signature Algorithm: sha256WithRSAEncryption
51:3c:87:32:cf:00:ff:2a:b8:ca:cb:8f:e5:65:cc:89:1e:b8:
de:26:62:61:24:a9:e6:7f:bd:ac:da:33:3f:64:95:96:99:c6:
83:e5:d9:9f:07:9f:ef:5f:fc:37:1a:7f:9e:4e:27:56:99:ce:
20:32:88:a6:80:5c:4b:eb:66:87:9c:41:eb:fb:f9:8c:c4:5d:
13:b6:84:4a:9c:ae:b7:93:03:44:17:91:df:4a:fc:86:91:af:
72:92:46:ff:a6:68:7c:a5:ce:70:bd:5b:9d:31:65:d0:6c:09:
3c:55:0d:41:1a:06:1e:0f:80:94:4f:b0:d0:27:d2:aa:ae:2a:
40:8f:cb:cc:41:65:d3:d9:85:24:6f:3a:ea:80:e1:1f:92:c2:
d8:c3:b9:5a:ff:08:f9:38:61:3b:7f:16:a3:fd:26:72:10:99:
ef:38:24:26:7f:f1:52:c0:4f:fb:0b:45:e5:ac:9c:60:d7:b0:
90:ae:54:2c:71:65:70:8a:98:d8:df:3b:64:79:39:cf:06:68:
30:06:cb:45:11:6c:7a:cb:b7:7c:3d:0a:35:92:24:68:03:1b:
3a:53:44:45:19:c7:df:1e:6e:94:a7:d1:52:d1:b1:cf:a2:89:
ff:a1:30:0e:5e:57:88:ce:44:0f:c7:9d:de:b5:ca:32:21:fc:
9c:17:22:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:32:11 2025 by rpki-client