Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/LhNnprcCte85399D5qvu-u84KAQ.roa
File: LhNnprcCte85399D5qvu-u84KAQ.roa (raw, json)
Hash identifier: 2LB8rKyBQKRt7zyGuV1bupYjAdN8o5kJt68LBUyvJtQ=
Subject key identifier: 2E:13:67:A6:B7:02:B5:EF:39:DF:DF:43:E6:AB:EE:FA:EF:38:28:04
Certificate issuer: /CN=df1e2d4bd362b62b8045021dc350b120e5530265
Certificate serial: 01971710C7E425BFE95A1A79579F2867CC22
Authority key identifier: DF:1E:2D:4B:D3:62:B6:2B:80:45:02:1D:C3:50:B1:20:E5:53:02:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3x4tS9NitiuARQIdw1CxIOVTAmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/LhNnprcCte85399D5qvu-u84KAQ.roa
Signing time: Wed 28 May 2025 13:24:25 +0000
ROA not before: Wed 28 May 2025 13:24:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62282
IP address blocks: 37.156.216.0/21 maxlen: 21
37.156.217.0/24 maxlen: 24
37.156.219.0/24 maxlen: 24
37.156.220.0/24 maxlen: 24
37.156.221.0/24 maxlen: 24
37.156.222.0/24 maxlen: 24
185.38.164.0/22 maxlen: 22
185.38.166.0/24 maxlen: 24
185.79.244.0/22 maxlen: 22
185.79.244.0/24 maxlen: 24
185.79.245.0/24 maxlen: 24
185.79.246.0/24 maxlen: 24
185.79.247.0/24 maxlen: 24
185.193.24.0/22 maxlen: 22
185.193.25.0/24 maxlen: 24
185.193.26.0/24 maxlen: 24
185.193.27.0/24 maxlen: 24
2a01:41a0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:17:10:c7:e4:25:bf:e9:5a:1a:79:57:9f:28:67:cc:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df1e2d4bd362b62b8045021dc350b120e5530265
Validity
Not Before: May 28 13:24:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e1367a6b702b5ef39dfdf43e6abeefaef382804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:3e:d2:40:42:96:6f:bf:cf:95:da:8c:bb:a5:
95:8d:05:f0:1d:f8:c4:5c:25:bf:ba:9c:92:eb:0e:
19:26:f4:09:5b:d0:0e:2e:1b:36:bb:24:4e:3d:76:
b9:0d:8e:5e:cd:e0:ae:bd:b2:f7:b4:fa:47:ae:cb:
dc:84:74:d6:84:40:92:0e:5f:81:ec:2b:90:0b:f2:
00:90:15:43:c0:0e:c6:9e:3f:d1:2d:4c:92:72:c4:
ae:92:3d:ac:7a:62:67:6c:d9:8f:11:d3:79:27:32:
1c:a1:b1:f1:3b:b7:10:a6:54:14:71:c3:b7:60:40:
8b:20:f4:81:06:79:cc:65:51:e4:ad:dd:57:c3:46:
c4:85:d6:95:95:b5:6a:28:55:18:a7:d9:2d:70:b1:
72:31:aa:f5:2b:6c:f8:af:46:7d:c3:f1:4a:fc:e1:
51:e6:78:59:88:83:2f:81:66:1a:ce:f7:5f:ac:61:
9c:19:36:c4:b3:92:41:a0:79:69:42:3e:cf:2c:20:
dc:11:21:27:7a:20:cd:3d:ee:bf:4f:a0:37:cb:8e:
7c:64:98:d7:49:f0:47:9b:7f:2d:46:a1:7c:31:7c:
12:5a:cb:04:16:b2:53:e0:b6:a9:bb:cf:c3:35:fa:
3b:ae:3d:5f:98:26:9c:1a:21:2c:05:af:03:3d:62:
c0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:13:67:A6:B7:02:B5:EF:39:DF:DF:43:E6:AB:EE:FA:EF:38:28:04
X509v3 Authority Key Identifier:
keyid:DF:1E:2D:4B:D3:62:B6:2B:80:45:02:1D:C3:50:B1:20:E5:53:02:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3x4tS9NitiuARQIdw1CxIOVTAmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/LhNnprcCte85399D5qvu-u84KAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.216.0/21
185.38.164.0/22
185.79.244.0/22
185.193.24.0/22
IPv6:
2a01:41a0::/32
Signature Algorithm: sha256WithRSAEncryption
31:6f:ed:5a:bc:70:dd:75:5d:fb:45:a2:ed:a1:a5:7d:1b:ab:
9a:7d:cc:16:61:27:33:5b:19:c2:9e:05:92:af:1f:4c:6a:e9:
e1:27:da:c8:68:6f:d0:70:d4:b0:18:76:0a:1c:2b:23:91:84:
7e:56:6c:5a:5c:f7:ea:dd:53:c2:ea:04:8f:84:9e:f0:4e:a8:
ec:bb:09:c7:cd:35:7a:9f:0a:d4:2e:a2:ac:f1:76:3f:99:0f:
9d:f9:cb:f1:c1:e8:fb:c2:fb:6c:d3:65:a5:fa:a3:30:1a:12:
08:e5:7a:65:5e:99:8c:67:1f:1b:81:57:76:9e:b2:88:c2:9c:
80:42:cf:99:36:4c:e6:78:68:3d:b6:3f:18:ac:4f:e8:c9:6e:
9b:01:31:32:3c:49:a7:c9:83:f5:67:53:7b:47:c5:77:5b:62:
3b:cf:a7:fa:8c:fc:16:01:2a:3f:3d:28:ff:b0:6f:6f:ac:d0:
3e:42:a3:c9:a8:21:01:3f:d2:16:3b:23:db:32:b4:5e:fd:66:
43:25:ef:9c:13:d7:4e:08:4d:5c:ba:f6:6a:33:1d:fd:d0:d7:
58:9e:c4:cb:e3:c6:21:f3:41:37:24:20:57:2a:bc:86:f9:31:
3f:57:8d:08:a6:65:e2:f5:a9:72:94:f2:41:4b:a3:d7:e5:14:
0d:b0:30:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:53:18 2025 by rpki-client