Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/3p18SE-_jmT-iBkv9tgIEXhe4Lw.roa
File: 3p18SE-_jmT-iBkv9tgIEXhe4Lw.roa (raw, json)
Hash identifier: +gONm3slSStsqqs4TIiuaSNgnkw/v3cbmgCYlVWUikY=
Subject key identifier: DE:9D:7C:48:4F:BF:8E:64:FE:88:19:2F:F6:D8:08:11:78:5E:E0:BC
Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial: 0195A9839D1A94F915E22160397F7207785B
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/3p18SE-_jmT-iBkv9tgIEXhe4Lw.roa
Signing time: Tue 18 Mar 2025 13:48:49 +0000
ROA not before: Tue 18 Mar 2025 13:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42473
IP address blocks: 152.53.0.0/16 maxlen: 24
152.53.6.0/24 maxlen: 24
152.53.7.0/24 maxlen: 24
152.53.8.0/24 maxlen: 24
152.53.9.0/24 maxlen: 24
152.53.24.0/24 maxlen: 24
152.53.25.0/24 maxlen: 24
152.53.30.0/24 maxlen: 24
152.53.36.0/22 maxlen: 24
152.53.41.0/24 maxlen: 24
152.53.48.0/22 maxlen: 22
152.53.58.0/24 maxlen: 24
152.53.59.0/24 maxlen: 24
152.53.62.0/24 maxlen: 24
152.53.63.0/24 maxlen: 24
152.53.64.0/22 maxlen: 24
152.53.69.0/24 maxlen: 24
152.53.74.0/24 maxlen: 24
152.53.75.0/24 maxlen: 24
152.53.78.0/24 maxlen: 24
152.53.79.0/24 maxlen: 24
152.53.80.0/22 maxlen: 22
152.53.84.0/22 maxlen: 22
152.53.88.0/22 maxlen: 22
152.53.92.0/22 maxlen: 22
152.53.98.0/24 maxlen: 24
152.53.100.0/22 maxlen: 22
152.53.104.0/22 maxlen: 22
152.53.108.0/22 maxlen: 22
152.53.112.0/22 maxlen: 22
152.53.116.0/22 maxlen: 22
152.53.124.0/22 maxlen: 22
152.53.128.0/20 maxlen: 22
152.53.224.0/22 maxlen: 22
152.53.228.0/22 maxlen: 22
152.53.236.0/22 maxlen: 22
152.53.240.0/22 maxlen: 22
152.53.244.0/22 maxlen: 22
152.53.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a9:83:9d:1a:94:f9:15:e2:21:60:39:7f:72:07:78:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Validity
Not Before: Mar 18 13:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de9d7c484fbf8e64fe88192ff6d80811785ee0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9c:21:9f:14:23:1c:eb:52:00:60:a7:8c:5a:
58:83:c3:4f:c2:b9:1e:74:32:28:db:48:ef:be:37:
17:ea:13:b3:70:21:c0:8c:80:6e:1c:17:0e:b6:d2:
46:93:49:af:c6:6a:cc:29:c6:cb:40:39:83:69:b2:
c9:19:a9:13:ed:e9:a5:62:9b:de:ad:45:25:d0:f9:
56:f9:4d:84:0b:f0:54:9f:fd:36:3b:36:e1:08:94:
b4:cc:35:79:19:d3:20:d1:30:12:e1:d3:5c:77:dd:
8f:52:6c:58:fa:a6:59:ef:40:79:ce:f9:cb:2a:43:
1c:c6:c8:8c:5c:dd:34:55:31:2a:99:a8:73:b7:66:
f2:7d:a4:a6:6d:b3:21:ba:51:83:15:6f:dd:52:5b:
c9:f0:a5:1d:d1:9f:bd:bf:f7:af:0c:3a:52:43:4c:
e0:d1:96:0d:e2:a4:5b:3c:50:65:6f:74:fd:4b:f0:
81:66:3e:23:45:8e:e9:4a:c0:88:61:73:8e:1f:92:
d6:59:5b:fc:bb:e7:96:ab:27:f3:ad:b6:e5:64:bb:
9b:71:d2:c6:02:b6:ee:71:02:ca:8a:35:e8:3d:ef:
07:a8:be:b2:1e:ad:3a:a9:f9:16:a7:af:7c:e4:e7:
98:4b:f3:07:c7:27:04:33:25:e7:6f:ef:a6:83:ea:
5c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9D:7C:48:4F:BF:8E:64:FE:88:19:2F:F6:D8:08:11:78:5E:E0:BC
X509v3 Authority Key Identifier:
keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/3p18SE-_jmT-iBkv9tgIEXhe4Lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.53.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ab:fc:03:7b:6d:3c:bf:85:73:a8:38:8a:31:53:dd:8b:0f:2f:
c6:d7:ce:54:1c:02:b7:53:60:94:a1:31:14:02:09:c1:b0:de:
85:43:3f:96:02:fb:0d:46:f3:47:dd:d7:3c:48:85:0a:98:39:
8e:d5:4f:78:ca:bd:89:5e:b5:28:8f:0f:0d:cb:35:49:ea:a3:
85:6f:c1:ad:6d:b2:ba:6a:45:26:f8:54:87:0d:44:97:9f:09:
9c:7c:b8:29:c6:33:6c:c0:42:10:2c:24:ee:2a:05:ca:9a:09:
30:dd:9a:6d:f7:74:09:3f:20:75:09:b9:2c:df:24:f5:27:c2:
65:21:29:cd:c5:8c:0a:84:53:57:ed:03:51:97:cb:22:b2:26:
79:81:0f:0b:e6:14:53:0a:9c:92:16:36:6c:ed:73:07:57:4c:
d9:c3:60:ff:93:ef:9d:66:6b:bf:c4:6f:5f:41:72:e6:3d:5b:
43:f4:0e:78:71:f8:07:d6:57:2d:c4:95:cd:28:8d:57:9b:38:
03:ee:3f:37:89:30:17:0c:96:f0:31:56:19:01:ee:d2:ac:5d:
6b:7a:c2:f2:24:dc:92:76:00:16:40:40:f9:01:3d:95:49:39:
e6:f2:51:17:ab:a0:c6:88:b6:ba:0a:20:6a:7e:37:c3:b0:53:
4b:2c:f6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:45:51 2025 by rpki-client