Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/JmU1zZ_s32x0xTiVO1Ld5c9a0iE.roa
File: JmU1zZ_s32x0xTiVO1Ld5c9a0iE.roa (raw, json)
Hash identifier: bYm30H+hk6LyQs89QWpfVlG6uGHxd4o6fuhs92pT8Og=
Subject key identifier: 26:65:35:CD:9F:EC:DF:6C:74:C5:38:95:3B:52:DD:E5:CF:5A:D2:21
Certificate issuer: /CN=74b33fb20dd557cd0b14edfe10880f0e0d21c529
Certificate serial: 0194AF010301459399B8A6B07D70B7B03400
Authority key identifier: 74:B3:3F:B2:0D:D5:57:CD:0B:14:ED:FE:10:88:0F:0E:0D:21:C5:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLM_sg3VV80LFO3-EIgPDg0hxSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/JmU1zZ_s32x0xTiVO1Ld5c9a0iE.roa
Signing time: Tue 28 Jan 2025 22:21:06 +0000
ROA not before: Tue 28 Jan 2025 22:21:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199484
IP address blocks: 37.75.8.0/21 maxlen: 21
37.75.8.0/24 maxlen: 24
37.75.9.0/24 maxlen: 24
37.75.10.0/24 maxlen: 24
37.75.11.0/24 maxlen: 24
37.75.12.0/24 maxlen: 24
37.75.13.0/24 maxlen: 24
37.75.14.0/24 maxlen: 24
37.75.15.0/24 maxlen: 24
185.28.0.0/22 maxlen: 24
185.28.0.0/24 maxlen: 24
185.28.1.0/24 maxlen: 24
185.28.2.0/24 maxlen: 24
185.28.3.0/24 maxlen: 24
195.142.0.0/22 maxlen: 24
195.142.0.0/24 maxlen: 24
195.142.1.0/24 maxlen: 24
195.142.2.0/24 maxlen: 24
195.142.3.0/24 maxlen: 24
195.142.104.0/21 maxlen: 24
195.142.104.0/24 maxlen: 24
195.142.105.0/24 maxlen: 24
195.142.106.0/24 maxlen: 24
195.142.107.0/24 maxlen: 24
195.142.108.0/24 maxlen: 24
195.142.109.0/24 maxlen: 24
195.142.110.0/24 maxlen: 24
195.142.111.0/24 maxlen: 24
195.142.132.0/22 maxlen: 24
195.142.132.0/24 maxlen: 24
195.142.133.0/24 maxlen: 24
195.142.134.0/24 maxlen: 24
195.142.135.0/24 maxlen: 24
2a03:c040::/32 maxlen: 48
2a03:c040:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:af:01:03:01:45:93:99:b8:a6:b0:7d:70:b7:b0:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b33fb20dd557cd0b14edfe10880f0e0d21c529
Validity
Not Before: Jan 28 22:21:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=266535cd9fecdf6c74c538953b52dde5cf5ad221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c2:c0:e1:56:80:f7:ef:73:59:b7:52:2d:5b:
8d:90:82:26:de:16:c8:3c:10:30:f1:a5:51:df:4d:
d8:25:f0:f4:95:3b:7b:35:31:31:52:9c:52:e0:ee:
47:bb:5c:20:6c:49:a9:12:1d:6b:d7:c3:25:d6:a1:
1d:51:7e:6e:30:62:2b:56:cf:3b:9b:d9:3e:6e:e1:
07:e8:19:f2:f5:c7:55:81:68:19:8f:b0:ee:b1:87:
a8:60:29:fc:34:b8:ad:61:c7:33:a0:96:cf:88:71:
58:04:3a:68:38:72:1c:39:86:18:92:71:e9:38:78:
cb:ae:9b:55:07:fe:ac:c3:d7:13:c6:90:db:75:59:
2b:f9:82:32:ea:57:d3:ae:de:25:96:26:42:ac:70:
cc:4c:85:ab:e0:4c:9b:58:3c:cc:ab:cf:6d:95:9b:
4e:23:27:cc:f5:b9:6d:54:6c:0f:84:7c:c9:05:a7:
d3:41:03:51:fb:87:f9:25:12:1c:6d:45:a5:61:25:
50:b7:cd:a5:07:d7:6b:fe:4d:b8:f8:11:16:90:6c:
f4:5e:ca:59:a5:00:0f:25:5c:ca:e9:1f:5c:7b:bf:
76:6a:b1:b6:3c:31:d2:6a:67:43:78:71:7a:63:cb:
47:86:58:8e:f4:a1:b8:41:9c:ce:7a:35:5d:ad:cb:
d7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:65:35:CD:9F:EC:DF:6C:74:C5:38:95:3B:52:DD:E5:CF:5A:D2:21
X509v3 Authority Key Identifier:
keyid:74:B3:3F:B2:0D:D5:57:CD:0B:14:ED:FE:10:88:0F:0E:0D:21:C5:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLM_sg3VV80LFO3-EIgPDg0hxSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/JmU1zZ_s32x0xTiVO1Ld5c9a0iE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/dLM_sg3VV80LFO3-EIgPDg0hxSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.75.8.0/21
185.28.0.0/22
195.142.0.0/22
195.142.104.0/21
195.142.132.0/22
IPv6:
2a03:c040::/32
Signature Algorithm: sha256WithRSAEncryption
6b:51:5b:d0:b4:a3:90:bb:21:44:57:b7:20:5c:8e:72:a1:37:
48:ab:4a:bf:b0:5e:97:5d:56:ca:6a:df:99:f3:57:90:fe:db:
86:c5:bf:8a:bb:fe:9d:c0:d9:1b:32:02:d6:7c:65:09:8d:c7:
d5:2d:31:27:02:ad:52:00:b6:e2:e9:66:29:2b:52:d3:7d:1d:
24:e9:73:e1:d7:c4:5e:af:18:93:18:78:2c:9c:94:43:4e:59:
f5:6e:68:56:9e:8a:a5:4a:d6:47:1c:a7:18:b2:80:d3:09:2a:
97:82:73:48:58:04:34:a8:c8:e9:3c:db:bb:b3:20:7d:95:a4:
86:0d:b8:66:ce:84:8a:41:9a:b2:0d:7b:87:72:d1:0a:ef:ba:
89:0a:47:4a:79:14:9b:4b:e2:f6:df:10:88:78:a7:8b:0e:46:
01:05:8d:c1:97:15:68:78:b0:88:39:ac:a1:1d:42:83:43:25:
32:7f:80:ca:34:12:6b:94:df:bb:82:56:96:06:d2:f7:99:5a:
e5:52:56:11:19:1d:a2:b4:d8:5b:a5:88:a0:43:4c:14:e5:74:
cf:67:7a:c7:df:82:25:69:52:65:fb:6d:d4:fd:70:39:a2:eb:
15:d8:32:f6:60:6e:fd:08:e4:36:70:a2:4c:42:bc:fc:92:25:
f9:a0:26:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:07:03 2025 by rpki-client