Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/SdJU9JcdXfsE-ret5S13F1yGCuI.roa
File: SdJU9JcdXfsE-ret5S13F1yGCuI.roa (raw, json)
Hash identifier: iyF6t0SHPvKd4PZ3JvtcvHWQsCE/4hGsmrNRXEvx/Sk=
Subject key identifier: 49:D2:54:F4:97:1D:5D:FB:04:FA:B7:AD:E5:2D:77:17:5C:86:0A:E2
Certificate issuer: /CN=74b33fb20dd557cd0b14edfe10880f0e0d21c529
Certificate serial: 019422FBD9BAEA510AD766FF301ED2B25F7A
Authority key identifier: 74:B3:3F:B2:0D:D5:57:CD:0B:14:ED:FE:10:88:0F:0E:0D:21:C5:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLM_sg3VV80LFO3-EIgPDg0hxSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/SdJU9JcdXfsE-ret5S13F1yGCuI.roa
Signing time: Wed 01 Jan 2025 17:48:38 +0000
ROA not before: Wed 01 Jan 2025 17:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199484
IP address blocks: 37.75.8.0/21 maxlen: 21
37.75.8.0/24 maxlen: 24
37.75.9.0/24 maxlen: 24
37.75.10.0/24 maxlen: 24
37.75.11.0/24 maxlen: 24
37.75.12.0/24 maxlen: 24
37.75.13.0/24 maxlen: 24
37.75.14.0/24 maxlen: 24
37.75.15.0/24 maxlen: 24
185.28.0.0/22 maxlen: 24
185.28.0.0/24 maxlen: 24
185.28.1.0/24 maxlen: 24
185.28.2.0/24 maxlen: 24
185.28.3.0/24 maxlen: 24
195.142.0.0/24 maxlen: 24
195.142.1.0/24 maxlen: 24
195.142.2.0/24 maxlen: 24
195.142.3.0/24 maxlen: 24
195.142.104.0/24 maxlen: 24
195.142.105.0/24 maxlen: 24
195.142.106.0/24 maxlen: 24
195.142.107.0/24 maxlen: 24
195.142.108.0/24 maxlen: 24
195.142.109.0/24 maxlen: 24
195.142.110.0/24 maxlen: 24
195.142.111.0/24 maxlen: 24
195.142.132.0/24 maxlen: 24
195.142.133.0/24 maxlen: 24
195.142.134.0/24 maxlen: 24
195.142.135.0/24 maxlen: 24
2a03:c040::/32 maxlen: 48
2a03:c040:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:d9:ba:ea:51:0a:d7:66:ff:30:1e:d2:b2:5f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b33fb20dd557cd0b14edfe10880f0e0d21c529
Validity
Not Before: Jan 1 17:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49d254f4971d5dfb04fab7ade52d77175c860ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6d:56:0d:b6:6d:b9:59:bb:7b:a8:37:8e:8e:
58:6f:96:f2:d5:ac:ff:cc:ae:10:05:8e:4a:91:be:
94:91:c0:35:4e:93:4b:fc:48:4a:2a:73:76:9b:10:
5e:49:f5:07:c4:22:24:e8:95:02:cc:f0:da:9e:16:
c7:63:4c:41:6a:86:ed:10:e5:8f:69:75:00:a3:95:
be:d3:c9:0f:01:53:d7:e3:ba:57:f7:af:21:1b:7f:
fc:70:34:54:96:12:cd:0d:68:ad:00:15:3a:9a:f6:
37:a3:f8:40:a6:34:30:58:49:ff:7c:ab:70:e8:4a:
a6:f6:95:95:08:b2:8e:58:c5:23:3a:56:50:c6:a0:
43:97:72:56:ee:e1:90:4d:7d:10:5d:ca:59:f4:00:
a9:8c:b5:ec:26:27:06:70:5e:05:a8:58:f9:e9:bf:
bc:2d:69:cb:34:a5:40:28:57:a1:2e:f8:8f:cc:a9:
83:b0:f1:a1:65:0c:0e:4f:15:2d:b9:fc:c2:24:7f:
14:39:87:77:4c:72:7d:ef:e4:11:2c:a5:62:c3:8a:
e7:2f:6e:97:af:16:8f:5d:df:03:ef:17:77:4e:1c:
b1:22:70:9a:78:47:b7:93:13:21:2b:04:f7:9b:ee:
ee:10:a3:15:bf:88:c0:71:34:45:39:dc:fd:82:55:
f8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D2:54:F4:97:1D:5D:FB:04:FA:B7:AD:E5:2D:77:17:5C:86:0A:E2
X509v3 Authority Key Identifier:
keyid:74:B3:3F:B2:0D:D5:57:CD:0B:14:ED:FE:10:88:0F:0E:0D:21:C5:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLM_sg3VV80LFO3-EIgPDg0hxSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/SdJU9JcdXfsE-ret5S13F1yGCuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/dLM_sg3VV80LFO3-EIgPDg0hxSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.75.8.0/21
185.28.0.0/22
195.142.0.0/22
195.142.104.0/21
195.142.132.0/22
IPv6:
2a03:c040::/32
Signature Algorithm: sha256WithRSAEncryption
0d:e0:82:7e:70:82:2d:89:1e:bc:bb:e6:af:74:f1:2c:d0:34:
7d:dc:92:51:ba:20:2c:6d:c8:79:49:af:44:f0:50:f3:66:6c:
66:bf:2e:76:76:3f:ab:cf:63:04:29:4f:c4:f1:ac:8f:54:99:
2b:d7:b8:43:bd:f3:8e:91:46:c7:e0:0b:dc:ce:77:52:bc:33:
ff:b1:51:1c:f7:90:dd:66:a4:e5:87:84:39:d6:88:5c:7c:c1:
96:46:f7:1d:71:e3:b5:f5:4c:c9:09:4d:8e:92:8d:8c:7b:3e:
7a:b2:21:a5:07:a1:cf:77:da:da:e1:50:69:59:db:d7:74:b2:
27:63:3d:a3:86:c7:1f:aa:22:78:83:4b:bb:e3:6d:52:3a:e3:
07:2d:2c:98:75:19:05:7d:6e:6e:59:d2:22:ed:8e:dc:73:1a:
39:5f:cf:fe:d7:bd:04:8f:b7:6c:b3:43:f8:37:1d:c4:bc:7b:
55:71:71:41:7a:2c:7b:a4:7d:b4:5a:77:bc:f2:7d:87:b3:00:
c3:c9:d1:90:9e:1f:2f:0d:ef:b0:98:bb:54:d9:ac:25:a4:d4:
8b:fb:c6:57:af:0e:94:5e:bf:de:b6:e1:16:77:2e:86:69:f2:
0e:47:f0:30:4a:54:d4:f4:8f:8e:ae:20:6e:e8:6c:95:ae:2e:
33:4f:d8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:48:57 2025 by rpki-client