Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/XOd2oE1ewhF-ZbAEMdaVC12jAfE.roa
File: XOd2oE1ewhF-ZbAEMdaVC12jAfE.roa (raw, json)
Hash identifier: Qb1mjfUYvzsw4HemAT0H4CHevsLBTYDDvuwnqPNJ06Q=
Subject key identifier: 5C:E7:76:A0:4D:5E:C2:11:7E:65:B0:04:31:D6:95:0B:5D:A3:01:F1
Certificate issuer: /CN=c334a35abfa82d549e490704d68bbe658005d63c
Certificate serial: 01942444963933D1C77618AB453467D5D0E8
Authority key identifier: C3:34:A3:5A:BF:A8:2D:54:9E:49:07:04:D6:8B:BE:65:80:05:D6:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/XOd2oE1ewhF-ZbAEMdaVC12jAfE.roa
Signing time: Wed 01 Jan 2025 23:47:42 +0000
ROA not before: Wed 01 Jan 2025 23:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 37.46.0.0/21 maxlen: 21
80.69.0.0/19 maxlen: 19
89.187.96.0/19 maxlen: 19
185.2.164.0/22 maxlen: 22
195.234.244.0/22 maxlen: 24
2001:1a08::/32 maxlen: 48
2001:1a0a::/32 maxlen: 32
2001:1a0b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:96:39:33:d1:c7:76:18:ab:45:34:67:d5:d0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c334a35abfa82d549e490704d68bbe658005d63c
Validity
Not Before: Jan 1 23:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ce776a04d5ec2117e65b00431d6950b5da301f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d2:8e:93:e4:ae:35:68:be:d2:aa:b2:c1:51:
24:87:a8:7d:c6:87:3c:c1:9b:32:ce:07:d7:f6:57:
b6:1c:9e:e0:a6:cc:49:2b:5a:0f:09:92:5c:40:6d:
00:9c:6c:2c:9f:d5:11:4d:8d:0f:e0:6e:83:5a:67:
90:ca:a7:36:2c:4f:cf:be:4b:ce:51:d9:dc:59:61:
57:26:53:a0:95:53:d5:bb:cc:a8:65:91:cd:90:5f:
88:de:b2:1f:57:e1:10:a7:c4:31:48:37:6b:50:0b:
84:bc:9d:c1:91:ad:f1:0a:d7:31:08:e9:78:2f:7a:
6f:ed:c6:a0:48:c6:c4:d7:ef:aa:1d:b7:f2:d5:85:
f5:c4:d4:4b:59:3c:5c:fc:59:bf:96:79:c5:b6:54:
14:1f:a3:7a:3f:fd:ca:db:8b:67:90:28:a5:fd:8c:
a7:8b:71:f5:72:03:45:df:03:65:5f:73:4d:bb:35:
9b:3f:84:b9:4d:38:12:47:c4:63:54:e6:36:63:67:
71:a7:f8:67:ec:17:1e:60:82:15:ab:d2:41:00:fd:
a9:1b:33:08:f8:56:ee:20:30:24:9e:b6:b9:af:4b:
35:8b:b5:26:0a:2a:43:1d:a9:73:bb:5f:cc:de:3c:
cd:a5:c9:05:9e:69:5b:91:3e:3f:5a:0c:1a:4a:16:
2d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E7:76:A0:4D:5E:C2:11:7E:65:B0:04:31:D6:95:0B:5D:A3:01:F1
X509v3 Authority Key Identifier:
keyid:C3:34:A3:5A:BF:A8:2D:54:9E:49:07:04:D6:8B:BE:65:80:05:D6:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/XOd2oE1ewhF-ZbAEMdaVC12jAfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.0.0/21
80.69.0.0/19
89.187.96.0/19
185.2.164.0/22
195.234.244.0/22
IPv6:
2001:1a08::/32
2001:1a0a::/31
Signature Algorithm: sha256WithRSAEncryption
a2:9b:e3:6f:0e:e9:79:8f:18:81:fe:80:9c:d4:1b:e2:0d:8a:
5f:84:e6:fc:91:7c:3a:05:b9:59:3d:23:cc:f1:9f:1a:d2:7f:
1b:16:8c:04:d3:45:1c:bb:dd:cc:bf:4e:ef:d8:e9:97:63:13:
1e:c1:5a:0b:86:7d:e7:96:af:61:48:47:e3:6b:5c:ac:42:bc:
4e:f3:39:23:3a:fd:de:8a:35:eb:31:98:32:90:bc:e2:9e:de:
71:c1:4e:38:bd:10:4b:4a:66:cf:64:74:7b:e7:35:ba:7f:aa:
10:75:7f:8c:d4:5e:06:3a:c3:a9:88:60:40:ca:e0:47:05:1e:
c3:e2:a2:73:58:53:f7:09:6d:80:8e:d4:73:27:f8:1a:8c:18:
0d:d2:35:1b:ff:f5:50:15:c3:db:be:d9:d8:01:b9:0f:96:a8:
45:79:06:9a:80:ff:96:51:a3:f9:ab:2e:a8:25:74:45:8e:99:
1e:53:88:b2:2e:47:e8:0b:01:30:4f:fc:3f:65:10:86:d3:c1:
bf:6f:bb:2a:53:2c:31:33:c8:ca:db:6d:5b:c5:43:73:a7:49:
e1:54:87:31:87:3d:e1:77:01:90:f9:20:2b:4e:6e:af:9d:58:
3b:14:44:01:a0:55:a1:40:01:5a:f7:40:98:38:61:dd:92:b6:
ac:81:27:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:22 2025 by rpki-client