Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/rCxYI5Tulv7y1jiwSQxGMLIrGN8.roa
File: rCxYI5Tulv7y1jiwSQxGMLIrGN8.roa (raw, json)
Hash identifier: +s5/7hhcPvTnv+J/E+7TIW4jm9Ttlavmle1UeAYMmYQ=
Subject key identifier: AC:2C:58:23:94:EE:96:FE:F2:D6:38:B0:49:0C:46:30:B2:2B:18:DF
Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Certificate serial: 019425FDA260042C34AC673E668315AE20A7
Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/rCxYI5Tulv7y1jiwSQxGMLIrGN8.roa
Signing time: Thu 02 Jan 2025 07:49:26 +0000
ROA not before: Thu 02 Jan 2025 07:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201106
IP address blocks: 37.72.132.0/24 maxlen: 32
45.142.156.0/24 maxlen: 32
45.142.157.0/24 maxlen: 32
45.142.158.0/23 maxlen: 32
45.145.72.0/23 maxlen: 32
45.145.74.0/23 maxlen: 32
45.150.164.0/22 maxlen: 32
45.150.226.0/23 maxlen: 32
45.151.132.0/22 maxlen: 32
45.154.212.0/22 maxlen: 32
62.204.54.0/24 maxlen: 24
94.154.114.0/24 maxlen: 32
146.19.114.0/24 maxlen: 32
178.22.30.0/24 maxlen: 32
188.93.139.0/24 maxlen: 32
193.218.200.0/23 maxlen: 32
193.221.94.0/23 maxlen: 32
194.124.218.0/23 maxlen: 32
194.124.224.0/23 maxlen: 32
194.147.98.0/23 maxlen: 32
194.147.100.0/23 maxlen: 32
217.114.47.0/24 maxlen: 32
2a0e:da40:4000::/34 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a2:60:04:2c:34:ac:67:3e:66:83:15:ae:20:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Validity
Not Before: Jan 2 07:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac2c582394ee96fef2d638b0490c4630b22b18df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ea:77:66:74:08:00:b0:0f:6e:5f:ad:da:08:
c8:f8:34:c9:de:8f:7c:eb:81:8f:39:c5:ac:b9:5e:
2e:77:68:ce:0a:94:8c:7a:9c:87:6b:c1:d1:b9:3f:
dc:cd:2d:54:93:6f:f4:3b:a5:24:60:2c:a9:9c:af:
68:3f:c5:c3:6f:22:5d:1b:d9:be:08:44:27:0e:d4:
54:89:56:65:05:bd:b2:58:a9:82:a7:0e:af:c5:2a:
b2:3c:a0:b0:6c:80:b9:44:92:7d:69:ba:83:87:3c:
fc:f9:59:1b:4f:78:e2:39:ff:bf:ca:dc:bb:0c:a0:
dc:8b:5c:30:a5:b4:3e:15:97:9e:b1:36:72:34:d7:
93:80:3c:b0:9b:29:56:77:84:15:09:37:93:95:a7:
71:92:69:69:16:2b:31:f4:6e:85:5f:1c:3d:88:65:
c9:5e:65:14:1e:16:2a:16:6f:02:b1:59:1f:66:65:
04:d9:eb:94:a8:fd:7b:95:7c:d4:cf:da:c8:a3:62:
59:f6:3a:a6:09:d4:a8:41:1e:0a:7b:a0:f8:9e:9a:
4f:37:a3:f0:5a:b6:e4:3e:73:14:5d:0c:79:16:a2:
e2:28:61:61:a2:6f:b9:16:41:89:10:b1:06:86:5d:
83:7b:72:ce:9a:d8:bd:7c:a3:89:53:49:a5:ab:87:
5e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2C:58:23:94:EE:96:FE:F2:D6:38:B0:49:0C:46:30:B2:2B:18:DF
X509v3 Authority Key Identifier:
keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/rCxYI5Tulv7y1jiwSQxGMLIrGN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.132.0/24
45.142.156.0/22
45.145.72.0/22
45.150.164.0/22
45.150.226.0/23
45.151.132.0/22
45.154.212.0/22
62.204.54.0/24
94.154.114.0/24
146.19.114.0/24
178.22.30.0/24
188.93.139.0/24
193.218.200.0/23
193.221.94.0/23
194.124.218.0/23
194.124.224.0/23
194.147.98.0-194.147.101.255
217.114.47.0/24
IPv6:
2a0e:da40:4000::/34
Signature Algorithm: sha256WithRSAEncryption
2d:17:24:6e:16:8b:c6:c4:38:60:6e:e4:1e:60:d7:67:c0:18:
c2:57:ca:2f:e1:10:1b:08:e9:35:58:6a:a2:f5:4a:ab:54:51:
34:c0:08:55:cb:ad:bb:0f:5e:e1:70:18:c4:16:b1:a3:6b:ea:
c3:40:11:54:84:ca:9e:09:f4:08:2b:83:67:75:62:df:44:46:
b3:24:b8:dd:b7:e9:7a:2c:a8:3a:c6:ad:f4:6c:26:25:27:44:
38:75:af:43:bf:54:84:5c:08:5b:ca:d5:aa:05:d6:5f:a7:b5:
9c:1b:c3:de:5b:ed:e2:0e:f5:9f:da:ba:30:a9:a0:bc:db:29:
a5:a8:71:2b:2f:a4:87:43:98:fa:07:ea:58:c8:7d:b7:1b:cc:
a2:79:51:d0:cb:6e:64:a6:48:8a:4a:0a:94:45:89:fb:af:77:
ef:f5:2e:a1:06:55:39:f4:fe:15:79:63:9f:9f:44:95:5a:d3:
44:07:fb:a4:8f:a5:0e:81:ec:bd:5f:8b:27:3d:ff:31:31:15:
54:7b:77:ac:a0:5e:ec:56:1b:ca:a8:e8:43:5a:9a:14:56:4e:
93:d9:21:a7:37:42:a3:d0:d9:af:8b:eb:11:93:d5:83:d9:67:
bb:da:8e:c4:e4:d6:1a:ce:10:f3:9c:3d:fa:de:05:ff:5c:dc:
8b:36:fa:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:07:57 2025 by rpki-client