Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/28cd48-6a7c-4d05-b4b9-87aa5a2dd122/1/2IPOL-alkzvRFMpGHJWKiU1fAfU.roa
File: 2IPOL-alkzvRFMpGHJWKiU1fAfU.roa (raw, json)
Hash identifier: o/7NUulE0s6XHrVjBGEfrC84CJ3SajDnZaYcnAjG4NI=
Subject key identifier: D8:83:CE:2F:E6:A5:93:3B:D1:14:CA:46:1C:95:8A:89:4D:5F:01:F5
Certificate issuer: /CN=b12caece23c6adf6917039293e25baaa906ce556
Certificate serial: 182BF276
Authority key identifier: B1:2C:AE:CE:23:C6:AD:F6:91:70:39:29:3E:25:BA:AA:90:6C:E5:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSyuziPGrfaRcDkpPiW6qpBs5VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/28cd48-6a7c-4d05-b4b9-87aa5a2dd122/1/2IPOL-alkzvRFMpGHJWKiU1fAfU.roa
Signing time: Thu 26 May 2022 08:27:55 +0000
ROA not before: Thu 26 May 2022 08:27:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8866
IP address blocks: 84.40.64.0/18 maxlen: 24
46.249.64.0/19 maxlen: 19
37.157.136.0/21 maxlen: 24
37.157.160.0/19 maxlen: 24
95.87.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 405533302 (0x182bf276)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b12caece23c6adf6917039293e25baaa906ce556
Validity
Not Before: May 26 08:27:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d883ce2fe6a5933bd114ca461c958a894d5f01f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a9:93:53:b8:78:7d:c6:a8:27:99:86:04:a9:
cf:46:90:28:2c:c5:61:c3:c9:84:39:a7:b8:fd:cf:
83:91:13:17:67:10:77:76:65:0d:2d:11:4a:d7:3b:
37:43:96:07:ca:8f:6c:38:98:43:f7:65:49:b4:21:
29:22:f6:1d:2a:98:3a:ec:da:54:15:5c:cb:30:9b:
5e:ea:8a:a4:93:70:26:f0:67:61:32:fc:df:71:71:
85:14:ac:7d:75:28:4d:e8:e8:8c:d7:25:c5:03:ca:
97:d1:13:5e:53:00:39:a3:34:48:c1:f1:cc:c8:d9:
c4:81:a3:ee:0a:bd:0f:ad:5b:b4:af:bc:54:a2:31:
a0:ea:c6:3d:78:ae:dc:15:a0:f0:f8:8e:f7:1b:a5:
e7:66:b4:55:8a:61:a9:b8:ff:96:f7:8a:62:18:74:
42:06:61:3c:26:57:e3:5c:a2:57:11:11:8e:8c:43:
61:17:72:06:ea:47:d6:88:47:94:93:51:e1:38:e2:
14:8d:50:5c:df:32:29:81:06:f4:78:33:0d:72:8b:
b8:1e:a5:99:52:a1:05:29:3a:6f:65:41:56:63:b7:
b1:4f:9d:fc:a8:ea:08:a9:af:d3:cd:54:8c:b3:5c:
8e:c5:77:8a:02:23:c9:0e:c2:97:63:8c:69:15:04:
53:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:83:CE:2F:E6:A5:93:3B:D1:14:CA:46:1C:95:8A:89:4D:5F:01:F5
X509v3 Authority Key Identifier:
keyid:B1:2C:AE:CE:23:C6:AD:F6:91:70:39:29:3E:25:BA:AA:90:6C:E5:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSyuziPGrfaRcDkpPiW6qpBs5VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/28cd48-6a7c-4d05-b4b9-87aa5a2dd122/1/2IPOL-alkzvRFMpGHJWKiU1fAfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/28cd48-6a7c-4d05-b4b9-87aa5a2dd122/1/sSyuziPGrfaRcDkpPiW6qpBs5VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.136.0/21
37.157.160.0/19
46.249.64.0/19
84.40.64.0/18
95.87.192.0/18
Signature Algorithm: sha256WithRSAEncryption
63:64:da:2f:52:48:ae:f8:34:50:50:75:70:ff:d8:b6:be:fb:
8b:b9:3e:94:8a:13:cd:7d:88:22:17:ea:2b:52:81:5d:6a:bd:
58:1e:c5:f3:37:93:7b:7a:dd:1c:40:84:a1:ed:21:c5:9f:c8:
83:3b:ff:1a:a8:e3:f1:a6:0a:43:f1:91:63:a6:37:69:7c:e9:
5c:70:4f:90:25:8f:aa:85:7d:90:f3:84:eb:46:45:34:94:f8:
1f:c6:bc:db:a2:6e:3b:e9:83:fb:06:9b:75:01:69:28:02:b4:
38:8b:0b:16:36:d2:e0:06:6a:9f:ff:f9:f0:b2:18:eb:5f:4a:
b5:f7:c1:17:1e:b0:73:84:72:d3:23:65:67:a0:f7:6b:1d:0e:
ab:a8:c9:02:39:64:00:62:2f:8f:bc:af:d9:df:13:b9:7d:b9:
8b:14:8b:4e:dd:b7:54:65:fb:42:a8:f7:3a:af:df:01:52:3a:
a5:cc:d2:0e:eb:3c:e8:19:93:83:c7:a3:34:17:24:2e:8e:8c:
8a:50:39:ec:79:8d:eb:63:58:44:d8:9e:0e:3e:62:45:38:3e:
5c:85:33:47:1e:98:14:d0:95:9e:dd:7d:c0:2c:7f:72:a9:bf:
19:89:4f:20:20:3d:52:03:29:bd:a4:c7:15:d0:7f:34:62:15:
27:51:9d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:27:20 2025 by rpki-client