Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/iGx0ASbC0IY_V38PaAKzK-E2dmk.roa
File: iGx0ASbC0IY_V38PaAKzK-E2dmk.roa (raw, json)
Hash identifier: H2ehYzvvVTx5ItHmx2FObso7EsAZmXEeB6Z16rR/dFQ=
Subject key identifier: 88:6C:74:01:26:C2:D0:86:3F:57:7F:0F:68:02:B3:2B:E1:36:76:69
Certificate issuer: /CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Certificate serial: 019426D914FE44A3E244E5574AAD6FBEA2B6
Authority key identifier: BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/iGx0ASbC0IY_V38PaAKzK-E2dmk.roa
Signing time: Thu 02 Jan 2025 11:49:08 +0000
ROA not before: Thu 02 Jan 2025 11:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41202
IP address blocks: 37.110.208.0/21 maxlen: 21
37.110.208.0/22 maxlen: 22
37.110.208.0/24 maxlen: 24
37.110.210.0/24 maxlen: 24
37.110.212.0/22 maxlen: 22
37.110.214.0/24 maxlen: 24
37.110.215.0/24 maxlen: 24
185.183.240.0/22 maxlen: 22
185.183.240.0/23 maxlen: 23
185.183.240.0/24 maxlen: 24
185.183.242.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:14:fe:44:a3:e2:44:e5:57:4a:ad:6f:be:a2:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Validity
Not Before: Jan 2 11:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=886c740126c2d0863f577f0f6802b32be1367669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bb:46:ac:d9:77:ac:b7:de:a0:db:49:55:a6:
41:13:c6:3f:74:67:75:06:a1:7e:58:37:34:84:ce:
0a:58:10:46:25:98:69:27:98:fe:36:1f:73:70:12:
52:dc:cd:71:dd:46:ba:9a:e4:b4:67:13:a7:59:3b:
c8:6f:ef:f2:e2:ac:a1:72:15:43:c4:34:85:9d:33:
eb:cd:c0:fd:38:42:8d:37:01:02:05:09:83:84:09:
71:9d:a6:79:d9:49:bc:49:4d:0b:4b:ef:43:6e:f7:
ae:c1:7a:59:bd:bd:0b:d9:ea:92:d6:c5:77:97:aa:
c3:8c:b1:0e:80:4b:dc:c7:1f:e5:01:25:88:c4:92:
20:e5:35:8b:45:02:36:f6:0c:9f:6c:a3:80:6c:9d:
ba:53:98:f7:91:c3:f0:3d:4a:ee:5f:2c:85:50:22:
4e:f5:96:19:ee:0c:04:eb:ba:d1:a3:73:48:8e:cd:
90:0a:03:98:23:4f:3d:96:09:7d:8f:f8:db:27:7e:
2e:a2:df:14:25:b6:2e:5d:d3:c2:8b:5a:ff:a1:ab:
61:60:15:c0:ac:76:73:fb:3f:ce:71:76:c1:36:b3:
28:89:9e:04:66:b6:39:41:06:a4:67:97:6d:54:6e:
67:17:59:73:92:3f:5c:3e:64:fb:b0:45:e4:87:83:
d4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6C:74:01:26:C2:D0:86:3F:57:7F:0F:68:02:B3:2B:E1:36:76:69
X509v3 Authority Key Identifier:
keyid:BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/iGx0ASbC0IY_V38PaAKzK-E2dmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.110.208.0/21
185.183.240.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:0f:ca:2d:58:ae:2b:c6:90:38:09:10:d1:fe:64:5b:d7:7e:
fb:de:53:ee:66:1e:a4:56:62:9c:02:35:fd:18:32:19:30:d8:
17:0b:e2:6b:b0:5b:af:48:50:41:0f:2a:d2:92:5b:37:1e:fa:
5b:dd:0b:92:c9:f8:50:bf:84:a4:16:d1:1a:38:2a:f9:1c:39:
0a:22:4b:61:ce:b5:8c:b7:c9:20:ba:6c:17:18:a5:db:d6:db:
c6:b5:6b:77:03:89:ff:65:f4:97:3b:76:58:66:bf:24:7a:cd:
53:a4:24:35:e2:84:1b:dd:67:d2:a1:3b:b7:6f:d3:51:d8:91:
97:c9:a6:69:95:ef:8f:aa:6f:6b:7b:be:b8:73:90:99:ba:a3:
c1:ab:4b:4f:e0:15:d8:f7:07:be:d9:9e:9d:cc:f9:ca:6d:b4:
e2:7b:ed:32:ca:8b:ab:ef:5c:ab:61:a7:00:96:88:2c:28:99:
53:2d:48:b2:72:bb:61:b6:c0:1b:6c:b0:5f:2c:ab:21:91:97:
a1:92:a6:8d:c1:06:76:69:1c:c5:3a:8b:82:87:ab:55:db:f6:
b5:9d:bc:0e:7a:cd:ee:7b:af:4b:02:47:29:ec:28:b9:73:2c:
cc:b0:8a:11:d8:66:a2:2c:c2:4d:99:59:e9:86:da:a0:f7:ba:
6c:5c:65:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:22 2025 by rpki-client