Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/1Q8S-F04ndhiDn0SGwOoAJvpcJE.roa
File: 1Q8S-F04ndhiDn0SGwOoAJvpcJE.roa (raw, json)
Hash identifier: C3Etga/0CnN14pA6mDGityRvYUsO547YlA3aweNBuiE=
Subject key identifier: D5:0F:12:F8:5D:38:9D:D8:62:0E:7D:12:1B:03:A8:00:9B:E9:70:91
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 019423D7017AD12DBEE3846C02D9DB051359
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/1Q8S-F04ndhiDn0SGwOoAJvpcJE.roa
Signing time: Wed 01 Jan 2025 21:48:00 +0000
ROA not before: Wed 01 Jan 2025 21:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206065
IP address blocks: 37.32.36.0/22 maxlen: 24
45.140.228.0/22 maxlen: 22
45.156.180.0/22 maxlen: 22
45.156.192.0/22 maxlen: 22
45.156.194.0/23 maxlen: 24
85.198.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:01:7a:d1:2d:be:e3:84:6c:02:d9:db:05:13:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Jan 1 21:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d50f12f85d389dd8620e7d121b03a8009be97091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:83:7c:0f:6c:f8:f6:dd:03:4f:ce:a5:6f:6c:
fc:ca:8b:e5:6b:ee:93:7e:c0:af:df:d5:1f:ae:a4:
df:be:7f:7f:86:6e:5d:64:8d:36:ac:70:10:a5:33:
c2:ed:d1:17:d0:43:1c:7f:d6:27:99:62:20:fb:b9:
df:3e:97:56:0b:b9:22:07:9a:81:aa:f7:da:d4:fa:
55:70:a1:f2:5a:30:2b:2b:c0:e9:74:a4:04:22:0c:
16:3f:06:90:07:56:b0:4c:de:40:f4:58:72:8e:61:
66:f8:61:58:18:a6:23:5f:a0:a1:ca:2f:20:ae:cb:
16:d2:32:c0:ff:f6:d5:e9:81:04:c9:92:00:ad:31:
05:b7:7a:68:66:01:09:6b:b1:0d:ed:cb:1c:8c:1f:
1f:61:c1:3d:b8:a4:e2:fe:0c:46:4b:b8:f1:1d:02:
a9:30:40:fc:d8:76:b7:9c:17:73:f9:23:8a:d1:51:
c4:4e:4e:33:21:b6:04:08:32:91:9f:50:6d:88:92:
ec:66:6f:1c:fb:a3:20:57:e3:d7:d0:34:98:dc:db:
bd:71:3c:cc:af:6a:98:b0:85:f5:5d:43:07:4f:15:
7d:e1:57:2b:a6:75:ff:b4:3f:b9:1a:7b:0f:10:68:
ca:9a:18:45:3d:7e:80:ca:a6:e4:15:f7:6d:0c:d0:
cc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0F:12:F8:5D:38:9D:D8:62:0E:7D:12:1B:03:A8:00:9B:E9:70:91
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/1Q8S-F04ndhiDn0SGwOoAJvpcJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.36.0/22
45.140.228.0/22
45.156.180.0/22
45.156.192.0/22
85.198.48.0/20
Signature Algorithm: sha256WithRSAEncryption
2b:61:3e:0e:1f:45:22:81:4f:f2:1e:52:73:67:71:5b:e2:a1:
54:7a:37:ad:85:fb:7b:b6:23:d0:26:11:ff:bf:a4:e1:a1:93:
2d:53:cc:18:d0:65:da:ea:34:ca:8f:2b:7d:9d:45:a4:71:a7:
cb:91:66:c0:b9:e9:92:c6:9e:5c:e4:bb:4f:dd:91:bf:bd:20:
1f:e5:e4:0d:a5:8b:1f:36:2f:6e:e1:10:ad:b5:17:58:d4:b5:
77:0b:a6:8a:f6:68:0a:56:e3:f9:c0:15:f7:88:7b:58:71:56:
11:ec:4d:82:37:5c:12:96:69:22:23:3d:4c:ea:2c:ca:09:58:
e0:56:68:f4:67:34:e9:cc:b4:2b:1c:ef:d7:01:7e:df:bb:87:
68:d9:bb:79:fa:a8:ef:98:65:19:88:ee:df:d0:84:43:7f:c4:
66:46:a7:f2:05:e2:b2:30:29:81:3b:36:13:d1:f6:2b:2e:f1:
65:b0:56:ea:31:e4:99:24:98:d8:d6:9e:4c:9e:af:34:b3:b8:
9e:64:59:9d:99:cc:f5:f7:ba:6c:a3:0e:21:28:5b:88:3c:dc:
7a:2b:24:fa:d5:fc:2f:8a:0a:68:bc:7c:51:07:09:c8:79:01:
7a:8d:95:20:ca:63:43:49:23:f8:60:ec:78:d2:2c:8b:b7:6c:
45:c1:cc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 11:06:23 2025 by rpki-client