Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/rfdo-9tZjARHX4NveRw0hMtJZi0.roa
File: rfdo-9tZjARHX4NveRw0hMtJZi0.roa (raw, json)
Hash identifier: 5ECReeTc1Tc4KP4YsINLVoWJBI6UqeiVxcrFrB9M65o=
Subject key identifier: AD:F7:68:FB:DB:59:8C:04:47:5F:83:6F:79:1C:34:84:CB:49:66:2D
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 019498BC7DA02F9DE4605E3477B8F2635FDF
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/rfdo-9tZjARHX4NveRw0hMtJZi0.roa
Signing time: Fri 24 Jan 2025 14:34:37 +0000
ROA not before: Fri 24 Jan 2025 14:34:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44285
IP address blocks: 37.32.32.0/21 maxlen: 21
37.32.32.0/22 maxlen: 22
37.32.32.0/24 maxlen: 24
37.32.33.0/24 maxlen: 24
37.32.34.0/24 maxlen: 24
37.32.35.0/24 maxlen: 24
37.32.37.0/24 maxlen: 24
37.32.38.0/24 maxlen: 24
37.32.39.0/24 maxlen: 24
37.75.243.0/24 maxlen: 24
37.75.244.0/22 maxlen: 22
37.75.244.0/24 maxlen: 24
37.75.245.0/24 maxlen: 24
37.75.246.0/24 maxlen: 24
37.75.247.0/24 maxlen: 24
45.9.252.0/22 maxlen: 24
45.9.252.0/24 maxlen: 24
45.9.253.0/24 maxlen: 24
45.9.254.0/24 maxlen: 24
45.87.4.0/22 maxlen: 22
45.140.224.0/22 maxlen: 22
46.28.72.0/21 maxlen: 24
46.28.72.0/24 maxlen: 24
46.28.73.0/24 maxlen: 24
46.28.74.0/24 maxlen: 24
78.110.120.0/22 maxlen: 24
84.47.224.0/21 maxlen: 21
84.47.224.0/22 maxlen: 22
84.47.224.0/24 maxlen: 24
84.47.225.0/24 maxlen: 24
84.47.226.0/24 maxlen: 24
84.47.227.0/24 maxlen: 24
84.47.228.0/22 maxlen: 22
84.47.228.0/24 maxlen: 24
84.47.229.0/24 maxlen: 24
84.47.230.0/24 maxlen: 24
84.47.231.0/24 maxlen: 24
85.198.24.0/22 maxlen: 24
88.135.37.0/24 maxlen: 24
88.135.38.0/24 maxlen: 24
88.135.39.0/24 maxlen: 24
91.236.168.0/23 maxlen: 23
91.236.168.0/24 maxlen: 24
91.236.169.0/24 maxlen: 24
185.18.212.0/22 maxlen: 22
185.18.212.0/24 maxlen: 24
185.18.213.0/24 maxlen: 24
185.18.214.0/24 maxlen: 24
185.18.215.0/24 maxlen: 24
185.51.200.0/24 maxlen: 24
185.51.201.0/24 maxlen: 24
185.51.202.0/24 maxlen: 24
185.51.203.0/24 maxlen: 24
185.121.128.0/22 maxlen: 24
185.121.128.0/24 maxlen: 24
185.121.129.0/24 maxlen: 24
185.121.130.0/24 maxlen: 24
185.121.131.0/24 maxlen: 24
185.128.136.0/24 maxlen: 24
185.128.137.0/24 maxlen: 24
185.128.138.0/24 maxlen: 24
185.128.139.0/24 maxlen: 24
185.141.132.0/24 maxlen: 24
185.141.133.0/24 maxlen: 24
185.141.134.0/24 maxlen: 24
185.141.135.0/24 maxlen: 24
185.182.248.0/22 maxlen: 22
185.182.248.0/23 maxlen: 23
185.182.250.0/23 maxlen: 23
185.182.250.0/24 maxlen: 24
185.182.251.0/24 maxlen: 24
188.209.152.0/23 maxlen: 23
195.110.38.0/23 maxlen: 23
195.110.38.0/24 maxlen: 24
195.110.39.0/24 maxlen: 24
217.172.120.0/21 maxlen: 24
217.172.124.0/23 maxlen: 23
217.172.126.0/23 maxlen: 23
217.172.127.0/24 maxlen: 24
2a02:828::/29 maxlen: 29
2a02:828::/32 maxlen: 32
2a02:828::/48 maxlen: 48
2a02:828::/64 maxlen: 64
2a02:828:1::/48 maxlen: 48
2a02:829::/32 maxlen: 32
2a02:82a::/32 maxlen: 32
2a02:82b::/32 maxlen: 32
2a02:82c::/32 maxlen: 32
2a02:82d::/32 maxlen: 32
2a02:82e::/32 maxlen: 32
2a02:82f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:98:bc:7d:a0:2f:9d:e4:60:5e:34:77:b8:f2:63:5f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Jan 24 14:34:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=adf768fbdb598c04475f836f791c3484cb49662d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:71:4d:7e:27:bc:c0:ec:0e:a2:3d:63:0d:ad:
4e:03:17:7e:5d:aa:69:1b:ff:9e:3d:f7:b3:75:54:
e8:85:c5:fc:35:65:11:3c:3d:ee:19:17:05:bf:5c:
9a:9f:e6:7a:2b:07:40:8e:6d:c2:a4:e4:00:67:91:
17:41:e7:2c:2e:a1:a5:20:dc:79:5f:a4:03:ab:44:
aa:13:d9:bd:b5:e3:38:90:94:e8:15:09:b3:d6:06:
d7:8d:57:c4:c0:7e:65:38:d9:d0:92:b3:b7:03:8f:
bd:fd:1d:f6:f2:6d:58:65:62:00:80:5a:f1:46:4e:
b0:ba:27:35:1c:1d:db:5f:42:01:d4:24:cf:d3:30:
be:f7:0a:4b:96:d4:63:2e:12:36:fd:d9:f6:fe:a7:
fc:76:1d:ba:63:cf:78:97:90:02:fc:da:86:c2:6c:
84:82:bc:80:98:97:56:f3:dc:cc:38:e4:d5:42:73:
c4:d4:80:62:8f:5a:25:f0:d8:1f:31:5c:8c:c2:44:
d6:a6:3d:88:5f:16:65:26:3f:d2:3a:bb:20:68:a1:
47:22:55:f9:1e:15:dd:9b:20:45:c9:8e:51:96:15:
92:e2:20:8e:6c:34:e2:de:99:d2:2f:7c:ab:12:f7:
ef:2f:67:d3:6d:09:2b:49:86:14:97:26:a7:62:4a:
f6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F7:68:FB:DB:59:8C:04:47:5F:83:6F:79:1C:34:84:CB:49:66:2D
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/rfdo-9tZjARHX4NveRw0hMtJZi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.32.0/21
37.75.243.0-37.75.247.255
45.9.252.0/22
45.87.4.0/22
45.140.224.0/22
46.28.72.0/21
78.110.120.0/22
84.47.224.0/21
85.198.24.0/22
88.135.37.0-88.135.39.255
91.236.168.0/23
185.18.212.0/22
185.51.200.0/22
185.121.128.0/22
185.128.136.0/22
185.141.132.0/22
185.182.248.0/22
188.209.152.0/23
195.110.38.0/23
217.172.120.0/21
IPv6:
2a02:828::/29
Signature Algorithm: sha256WithRSAEncryption
3a:2b:b7:f5:bd:06:df:f8:eb:50:77:17:76:f4:c9:ba:ae:70:
65:f7:3f:9f:73:d4:d4:f3:96:38:97:4d:e7:00:e2:9c:41:86:
80:bb:cf:51:fd:03:7a:c7:c5:2b:d5:ba:82:fd:9b:07:29:68:
e9:26:20:69:f3:92:b5:e5:01:02:7c:24:38:28:f8:b4:cd:d2:
8a:27:82:21:2d:d8:29:9a:85:28:c6:fb:90:95:99:7c:6a:f6:
96:3e:2e:07:8e:99:91:70:9a:dc:8f:62:44:c0:b1:5c:6f:80:
c6:f8:c8:cd:d5:33:86:0c:44:e1:64:b4:a2:03:af:45:ac:97:
a6:53:3a:5c:2c:38:d4:6a:56:f7:09:ba:9e:3e:11:3f:7e:bc:
1d:9a:fc:2a:14:54:e5:6f:1a:72:3c:87:a2:c0:8e:7f:ae:1e:
34:b8:ad:be:25:f0:3d:bf:5f:6c:e5:43:6f:a9:2c:7f:77:7a:
63:ea:37:e8:fa:cf:43:cf:2c:b7:4c:cf:3a:2d:22:49:6a:c9:
1d:bb:79:9c:a8:58:50:1b:19:3a:28:81:7b:9c:32:f5:7c:a2:
a0:88:7c:be:57:62:e6:5e:3a:6f:52:11:38:c3:e4:a7:3a:3b:
e0:bd:09:9c:3e:5b:2e:18:f7:f4:79:4d:5b:4a:38:15:79:50:
ee:b0:e0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:42 2025 by rpki-client