Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2095e6-6688-4582-bb20-437f1579494c/1/m7NneGU2HraHtdbdPDYWaWfE_XQ.roa
File: m7NneGU2HraHtdbdPDYWaWfE_XQ.roa (raw, json)
Hash identifier: f1tgjaVfaHHkD0RQZlUIhlANoRx+oht6Letrm/y2MSQ=
Subject key identifier: 9B:B3:67:78:65:36:1E:B6:87:B5:D6:DD:3C:36:16:69:67:C4:FD:74
Certificate issuer: /CN=be05fdc3bface13274c33a2b6b105f2e28a05535
Certificate serial: 1B07CFCE
Authority key identifier: BE:05:FD:C3:BF:AC:E1:32:74:C3:3A:2B:6B:10:5F:2E:28:A0:55:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgX9w7-s4TJ0wzoraxBfLiigVTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2095e6-6688-4582-bb20-437f1579494c/1/m7NneGU2HraHtdbdPDYWaWfE_XQ.roa
Signing time: Sat 01 Jan 2022 12:00:52 +0000
ROA not before: Sat 01 Jan 2022 12:00:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62192
IP address blocks: 185.44.140.0/22 maxlen: 22
37.140.204.0/22 maxlen: 22
185.12.204.0/22 maxlen: 22
37.140.200.0/24 maxlen: 24
37.140.203.0/24 maxlen: 24
37.140.202.0/24 maxlen: 24
37.140.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453496782 (0x1b07cfce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be05fdc3bface13274c33a2b6b105f2e28a05535
Validity
Not Before: Jan 1 12:00:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9bb3677865361eb687b5d6dd3c36166967c4fd74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7e:d9:a9:bc:24:08:8a:9c:9d:a7:5a:79:52:
d3:d5:89:bd:31:0f:fc:b2:38:20:5c:7d:f7:14:02:
18:56:31:ad:c9:fc:b1:bd:72:3e:a7:81:2d:a6:f9:
41:04:6a:f6:e5:37:c9:e1:37:d8:b3:11:e4:74:0a:
80:75:65:0e:ca:2e:7f:6b:58:82:ad:b6:e2:ac:99:
ca:aa:dc:e1:74:78:74:18:b0:27:86:b7:56:73:f5:
fb:20:53:fb:4e:eb:6c:a2:e6:c8:56:f8:1d:56:0a:
41:c4:fd:fb:04:11:8d:c2:60:4c:e3:96:f5:cf:a8:
23:10:89:83:e2:c3:73:de:2a:28:eb:d7:3a:14:f8:
c4:ec:0e:9d:44:4c:7c:81:09:8b:87:df:91:06:fa:
33:d4:82:91:b1:4f:25:eb:20:c8:7e:b4:85:31:cc:
c0:1d:81:a2:7f:5d:03:7f:97:34:4b:69:d9:a2:dc:
e7:c3:3d:22:7e:45:f6:8c:46:7e:5d:8e:e5:75:34:
32:89:57:a6:89:dd:d9:5a:2a:50:ec:c3:2b:da:ba:
8c:46:e2:ba:4b:d7:12:28:3c:c5:91:26:92:32:e6:
56:9e:c2:68:d5:5f:6f:16:8e:ba:76:a4:68:fb:22:
b0:89:5d:68:db:57:a8:2a:66:01:3c:6f:7d:12:c7:
07:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B3:67:78:65:36:1E:B6:87:B5:D6:DD:3C:36:16:69:67:C4:FD:74
X509v3 Authority Key Identifier:
keyid:BE:05:FD:C3:BF:AC:E1:32:74:C3:3A:2B:6B:10:5F:2E:28:A0:55:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgX9w7-s4TJ0wzoraxBfLiigVTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2095e6-6688-4582-bb20-437f1579494c/1/m7NneGU2HraHtdbdPDYWaWfE_XQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2095e6-6688-4582-bb20-437f1579494c/1/vgX9w7-s4TJ0wzoraxBfLiigVTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.200.0/21
185.12.204.0/22
185.44.140.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:01:60:1e:1e:91:4d:6e:a2:8a:79:a7:fa:3c:1b:d4:51:c4:
af:ae:bc:5c:2d:e1:fa:e8:8f:2a:cb:65:8f:2e:1f:0e:34:13:
29:49:d7:81:99:de:97:51:bd:60:b3:a7:7a:81:6f:31:60:6e:
9a:c3:5c:46:91:96:25:3e:02:90:c9:c7:e0:bb:d3:9d:53:3f:
44:2c:7c:16:ca:bc:fe:b8:3c:f1:43:c3:21:54:24:bf:72:52:
56:f0:47:d9:72:aa:af:a8:ca:ad:95:26:70:c5:f5:75:e5:08:
97:9a:22:1b:a4:2c:1c:25:b3:05:67:a3:90:64:1d:2e:ce:7f:
fc:45:15:4c:0c:0d:85:16:bc:d9:40:c4:4f:80:6f:12:6e:16:
9e:59:92:ee:94:17:3a:21:b4:cf:e0:7c:13:f8:1b:19:09:45:
f8:cc:0f:1a:ff:5b:e7:bc:f9:cb:5b:b2:93:5f:46:d2:62:ca:
55:26:c4:be:19:b5:45:86:0d:ee:dc:ca:20:12:34:13:9f:56:
07:b5:71:81:d8:f1:92:23:de:0c:79:f6:90:49:94:02:8b:35:
0a:cd:9c:4f:dc:54:e1:2e:6c:8c:e7:0e:32:23:10:40:66:ab:
5a:2b:d8:99:11:39:df:80:4f:86:22:b0:17:8a:30:74:90:f3:
7a:af:67:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:33:24 2025 by rpki-client