Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/PJ1oWEK44Zed3KrYQclwt_PzWxI.roa
File: PJ1oWEK44Zed3KrYQclwt_PzWxI.roa (raw, json)
Hash identifier: ndUhprvQgKRMORI6rgSCOBtWuDBA/APXIOBsxX7wUqU=
Subject key identifier: 3C:9D:68:58:42:B8:E1:97:9D:DC:AA:D8:41:C9:70:B7:F3:F3:5B:12
Certificate issuer: /CN=2d1815b0c9dc9ee2207ec9417cdec2bc4be23c61
Certificate serial: 0194274869C529A6304CE15E7BE6060FB73A
Authority key identifier: 2D:18:15:B0:C9:DC:9E:E2:20:7E:C9:41:7C:DE:C2:BC:4B:E2:3C:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRgVsMncnuIgfslBfN7CvEviPGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/PJ1oWEK44Zed3KrYQclwt_PzWxI.roa
Signing time: Thu 02 Jan 2025 13:50:44 +0000
ROA not before: Thu 02 Jan 2025 13:50:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25274
IP address blocks: 37.218.232.0/21 maxlen: 21
45.10.28.0/22 maxlen: 22
45.132.200.0/22 maxlen: 22
45.134.236.0/22 maxlen: 22
45.138.88.0/22 maxlen: 22
45.140.232.0/22 maxlen: 22
85.235.92.0/22 maxlen: 22
109.105.0.0/19 maxlen: 24
185.40.136.0/22 maxlen: 22
185.153.216.0/22 maxlen: 22
2a00:d240::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:69:c5:29:a6:30:4c:e1:5e:7b:e6:06:0f:b7:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1815b0c9dc9ee2207ec9417cdec2bc4be23c61
Validity
Not Before: Jan 2 13:50:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c9d685842b8e1979ddcaad841c970b7f3f35b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1d:c9:a5:17:58:44:cd:a5:8f:1f:21:14:12:
7f:fb:36:ee:33:cd:9b:74:1f:4b:5c:66:2f:17:a2:
4a:64:57:48:4f:39:69:49:ab:ed:38:6e:5a:ab:c4:
81:f7:48:25:b7:6e:a1:3d:5b:ac:2c:92:6c:bc:ef:
0f:7a:0e:a9:69:36:f3:15:4e:48:c1:19:35:d2:12:
05:2f:f9:c7:20:cc:29:7d:b7:aa:10:02:eb:50:d3:
a4:28:66:5b:af:fc:ad:32:2e:3e:9c:68:11:78:35:
e4:09:8d:e3:c2:a6:38:1a:a2:60:16:36:05:91:5b:
cf:b7:1f:b5:33:d6:88:7f:95:cd:6e:ec:c3:15:87:
9e:7c:b2:0f:7c:82:ca:95:e1:87:95:29:ba:3d:36:
88:27:4f:9b:7b:78:c5:fe:03:67:eb:b3:86:8c:c9:
cb:5b:f8:13:3d:43:5c:ba:bb:15:9f:7e:af:f5:6a:
4e:54:a7:cc:a0:85:44:c2:f6:d6:74:80:a7:ee:9f:
06:82:78:03:fc:1c:b6:ca:80:81:11:dc:e6:fe:2d:
20:79:43:1c:2f:05:b6:05:40:00:9b:a1:c7:62:df:
4c:2f:7d:94:0a:1f:6a:49:07:c9:0e:03:b6:19:01:
15:87:45:d8:b1:a1:83:07:a5:0e:52:27:6c:21:63:
c2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9D:68:58:42:B8:E1:97:9D:DC:AA:D8:41:C9:70:B7:F3:F3:5B:12
X509v3 Authority Key Identifier:
keyid:2D:18:15:B0:C9:DC:9E:E2:20:7E:C9:41:7C:DE:C2:BC:4B:E2:3C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRgVsMncnuIgfslBfN7CvEviPGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/PJ1oWEK44Zed3KrYQclwt_PzWxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.218.232.0/21
45.10.28.0/22
45.132.200.0/22
45.134.236.0/22
45.138.88.0/22
45.140.232.0/22
85.235.92.0/22
109.105.0.0/19
185.40.136.0/22
185.153.216.0/22
IPv6:
2a00:d240::/32
Signature Algorithm: sha256WithRSAEncryption
49:0f:18:f3:d6:70:0b:33:ee:d5:00:2e:db:8b:80:5a:22:aa:
55:b0:03:4e:d4:01:de:f1:c5:58:fc:a1:ce:ee:b1:9e:6b:da:
5a:7d:0b:cd:99:a8:59:72:cf:46:c5:25:67:95:cb:ea:8d:78:
37:6d:58:75:d7:e8:af:40:2d:92:e1:b9:09:f3:e1:ed:d2:e3:
28:f5:68:8d:ec:e4:9e:df:ca:22:ec:f3:e2:92:c4:14:3d:59:
8b:9e:cb:07:b8:b3:3a:73:5c:8d:a3:ba:98:96:23:27:62:b9:
b1:79:5a:8b:6f:05:ae:7e:2f:c2:22:05:1e:a0:85:42:69:d8:
ae:60:94:5e:74:74:71:8d:c4:b2:55:52:53:4b:55:51:f2:6b:
50:41:90:cf:c2:9f:75:9a:1c:f4:b6:5d:72:3c:70:ba:4c:45:
4b:4d:24:7c:bf:1b:fa:a2:0a:2e:9d:35:4d:6f:1b:d3:ac:25:
be:c9:b1:52:c3:46:4e:29:ef:3c:a3:fa:ae:69:05:b8:5a:24:
dd:13:b3:fc:67:93:1e:66:83:d7:47:4b:05:8c:57:a3:64:2a:
8c:91:9a:bf:6e:ec:fb:80:d1:ef:07:39:8f:08:0b:9d:4f:bf:
4a:84:a8:0a:fc:44:60:f2:7a:d0:35:6b:84:25:df:9e:39:3f:
ff:16:3a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:41:33 2025 by rpki-client