Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/lIJkLWwcCqaAsoLVf5Q3gQzRxNM.roa
File: lIJkLWwcCqaAsoLVf5Q3gQzRxNM.roa (raw, json)
Hash identifier: 7MD7QxVfYyY6SbVgcdIhsCUEFxN4YRWspB9yVtsTZ/A=
Subject key identifier: 94:82:64:2D:6C:1C:0A:A6:80:B2:82:D5:7F:94:37:81:0C:D1:C4:D3
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0194266B8F8FF85EC934D0FC7E6F40189BA3
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/lIJkLWwcCqaAsoLVf5Q3gQzRxNM.roa
Signing time: Thu 02 Jan 2025 09:49:30 +0000
ROA not before: Thu 02 Jan 2025 09:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56882
IP address blocks: 37.209.160.0/21 maxlen: 21
45.252.236.0/22 maxlen: 22
46.251.252.0/23 maxlen: 23
46.251.254.0/23 maxlen: 23
91.228.91.0/24 maxlen: 24
115.42.52.0/22 maxlen: 22
168.245.196.0/23 maxlen: 23
185.59.64.0/24 maxlen: 24
185.59.65.0/24 maxlen: 24
185.59.66.0/24 maxlen: 24
185.59.67.0/24 maxlen: 24
185.130.152.0/22 maxlen: 22
185.193.8.0/22 maxlen: 22
188.227.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:8f:8f:f8:5e:c9:34:d0:fc:7e:6f:40:18:9b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 09:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9482642d6c1c0aa680b282d57f9437810cd1c4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d3:96:d9:cc:f0:bf:a7:27:64:af:21:14:e0:
f9:8b:48:8e:75:10:80:fe:9d:f9:18:9d:76:fd:ae:
ca:2e:01:1d:00:ca:e4:21:8d:89:61:87:e6:77:75:
0e:9e:ca:47:2b:a7:43:ec:49:a5:28:81:01:7a:fc:
ca:65:7e:fe:31:21:e3:9c:54:00:15:74:3a:72:fd:
f5:f1:a1:ba:fb:ff:f1:ec:33:ff:d2:4d:9d:a1:70:
8a:23:f1:6e:f6:1b:ec:35:f3:3a:15:5e:1f:2b:4e:
de:e9:dc:82:13:a8:0b:8c:5a:fc:89:68:0b:4c:63:
ee:de:de:65:c6:83:52:34:10:ad:84:bd:90:26:4c:
cf:d5:98:62:4c:05:6f:34:2c:18:7d:50:bb:7b:7a:
b8:e2:be:4c:10:39:5d:52:dc:1a:18:92:09:56:49:
94:c1:7e:cf:9c:67:8a:6e:02:cb:ef:ac:11:43:a6:
cb:19:46:ac:bb:00:35:27:2b:e5:6c:c8:ab:8f:0e:
84:c1:04:ab:5b:60:b1:41:3c:d6:fe:40:f5:58:c3:
41:53:63:c5:14:e1:43:df:4b:3d:09:ab:22:56:6c:
f3:36:34:11:5f:43:ed:51:3d:7e:e7:62:a0:7c:7f:
96:75:11:9e:cc:e4:78:8f:bc:10:74:71:7e:81:0a:
72:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:82:64:2D:6C:1C:0A:A6:80:B2:82:D5:7F:94:37:81:0C:D1:C4:D3
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/lIJkLWwcCqaAsoLVf5Q3gQzRxNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.160.0/21
45.252.236.0/22
46.251.252.0/22
91.228.91.0/24
115.42.52.0/22
168.245.196.0/23
185.59.64.0/22
185.130.152.0/22
185.193.8.0/22
188.227.128.0/19
Signature Algorithm: sha256WithRSAEncryption
48:ed:41:5f:2e:b8:ba:c1:20:e9:ea:b0:47:60:3d:24:fa:45:
6e:f3:d7:46:6d:e1:e8:2e:f0:e8:16:eb:1f:9b:e9:95:f3:18:
01:f7:e3:1a:e4:be:36:f7:33:d0:a5:51:18:f6:4a:39:fe:d3:
68:65:10:4b:35:e9:e8:d8:5a:14:82:70:74:05:c9:cc:26:16:
04:1e:57:68:b9:b7:d7:b5:c6:cb:28:d8:30:63:24:c2:1f:6d:
55:45:b4:c4:5b:3b:a9:a5:c2:ac:db:28:bd:25:bf:de:ca:a4:
a0:d5:45:5a:68:80:6d:f5:36:52:a3:54:fa:51:00:86:38:50:
06:57:65:18:a7:13:24:5d:d1:e8:f6:bc:df:39:e8:46:2c:45:
eb:43:fd:13:70:8a:14:45:e1:ee:c1:51:03:bd:59:bf:89:83:
f0:e4:d2:90:95:3e:5a:d6:d3:d8:70:0b:6f:75:df:12:d5:21:
0d:92:7b:04:7b:96:f2:b6:69:ed:b9:52:c5:4a:d9:49:69:30:
57:06:c2:0a:79:b2:b2:e8:a9:bd:6a:e3:f5:d3:36:84:8d:82:
5a:bd:11:c4:82:6f:03:2a:1f:eb:57:08:78:b0:db:8c:dd:ce:
2d:66:6d:47:f2:45:b8:57:d2:ba:55:bd:d3:e4:d9:31:ee:41:
6c:c8:fa:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:20:20 2025 by rpki-client