Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/Vmwsf00DfqOwuLyDtJ5jOR7xMVY.roa
File: Vmwsf00DfqOwuLyDtJ5jOR7xMVY.roa (raw, json)
Hash identifier: P2Qrd2w/dVDOjboJIyQokkF6gW9skwfXbb15mFHi7ww=
Subject key identifier: 56:6C:2C:7F:4D:03:7E:A3:B0:B8:BC:83:B4:9E:63:39:1E:F1:31:56
Certificate issuer: /CN=0594f4a9b6b7fd82dd6f2fdbf393abeadd347fd1
Certificate serial: 019421B1A5FAA6BE38321CFE2E7CDE2E7F64
Authority key identifier: 05:94:F4:A9:B6:B7:FD:82:DD:6F:2F:DB:F3:93:AB:EA:DD:34:7F:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/Vmwsf00DfqOwuLyDtJ5jOR7xMVY.roa
Signing time: Wed 01 Jan 2025 11:47:58 +0000
ROA not before: Wed 01 Jan 2025 11:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39392
IP address blocks: 37.235.96.0/20 maxlen: 20
46.234.96.0/19 maxlen: 19
46.234.121.0/24 maxlen: 24
88.86.96.0/19 maxlen: 19
95.168.192.0/19 maxlen: 19
95.168.223.0/24 maxlen: 24
2a01:28::/32 maxlen: 32
2a01:28:eeee::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:a5:fa:a6:be:38:32:1c:fe:2e:7c:de:2e:7f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0594f4a9b6b7fd82dd6f2fdbf393abeadd347fd1
Validity
Not Before: Jan 1 11:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=566c2c7f4d037ea3b0b8bc83b49e63391ef13156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:02:73:fb:f0:aa:06:8a:ab:17:00:af:78:1e:
00:c4:07:a9:c8:66:73:5c:24:79:46:03:41:31:7c:
d7:73:28:ae:63:9f:94:a0:b2:56:04:05:2e:2f:45:
a3:f5:55:11:02:74:5e:37:93:66:39:78:dd:65:89:
09:1e:07:bd:a4:de:7a:8c:c2:c9:4b:18:f6:5c:3f:
ef:8e:5f:db:5b:17:06:13:10:07:90:b3:9e:fc:16:
b6:77:b8:18:d4:ff:54:b1:3d:f8:b3:b0:5a:75:d5:
b5:6d:36:ed:c2:af:1b:e5:cd:ee:1b:5c:2c:77:45:
13:cb:28:50:85:11:e7:44:42:b3:96:cc:fc:30:50:
c9:91:bc:00:c6:2b:8d:f6:cc:30:be:8e:10:15:8b:
87:8d:b8:7b:8d:c5:1d:30:ed:f6:40:ab:25:c4:2c:
96:d8:35:6c:e0:45:dd:df:ac:67:f5:eb:51:89:f0:
11:44:90:8e:cf:00:72:82:cb:1a:a2:b7:f8:82:d9:
32:80:ed:d0:d2:47:db:23:5c:bb:1c:1c:81:9e:11:
33:b0:3d:bd:2c:25:21:55:39:b9:c4:f5:e6:83:1e:
3d:1a:91:6e:f6:01:6d:bc:9c:d4:67:7c:c4:45:21:
4f:87:34:2e:62:28:d3:68:39:35:58:26:1d:a6:49:
d3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6C:2C:7F:4D:03:7E:A3:B0:B8:BC:83:B4:9E:63:39:1E:F1:31:56
X509v3 Authority Key Identifier:
keyid:05:94:F4:A9:B6:B7:FD:82:DD:6F:2F:DB:F3:93:AB:EA:DD:34:7F:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/Vmwsf00DfqOwuLyDtJ5jOR7xMVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.96.0/20
46.234.96.0/19
88.86.96.0/19
95.168.192.0/19
IPv6:
2a01:28::/32
Signature Algorithm: sha256WithRSAEncryption
40:63:41:8f:49:14:4d:8e:b8:b4:4d:76:3c:16:de:be:f0:8c:
69:ac:62:af:53:83:da:7d:00:9c:94:da:4d:33:81:25:1e:70:
99:b4:f5:b7:04:54:0a:a1:c8:ce:f4:2c:55:0c:48:4f:e7:e9:
a1:13:60:f1:99:1f:73:f9:9d:40:de:cd:e2:c3:66:f2:ee:f3:
01:4a:38:75:0a:ed:ac:54:58:be:62:5d:ef:bd:98:70:e6:75:
2d:a5:84:5e:7a:b4:f7:b3:73:11:4b:11:1e:d2:25:24:aa:77:
be:b8:d3:b5:50:fa:00:db:69:20:f2:e6:f6:11:f0:2c:a8:d3:
51:77:2b:55:6a:b1:7c:8b:c1:02:bf:1f:c6:39:34:a5:30:f8:
28:d4:be:b1:de:6d:16:7c:17:f4:2f:da:ac:49:e9:e5:d4:b0:
39:c5:61:20:c0:5c:8b:5f:05:8e:60:e7:ef:27:9c:7a:18:74:
e3:6a:0f:82:d9:e8:5f:fd:96:52:72:50:79:f7:8b:11:e4:df:
0e:e5:9e:b7:73:91:66:bd:02:71:9c:7e:0d:25:56:38:b6:2e:
5f:5f:14:0d:d2:b7:a7:68:67:66:4d:f8:39:1d:cd:f9:ff:e1:
d1:d4:01:02:a4:2b:f6:47:b2:89:f4:4d:d0:d5:ef:6a:6d:27:
0a:36:79:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:37:51 2025 by rpki-client