Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/3vMVhDVuSakGpKEegLzmX9CZn_0.roa
File: 3vMVhDVuSakGpKEegLzmX9CZn_0.roa (raw, json)
Hash identifier: 0WA7LBg+VlA+MYR6g5nbmdux2cCvdzgMgFAqrxmL/5k=
Subject key identifier: DE:F3:15:84:35:6E:49:A9:06:A4:A1:1E:80:BC:E6:5F:D0:99:9F:FD
Certificate issuer: /CN=7135e3894634482b08317775c79657e9b8312d4d
Certificate serial: 019426D993F42B3C30FBDE3604E1F38A7910
Authority key identifier: 71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/3vMVhDVuSakGpKEegLzmX9CZn_0.roa
Signing time: Thu 02 Jan 2025 11:49:40 +0000
ROA not before: Thu 02 Jan 2025 11:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41354
IP address blocks: 137.22.160.0/19 maxlen: 19
149.106.160.0/19 maxlen: 19
185.20.128.0/22 maxlen: 22
185.127.192.0/23 maxlen: 23
185.127.194.0/23 maxlen: 23
185.179.120.0/22 maxlen: 22
185.207.68.0/22 maxlen: 22
212.82.64.0/19 maxlen: 19
2a04:1700::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:93:f4:2b:3c:30:fb:de:36:04:e1:f3:8a:79:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7135e3894634482b08317775c79657e9b8312d4d
Validity
Not Before: Jan 2 11:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=def31584356e49a906a4a11e80bce65fd0999ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:69:cf:0a:4a:0a:f3:14:2b:29:1c:e6:b9:f3:
84:8e:45:6f:6a:63:27:53:9a:15:1b:1a:7a:e8:2a:
43:30:dd:41:9d:91:11:6e:fc:c3:6e:eb:ae:27:e8:
17:ea:28:d7:e5:10:5e:4b:b2:f9:f2:e0:66:a0:7f:
cf:b0:07:1f:2a:2a:93:ea:ec:98:c2:d1:f3:09:88:
ab:d6:dc:e4:f2:df:95:c0:07:fd:4a:20:ab:f2:29:
48:78:91:03:4a:d7:0d:4c:b2:d1:2e:6f:aa:c3:21:
fc:ea:b1:ce:13:45:71:e1:4f:34:10:fb:e5:e4:90:
0d:b4:9d:76:44:7f:ba:6d:2c:1c:a5:c6:cf:fc:0b:
45:91:2d:e2:fa:1e:14:62:fd:24:fa:40:b3:64:6d:
78:37:ba:0a:5e:74:1c:68:98:d2:c3:98:f7:ff:5a:
4d:67:55:f9:6e:80:7b:cf:51:89:f7:71:13:02:32:
4d:50:3a:53:9e:b2:69:ef:3c:04:29:20:db:27:1b:
2b:c2:8c:9e:58:26:1d:40:73:d0:88:0f:40:8e:a8:
21:fe:0d:36:97:e5:60:5d:0d:eb:4a:40:57:90:f9:
54:2c:f1:c9:38:46:b7:6f:cf:63:3a:35:60:ef:d1:
90:71:29:51:c7:c4:82:6b:12:93:3e:ea:fd:0a:13:
8f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F3:15:84:35:6E:49:A9:06:A4:A1:1E:80:BC:E6:5F:D0:99:9F:FD
X509v3 Authority Key Identifier:
keyid:71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/3vMVhDVuSakGpKEegLzmX9CZn_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.22.160.0/19
149.106.160.0/19
185.20.128.0/22
185.127.192.0/22
185.179.120.0/22
185.207.68.0/22
212.82.64.0/19
IPv6:
2a04:1700::/29
Signature Algorithm: sha256WithRSAEncryption
79:a1:d4:a8:8c:c3:6b:58:2e:49:7b:fc:e4:69:cf:9c:37:fd:
a0:e2:0c:ce:32:86:7a:7c:bc:c7:d2:fe:3d:f6:58:f4:80:2c:
82:8e:b4:2e:69:0f:50:7d:07:a6:92:9d:e6:63:58:60:79:e5:
ca:8b:2a:02:5a:d0:d5:9d:81:81:fd:cd:bb:22:3e:4e:73:df:
fc:37:00:cd:57:53:52:6c:98:bd:08:17:2c:2b:0c:d7:74:79:
fe:0e:c4:be:99:c2:74:b0:b5:a9:bd:e7:ab:ef:29:cd:2b:3f:
31:42:a7:9c:4a:37:e7:5a:b6:b2:0c:a5:61:04:5d:3b:a6:20:
df:dc:ca:0f:28:74:48:06:20:3d:0c:02:9c:cd:50:45:c1:ef:
ad:a5:a1:d7:bf:b0:d9:74:64:4f:aa:8e:e7:19:2b:b3:c2:d2:
28:84:48:b7:46:f5:3a:6c:a5:c7:5f:24:d0:65:39:ea:9a:70:
b5:8e:70:ac:ba:55:03:a8:bb:27:b6:48:03:32:e0:88:e8:c5:
d6:03:1f:6d:4a:48:b5:10:55:c3:dd:e3:1a:b8:3b:18:50:98:
d7:53:34:30:66:f8:18:41:bc:51:3b:ab:c8:d4:79:ec:50:ac:
40:07:e2:46:c2:a2:33:43:55:35:3d:2e:01:7f:d8:b9:79:13:
03:4f:3f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:46:43 2025 by rpki-client