Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/6DEouzxjjNK_68sFR-t4CPN-SS8.roa
File: 6DEouzxjjNK_68sFR-t4CPN-SS8.roa (raw, json)
Hash identifier: Oi8D+F91F2i7lr20xSQLbZgZOtgMLQbrK5SvQlzaitc=
Subject key identifier: E8:31:28:BB:3C:63:8C:D2:BF:EB:CB:05:47:EB:78:08:F3:7E:49:2F
Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Certificate serial: 0194266C188B23B54259A323E0DF7FC8AB8D
Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/6DEouzxjjNK_68sFR-t4CPN-SS8.roa
Signing time: Thu 02 Jan 2025 09:50:05 +0000
ROA not before: Thu 02 Jan 2025 09:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12850
IP address blocks: 37.139.88.0/21 maxlen: 21
80.247.64.0/20 maxlen: 20
87.248.32.0/19 maxlen: 19
87.248.41.0/24 maxlen: 24
178.239.176.0/20 maxlen: 20
185.21.172.0/22 maxlen: 22
185.48.32.0/22 maxlen: 23
212.29.128.0/19 maxlen: 19
212.91.64.0/19 maxlen: 19
2001:4d38::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:18:8b:23:b5:42:59:a3:23:e0:df:7f:c8:ab:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Validity
Not Before: Jan 2 09:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e83128bb3c638cd2bfebcb0547eb7808f37e492f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bb:d4:b5:b2:a7:9f:27:25:76:4d:59:5f:8c:
e5:78:bf:09:cf:84:ad:71:fc:bd:d9:23:c9:b5:69:
9f:69:14:17:fa:32:03:9c:b1:d4:86:cb:8b:a4:64:
9f:f1:55:48:07:49:ad:2e:45:b6:57:d9:e3:22:a3:
6e:8c:b6:bd:b5:4a:26:ea:a2:84:81:2e:20:08:8e:
05:2e:94:73:d6:4e:54:66:0d:75:52:43:9b:ee:d9:
6a:1a:e5:22:41:cb:3c:69:22:73:58:f0:d2:e4:a1:
24:73:e2:78:50:0f:f0:e7:82:5c:08:65:65:d2:22:
fe:de:1d:55:22:c5:b4:a2:16:1b:ba:cd:ee:6a:0d:
25:c7:36:94:99:f7:12:55:25:c4:6a:9b:b4:a5:87:
a1:f3:1c:53:12:c8:f1:b7:42:6d:e9:ed:d5:57:63:
e3:ee:84:cc:24:cd:6b:74:7e:45:32:e5:48:f7:2a:
5d:db:57:47:f8:73:08:10:65:27:70:67:97:f2:f8:
4a:59:9e:af:75:2f:e4:fa:df:66:41:d5:8a:72:44:
4e:77:68:a0:8d:ae:e2:d3:af:64:f1:9a:28:42:3e:
24:50:ca:0f:9e:d1:32:14:3b:08:0f:da:ee:12:21:
f5:03:3d:9b:9b:2c:a0:bf:ce:a2:df:c3:d6:a9:63:
35:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:31:28:BB:3C:63:8C:D2:BF:EB:CB:05:47:EB:78:08:F3:7E:49:2F
X509v3 Authority Key Identifier:
keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/6DEouzxjjNK_68sFR-t4CPN-SS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.88.0/21
80.247.64.0/20
87.248.32.0/19
178.239.176.0/20
185.21.172.0/22
185.48.32.0/22
212.29.128.0/19
212.91.64.0/19
IPv6:
2001:4d38::/32
Signature Algorithm: sha256WithRSAEncryption
26:cc:f1:22:9d:c1:0a:fd:09:36:ee:43:34:30:dd:a2:ca:12:
df:54:3d:b1:75:58:b4:36:8b:c0:73:29:6f:e9:2f:8b:98:30:
eb:c9:13:ed:0e:aa:7c:33:68:c1:00:30:95:a8:8f:87:70:a3:
4a:2d:de:57:c6:2b:69:df:4c:40:ce:ff:35:31:60:53:60:7f:
68:02:dc:d9:b7:01:da:cc:84:06:f9:d6:b6:46:c1:26:1b:05:
42:c1:3c:48:43:6d:99:54:b5:64:18:c8:7a:ac:7c:1a:3e:23:
3a:53:f6:2b:b5:4c:be:20:42:94:90:58:ae:14:05:45:ba:8d:
a3:92:57:9c:e5:21:c9:b8:74:ea:34:39:64:b4:69:98:6a:8c:
e4:ed:91:5d:d6:5a:87:b3:58:63:53:6f:8c:9f:20:61:2a:38:
95:dd:91:3e:09:16:09:e9:a7:f9:62:72:76:90:55:93:82:bf:
77:98:f6:75:22:84:8d:30:d9:28:4c:b0:ec:7f:1d:00:03:4a:
25:88:fc:6b:8a:f2:25:97:72:e2:55:4f:ff:57:19:3e:fe:97:
e0:29:20:da:1c:3f:14:3f:4c:4d:3c:fc:5f:3b:38:80:2c:d3:
3d:e2:3c:4f:bb:7d:80:b0:b7:94:e3:88:02:cd:2f:f5:39:49:
cd:ed:16:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:56:20 2025 by rpki-client