Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/P9x64-P6Zc5aUoIHika_YUJSpL4.roa
File: P9x64-P6Zc5aUoIHika_YUJSpL4.roa (raw, json)
Hash identifier: wA4s5vuet/tgGLY4KlSltkNzg/nbmHYvEtESrfXIJ8U=
Subject key identifier: 3F:DC:7A:E3:E3:FA:65:CE:5A:52:82:07:8A:46:BF:61:42:52:A4:BE
Certificate issuer: /CN=942f565ed16d8c337a8c8ab3cdc572ef1150f5a9
Certificate serial: 019421B21DCCF1B2FFBA3759BBE48FD6463A
Authority key identifier: 94:2F:56:5E:D1:6D:8C:33:7A:8C:8A:B3:CD:C5:72:EF:11:50:F5:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/P9x64-P6Zc5aUoIHika_YUJSpL4.roa
Signing time: Wed 01 Jan 2025 11:48:28 +0000
ROA not before: Wed 01 Jan 2025 11:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39180
IP address blocks: 37.148.240.0/21 maxlen: 21
81.18.176.0/20 maxlen: 20
93.191.40.0/21 maxlen: 21
178.18.48.0/20 maxlen: 20
185.29.64.0/23 maxlen: 23
185.153.244.0/22 maxlen: 22
188.93.40.0/21 maxlen: 21
2a01:378::/32 maxlen: 32
2a01:379::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:1d:cc:f1:b2:ff:ba:37:59:bb:e4:8f:d6:46:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942f565ed16d8c337a8c8ab3cdc572ef1150f5a9
Validity
Not Before: Jan 1 11:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fdc7ae3e3fa65ce5a5282078a46bf614252a4be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0e:e0:98:c4:e5:04:a1:6e:11:c9:e9:83:28:
17:d4:92:73:ea:b4:a1:a4:4f:fc:5b:bb:07:a5:ac:
b0:af:ba:d5:04:19:4d:62:75:a3:e7:5e:d7:98:0b:
87:d2:66:ab:86:1f:eb:9e:d4:74:ca:d5:11:05:a8:
64:df:c3:42:9f:3b:5d:27:53:50:ca:d2:5b:6c:ad:
0f:89:9b:38:99:cb:48:e9:a0:2b:69:98:12:f4:45:
85:dc:ef:ab:86:e1:f6:2d:da:c0:31:9d:b7:7d:14:
4b:7d:67:8c:c7:19:18:99:69:90:d7:0b:b8:18:96:
25:d2:17:d9:cf:5d:62:0f:d9:a5:5b:02:15:b5:a7:
e6:12:aa:73:b0:2c:73:85:c1:24:79:c6:d7:2f:fe:
58:fb:fb:1d:a9:32:83:3f:2a:2b:24:43:15:bd:9b:
49:d5:a0:ff:25:0f:92:41:24:5b:ed:a1:b9:b5:51:
fc:64:01:61:f5:36:dd:4e:a2:c9:c0:3b:51:19:32:
e5:7e:b0:9c:04:50:6a:4d:1b:fd:30:34:43:f1:03:
41:a1:91:f5:1c:4e:b2:32:50:1a:1d:ce:b9:3d:84:
af:6d:5f:26:3e:6e:e1:28:65:70:86:c4:45:9f:55:
f1:55:94:9b:d3:01:45:f0:2d:ba:43:8b:89:d2:ab:
f8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DC:7A:E3:E3:FA:65:CE:5A:52:82:07:8A:46:BF:61:42:52:A4:BE
X509v3 Authority Key Identifier:
keyid:94:2F:56:5E:D1:6D:8C:33:7A:8C:8A:B3:CD:C5:72:EF:11:50:F5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/P9x64-P6Zc5aUoIHika_YUJSpL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.240.0/21
81.18.176.0/20
93.191.40.0/21
178.18.48.0/20
185.29.64.0/23
185.153.244.0/22
188.93.40.0/21
IPv6:
2a01:378::/31
Signature Algorithm: sha256WithRSAEncryption
50:5d:62:5e:de:36:b0:df:ca:44:06:cc:73:a6:cc:fd:d0:c5:
e7:38:50:b3:49:35:ed:af:02:20:8c:01:92:77:d4:b2:75:a5:
23:78:5f:cd:e4:65:e1:d7:db:5f:ef:43:c9:2a:dd:93:2f:e4:
b6:c0:f1:73:7c:38:90:db:17:f0:e0:41:e6:8f:9a:9a:8f:4c:
76:e8:16:84:35:a3:cf:e4:c1:88:54:c9:59:46:ef:05:04:3e:
1e:d4:ef:c0:80:7d:eb:88:14:92:47:c2:39:ca:f7:02:8c:e3:
ba:35:cb:71:1b:10:3a:e2:18:8e:e1:09:05:96:e0:40:3c:39:
a8:4c:1c:2c:f9:bd:7e:9a:63:b2:57:82:ac:0e:28:c6:8f:97:
8f:3c:e0:81:7c:9d:4c:9e:ea:6a:57:9a:1e:46:18:ff:58:42:
dc:57:81:ef:f2:41:4f:db:3e:0c:e3:aa:24:7c:80:91:b6:c0:
37:95:f4:9d:e2:e4:f4:6d:30:f7:ab:e4:5c:9c:98:d8:1c:dd:
84:c1:49:bd:74:2a:32:d3:68:a3:bb:cb:9c:31:65:81:37:4b:
6f:29:0e:a4:fd:c1:90:40:1b:8a:4a:2d:0f:42:63:13:1b:30:
93:88:c8:8b:56:cb:74:99:6c:d9:00:cf:fc:52:89:8e:67:d6:
ca:c4:c6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:09:45 2025 by rpki-client