Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/bSEsv80VTIqhxykqIB8M44nU7N8.roa
File: bSEsv80VTIqhxykqIB8M44nU7N8.roa (raw, json)
Hash identifier: Ooz65LuwKjo+iPeOY+Zh+YXr8ijMf6WnGg7hpdHzR2I=
Subject key identifier: 6D:21:2C:BF:CD:15:4C:8A:A1:C7:29:2A:20:1F:0C:E3:89:D4:EC:DF
Certificate issuer: /CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1
Certificate serial: 019423D6CE7348228FE0E4EEC4E5369A2C16
Authority key identifier: 20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/bSEsv80VTIqhxykqIB8M44nU7N8.roa
Signing time: Wed 01 Jan 2025 21:47:47 +0000
ROA not before: Wed 01 Jan 2025 21:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198770
IP address blocks: 37.18.74.0/24 maxlen: 24
37.18.75.0/24 maxlen: 24
37.18.76.0/24 maxlen: 24
37.18.77.0/24 maxlen: 24
37.230.152.0/24 maxlen: 24
37.230.153.0/24 maxlen: 24
37.230.154.0/24 maxlen: 24
37.230.155.0/24 maxlen: 24
37.230.248.0/24 maxlen: 24
62.113.60.0/24 maxlen: 24
62.113.61.0/24 maxlen: 24
62.113.62.0/24 maxlen: 24
62.113.63.0/24 maxlen: 24
85.92.116.0/24 maxlen: 24
85.92.117.0/24 maxlen: 24
85.92.118.0/24 maxlen: 24
128.0.66.0/24 maxlen: 24
128.0.67.0/24 maxlen: 24
141.101.204.0/24 maxlen: 24
141.101.228.0/24 maxlen: 24
141.101.231.0/24 maxlen: 24
178.170.225.0/24 maxlen: 24
2a0d:b1c0:c0::/44 maxlen: 44
2a0d:b1c0:d0::/44 maxlen: 44
2a0d:b1c0:500::/44 maxlen: 48
2a0d:b1c0:aaaa::/48 maxlen: 48
2a0d:b1c0:abc0::/44 maxlen: 44
2a0d:b1c0:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ce:73:48:22:8f:e0:e4:ee:c4:e5:36:9a:2c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1
Validity
Not Before: Jan 1 21:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d212cbfcd154c8aa1c7292a201f0ce389d4ecdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:43:32:80:64:1b:79:ce:be:ab:f6:6f:a5:cf:
bd:7a:82:c3:a9:bc:e6:8c:ff:02:78:97:99:f0:95:
54:fd:23:3f:07:55:9d:d8:79:a4:4a:66:08:9c:9c:
ac:6e:b4:5c:5b:4c:19:8f:6e:aa:fc:bc:d4:c0:14:
b8:02:7f:dc:06:d4:b9:2f:3d:03:6f:45:63:92:08:
1f:13:2a:4e:44:13:44:36:5b:ac:e5:a4:47:0f:ea:
f8:80:09:1a:80:92:bf:c4:81:05:11:12:83:34:7e:
56:b8:eb:12:64:03:9a:7c:d3:e3:35:f9:f5:3c:68:
57:83:c4:45:d7:b5:4f:36:d9:c5:39:2a:71:8e:1d:
e9:27:d9:42:d9:b4:b5:74:2a:87:93:ee:b3:20:8a:
d0:20:83:cc:16:2c:b4:09:84:a8:c1:9c:9f:75:2e:
ee:9d:8d:b2:de:5d:d7:70:aa:0e:5f:0a:ee:28:bb:
37:0b:bb:55:eb:5c:c1:9b:f4:61:c5:b2:fc:11:25:
a2:66:5f:fa:98:11:33:37:ee:65:6c:a3:58:04:ba:
b6:e3:97:24:52:40:bd:f6:0a:40:db:a7:63:a9:e3:
23:13:1d:56:4b:80:b0:e3:f4:8a:4b:8d:70:04:1a:
09:8c:2e:1e:ce:36:e5:d4:a2:ca:2d:cf:13:70:ea:
8a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:21:2C:BF:CD:15:4C:8A:A1:C7:29:2A:20:1F:0C:E3:89:D4:EC:DF
X509v3 Authority Key Identifier:
keyid:20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/bSEsv80VTIqhxykqIB8M44nU7N8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.74.0-37.18.77.255
37.230.152.0/22
37.230.248.0/24
62.113.60.0/22
85.92.116.0-85.92.118.255
128.0.66.0/23
141.101.204.0/24
141.101.228.0/24
141.101.231.0/24
178.170.225.0/24
IPv6:
2a0d:b1c0:c0::/43
2a0d:b1c0:500::/44
2a0d:b1c0:aaaa::/48
2a0d:b1c0:abc0::/44
2a0d:b1c0:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
78:cc:4d:4c:39:cf:e7:f1:b1:0e:74:7c:0d:09:83:15:3e:1a:
64:13:f5:8c:0f:3d:fa:20:b3:fc:66:55:7b:33:74:b4:1f:85:
43:3c:be:b8:d1:67:18:e1:9d:10:7e:76:7f:fb:8c:f1:8b:da:
fa:71:12:6a:a1:66:99:34:7d:26:63:a5:4c:af:e2:8c:ec:d5:
e8:b8:04:72:1c:39:5a:98:67:2a:8b:2f:29:86:97:4d:75:b0:
f6:34:73:14:a6:c7:3b:63:05:f1:42:27:fd:da:25:f9:ec:53:
7a:c9:04:cd:40:83:44:e3:9d:11:89:ea:d5:7c:40:87:dc:2c:
fc:3a:bd:06:37:09:a6:83:8a:b6:95:4d:3d:2c:cf:9d:0b:f9:
81:d2:d1:d3:21:d0:37:e6:f8:74:c3:6e:9a:54:6e:5e:68:31:
49:05:f1:f2:34:19:22:98:82:a6:58:36:0a:92:48:59:00:e9:
23:01:7a:4e:7b:81:58:88:b1:60:9b:6d:90:9f:23:35:2a:64:
b1:7f:f8:47:ad:9c:47:ee:46:4b:c8:9f:32:86:6f:f8:32:e5:
25:a2:ef:81:9b:ee:26:0f:3e:55:c5:0b:15:5e:87:35:0e:91:
89:12:77:48:17:d5:4a:31:dc:63:fe:56:54:e3:69:2a:3f:f5:
f6:c9:7b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:10:28 2025 by rpki-client