Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/Oe84aJcNETymHO5Mo5MDcXOYnLw.roa
File: Oe84aJcNETymHO5Mo5MDcXOYnLw.roa (raw, json)
Hash identifier: OSImBq5p2iXVjmA+adUzN+gaePAu0L2EyhD+yCsF6YQ=
Subject key identifier: 39:EF:38:68:97:0D:11:3C:A6:1C:EE:4C:A3:93:03:71:73:98:9C:BC
Certificate issuer: /CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Certificate serial: 01942444B699E08573DFF514FA4E917792B6
Authority key identifier: A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/Oe84aJcNETymHO5Mo5MDcXOYnLw.roa
Signing time: Wed 01 Jan 2025 23:47:50 +0000
ROA not before: Wed 01 Jan 2025 23:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3164
IP address blocks: 37.156.67.0/24 maxlen: 24
37.156.225.0/24 maxlen: 24
84.247.54.0/24 maxlen: 24
86.105.195.0/24 maxlen: 24
89.44.109.0/24 maxlen: 24
94.176.2.0/24 maxlen: 24
185.88.28.0/24 maxlen: 24
185.88.29.0/24 maxlen: 24
185.88.30.0/24 maxlen: 24
185.88.31.0/24 maxlen: 24
188.241.194.0/24 maxlen: 24
2a05:c5c0::/48 maxlen: 48
2a05:c5c0:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:b6:99:e0:85:73:df:f5:14:fa:4e:91:77:92:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Validity
Not Before: Jan 1 23:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39ef3868970d113ca61cee4ca393037173989cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7e:72:b6:d5:ad:91:8b:1c:38:14:e2:5c:99:
8d:49:44:9d:75:6c:b5:0e:9c:29:07:e5:bd:e4:70:
cf:31:db:7b:3d:af:6a:28:c3:0c:01:31:89:55:d8:
a8:67:ef:14:2f:da:80:79:1f:22:2c:0d:82:b2:28:
6c:f3:05:af:41:70:49:b1:58:2b:58:7b:f5:b1:1c:
e6:6d:6b:c9:7b:9d:81:31:df:10:9b:dd:30:d3:c9:
db:42:f4:b9:a3:87:2b:7d:7b:44:bc:8d:5f:f7:1d:
c2:d5:dd:13:f9:9a:6e:96:a0:f5:97:bc:b0:96:f0:
e8:3d:d4:c4:78:19:ee:76:df:fe:dd:5f:ac:91:eb:
49:a4:85:9d:e7:00:59:b4:c7:f4:14:35:5f:72:23:
90:01:b7:ed:93:49:49:f3:59:66:f8:d0:5c:62:77:
c8:49:60:6e:0c:b3:83:6a:22:86:38:3f:62:b7:24:
05:a4:9e:cf:0c:05:fe:ef:93:db:4b:05:85:fa:b1:
b6:e4:1f:57:47:1e:28:ad:e9:91:b8:48:a2:97:db:
fa:7c:e3:f5:61:7d:7a:4f:39:1f:36:2a:4f:e0:93:
3d:30:02:cf:6d:42:a9:5f:e6:b7:f7:bf:e4:c7:4a:
8c:bc:aa:04:e1:b5:4d:21:1d:0f:ec:aa:8e:e3:37:
c3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:EF:38:68:97:0D:11:3C:A6:1C:EE:4C:A3:93:03:71:73:98:9C:BC
X509v3 Authority Key Identifier:
keyid:A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/Oe84aJcNETymHO5Mo5MDcXOYnLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.67.0/24
37.156.225.0/24
84.247.54.0/24
86.105.195.0/24
89.44.109.0/24
94.176.2.0/24
185.88.28.0/22
188.241.194.0/24
IPv6:
2a05:c5c0::/47
Signature Algorithm: sha256WithRSAEncryption
68:a0:38:c4:c0:e5:17:06:03:c5:82:47:6c:d6:f9:67:83:79:
d1:19:3e:49:32:4a:df:9f:01:58:f3:5e:8f:b1:34:4a:67:83:
81:cf:da:f2:c9:c4:57:49:53:c3:1d:0f:32:8d:40:78:a8:8d:
40:0a:e6:fe:ed:01:48:ea:f5:66:b6:3e:20:9f:c4:db:85:16:
d9:d7:2b:fb:5f:a8:bd:cb:6a:63:a2:b1:95:4e:ee:9e:34:d9:
6e:69:d7:a5:c9:3a:dd:5b:54:37:d7:77:a7:c6:23:43:a3:49:
f0:1d:63:cc:e4:7f:09:2f:c0:7d:c9:58:bf:fc:8c:eb:10:10:
35:28:eb:28:86:79:39:65:ca:8a:57:ac:9d:ca:53:b9:46:90:
d3:93:73:bf:07:8d:e4:4c:c6:10:9b:f0:4f:a6:1f:d8:cd:f1:
df:da:9b:aa:ce:9c:df:b8:57:0d:d8:69:8a:b6:b8:28:ea:31:
c8:d6:61:34:b1:28:53:1a:e0:0e:ae:6b:ae:c5:8a:22:f7:8e:
7d:75:46:6c:d4:66:a2:28:e9:13:0b:84:9b:80:1f:c7:e5:bd:
b5:55:41:fa:36:b3:4c:ba:ec:f1:99:ba:08:07:2c:75:d9:fc:
d4:45:0c:52:99:06:95:8b:be:ea:16:d9:76:8c:1b:4d:4e:a8:
a6:62:68:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:04:27 2025 by rpki-client