Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/In6HHlbOKgo-tBtDKsZPQTlArGs.roa
File: In6HHlbOKgo-tBtDKsZPQTlArGs.roa (raw, json)
Hash identifier: CFnMXJRMI0xcGsbclTIgiHmpFuGQYTKvMSrP+u/dCV4=
Subject key identifier: 22:7E:87:1E:56:CE:2A:0A:3E:B4:1B:43:2A:C6:4F:41:39:40:AC:6B
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0195F1D56981E4F71F9D5F84AD0741B50887
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/In6HHlbOKgo-tBtDKsZPQTlArGs.roa
Signing time: Tue 01 Apr 2025 14:50:50 +0000
ROA not before: Tue 01 Apr 2025 14:50:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2856
IP address blocks: 37.97.112.0/22 maxlen: 24
81.161.52.0/22 maxlen: 24
94.232.100.0/22 maxlen: 24
109.197.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f1:d5:69:81:e4:f7:1f:9d:5f:84:ad:07:41:b5:08:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Apr 1 14:50:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=227e871e56ce2a0a3eb41b432ac64f413940ac6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:71:2a:47:20:c9:9d:41:fa:f5:f9:a0:c7:07:
4f:21:fd:ee:03:9f:14:73:f0:80:34:7a:9e:c0:d4:
39:f4:e6:6c:e8:b6:5e:b0:c3:ce:6c:16:be:e9:92:
cc:7e:4d:bb:84:39:e5:5c:f0:c9:fd:4f:3f:be:db:
01:44:a3:85:83:8a:04:46:fc:e5:8f:89:b3:55:e6:
c8:e7:c7:83:09:13:c7:56:4c:c9:cc:b1:25:55:4c:
3e:4a:da:c0:47:f0:00:aa:ca:03:59:e0:cd:56:b9:
ac:a4:f1:ad:a9:f5:d7:a6:77:fc:34:ff:6a:d9:36:
2d:d6:d8:8f:cf:8b:0f:ee:fd:50:d8:1d:ba:eb:ef:
6a:b7:f5:a1:bb:39:9e:66:38:4d:4f:7a:e9:6d:e8:
17:6c:e2:ee:88:fe:1c:43:a5:08:19:6f:43:4d:23:
41:41:6d:67:2c:44:8a:ef:b1:fd:f7:e4:0d:34:d7:
c2:97:cc:d7:4b:e9:44:37:60:11:ad:8c:31:35:20:
51:b0:39:5f:23:5e:9c:de:a7:4f:b8:01:31:b8:67:
97:f6:90:a1:6e:ce:53:63:64:75:b6:95:d0:b9:a5:
f4:95:53:7d:35:73:0e:b3:db:c5:06:78:22:84:ae:
c5:ee:2b:ce:33:aa:a9:71:a0:31:05:9a:4e:ab:b2:
83:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7E:87:1E:56:CE:2A:0A:3E:B4:1B:43:2A:C6:4F:41:39:40:AC:6B
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/In6HHlbOKgo-tBtDKsZPQTlArGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.97.112.0/22
81.161.52.0/22
94.232.100.0/22
109.197.236.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:9f:4e:e5:0f:f9:14:07:b8:f6:a1:aa:28:94:44:f9:8c:20:
c1:c4:24:aa:e6:76:9a:9f:58:b4:cf:d2:6a:09:4c:6e:86:b5:
01:1a:1a:b3:52:f4:a8:3b:f1:dd:b7:f0:d4:0d:70:15:64:8e:
2b:0e:27:69:ab:50:a2:68:64:09:a7:0d:51:92:82:7a:df:23:
c2:dd:84:56:3c:6c:f0:fe:65:39:f4:73:2c:23:37:35:87:f8:
ee:2b:24:d0:5d:f8:b9:f9:07:31:8a:8b:13:72:0c:2d:2c:5c:
0e:7c:f8:8e:93:94:ef:5c:a7:50:84:b4:61:50:af:eb:fa:43:
31:36:09:c8:7e:98:65:94:a9:64:be:28:ce:ac:8b:42:ed:a8:
f3:0e:02:2f:a2:96:7e:a7:56:7e:8b:be:34:b9:8d:b3:b0:35:
18:bc:aa:5d:14:2e:cd:69:96:ea:41:e6:3a:7e:09:50:a9:01:
3e:7a:ca:4a:d6:e6:66:54:ca:92:f5:64:72:18:38:f5:89:60:
5b:e5:2d:59:8a:c9:7d:2b:b1:55:cd:bd:f5:50:80:4b:5c:47:
21:54:5a:90:8a:35:23:fa:44:e4:ee:ba:37:05:47:9b:6e:99:
09:9a:c8:6a:43:8e:54:e5:87:8c:f1:ef:c8:5e:10:a0:46:80:
d1:7d:03:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:31 2025 by rpki-client on console.sobornost.net