Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/3IY4TmbnRLj5k1WANLdjXwTXYew.roa
File: 3IY4TmbnRLj5k1WANLdjXwTXYew.roa (raw, json)
Hash identifier: qjK8pA3ZvCwbUBgq8RlJOJI1zB3hdjk5IYpiJi0lf+Y=
Subject key identifier: DC:86:38:4E:66:E7:44:B8:F9:93:55:80:34:B7:63:5F:04:D7:61:EC
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 019424455FC4175EE5C7720612D8751995C3
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/3IY4TmbnRLj5k1WANLdjXwTXYew.roa
Signing time: Wed 01 Jan 2025 23:48:33 +0000
ROA not before: Wed 01 Jan 2025 23:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205262
IP address blocks: 37.122.216.0/22 maxlen: 24
89.40.74.0/24 maxlen: 24
185.84.204.0/22 maxlen: 24
185.205.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:5f:c4:17:5e:e5:c7:72:06:12:d8:75:19:95:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Jan 1 23:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc86384e66e744b8f993558034b7635f04d761ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:53:b9:b5:db:af:11:74:d1:86:36:9d:6d:03:
84:de:1c:f9:22:5e:82:39:99:c9:02:03:1d:1e:39:
b0:16:a2:a6:2b:23:a8:14:20:5b:7e:72:81:56:d7:
d7:6a:3f:c5:17:72:d9:61:bd:0e:b9:7b:09:55:6b:
8a:73:98:92:38:1c:1a:99:f6:7d:c7:0d:ec:ee:07:
44:c4:43:65:f7:a0:6b:8b:a1:5a:a1:ac:b9:97:da:
f9:af:d5:68:db:ad:a7:d5:fd:b5:32:24:d2:99:1c:
52:6f:2f:fe:a2:8a:91:a7:b8:a8:58:be:1e:e7:1e:
c7:72:56:3f:21:07:8a:a7:c4:ef:34:13:da:eb:b1:
ab:57:04:8b:26:e5:87:ed:32:3f:c5:80:27:a4:9c:
6c:02:ff:bf:d5:fd:a4:31:d7:b6:9e:41:6c:a0:23:
c8:38:23:f7:33:8a:ac:02:f3:a1:72:a4:78:ed:fe:
64:5e:18:6c:02:99:2c:b9:a5:38:89:d6:8d:ef:80:
be:9a:ea:81:cd:62:9f:54:55:df:dc:78:c5:64:36:
18:ac:7c:9c:e7:e0:26:c5:4d:4e:f9:b3:b1:2a:8f:
79:e4:63:95:0d:41:ea:07:cd:d0:e0:49:8d:76:a9:
c9:b0:a4:d2:b4:52:9a:8d:64:4a:bc:6c:39:13:55:
0f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:86:38:4E:66:E7:44:B8:F9:93:55:80:34:B7:63:5F:04:D7:61:EC
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/3IY4TmbnRLj5k1WANLdjXwTXYew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.122.216.0/22
89.40.74.0/24
185.84.204.0/22
185.205.252.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:81:24:cc:26:fb:64:d7:2a:93:62:be:1b:08:69:6e:ee:d4:
72:13:24:2e:78:38:92:89:cb:03:7c:f3:4a:90:25:63:05:5d:
70:d2:29:7d:60:73:8d:e7:fe:86:d1:8a:4f:05:5e:7e:ae:0f:
07:71:3c:5c:5e:ae:21:3b:4f:44:30:2a:f6:66:f3:e6:67:cf:
74:12:f8:9b:36:c7:0a:6e:3a:1a:31:70:f1:31:84:6e:71:2f:
7a:a5:dd:1b:8a:a9:cc:b8:a2:bb:35:0c:b1:c7:8a:95:30:8e:
98:d5:e3:53:23:32:8c:5b:f2:70:76:97:26:2c:b7:1c:d6:ba:
a0:3d:b5:78:88:68:1e:2a:9f:2a:54:01:31:92:f9:2e:46:01:
3c:27:2f:87:c1:0f:39:bb:09:b5:d5:b9:11:7c:72:09:b1:32:
dd:9c:88:95:4f:32:b0:b0:9a:bb:f4:04:5e:f9:29:d8:06:a9:
b0:18:bc:e4:bd:2b:41:ec:9e:54:cb:f3:c0:c5:eb:65:ca:53:
d7:c0:94:23:9b:e6:f9:73:e4:d9:08:ed:e2:93:6c:ef:f9:30:
41:40:fe:b5:00:5d:27:87:13:c4:31:cc:6d:8a:69:47:d6:79:
4d:c5:84:1b:cf:7e:82:22:17:7b:fa:9b:70:fd:89:08:5c:99:
db:5f:d9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:09 2025 by rpki-client on console.sobornost.net