Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/5puypGdPqGafWp1AyvNSb1EuBNw.roa
File: 5puypGdPqGafWp1AyvNSb1EuBNw.roa (raw, json)
Hash identifier: qaaid804rsK3hU7FOxciCy5ptxREK/wMCBWzAUs6cK0=
Subject key identifier: E6:9B:B2:A4:67:4F:A8:66:9F:5A:9D:40:CA:F3:52:6F:51:2E:04:DC
Certificate issuer: /CN=550b7c0c8bae610f7e519c0485a4773bceb48dab
Certificate serial: 019537813D234E9A84DBC667CDAB8A2F5571
Authority key identifier: 55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/5puypGdPqGafWp1AyvNSb1EuBNw.roa
Signing time: Mon 24 Feb 2025 10:29:31 +0000
ROA not before: Mon 24 Feb 2025 10:29:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34619
IP address blocks: 37.148.208.0/21 maxlen: 24
80.253.240.0/22 maxlen: 24
85.159.64.0/21 maxlen: 24
89.19.0.0/19 maxlen: 24
94.73.128.0/18 maxlen: 24
185.22.184.0/22 maxlen: 24
185.22.184.0/24 maxlen: 24
185.22.185.0/24 maxlen: 24
185.22.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:37:81:3d:23:4e:9a:84:db:c6:67:cd:ab:8a:2f:55:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=550b7c0c8bae610f7e519c0485a4773bceb48dab
Validity
Not Before: Feb 24 10:29:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e69bb2a4674fa8669f5a9d40caf3526f512e04dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:98:57:8d:4c:ba:ec:69:2e:e5:0e:0c:e9:92:
4e:bd:57:aa:de:85:38:0a:fe:f9:c3:0f:8e:37:ff:
5c:56:a0:47:54:35:4b:4b:06:30:e8:23:2c:60:ca:
13:97:48:6d:18:ca:ad:b3:f1:14:7f:cd:07:b6:f8:
d3:ee:8c:f2:54:9e:6f:d6:58:2e:a2:96:3c:e6:12:
43:37:66:4c:fd:e3:1f:69:0c:20:4b:ee:6c:04:f1:
e9:04:a6:c7:28:68:39:49:19:51:5f:fb:a6:30:11:
35:90:d5:ec:b0:b4:62:a1:99:2e:ea:85:46:c2:15:
14:c0:fd:27:cf:d8:c7:b2:58:6c:92:25:e3:82:8e:
e8:c9:01:55:73:a9:84:58:95:bf:c0:99:1f:a4:5a:
f9:2c:05:cd:cd:16:60:19:af:85:43:a0:97:4f:63:
bf:b2:9a:a7:63:4a:57:8a:ab:58:b0:32:7b:a4:f6:
45:17:c1:2c:cb:7d:63:cf:59:11:16:46:15:fe:ac:
be:4b:e1:88:15:b3:82:f3:c5:41:8b:8d:d1:54:8b:
d3:f3:b3:ee:db:5e:27:70:85:47:29:bc:f7:e0:9f:
4f:bc:56:e1:e8:18:46:bf:98:d0:bf:13:d3:79:c8:
30:a4:bb:76:71:99:52:d0:56:13:63:15:22:d2:93:
c5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9B:B2:A4:67:4F:A8:66:9F:5A:9D:40:CA:F3:52:6F:51:2E:04:DC
X509v3 Authority Key Identifier:
keyid:55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/5puypGdPqGafWp1AyvNSb1EuBNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.208.0/21
80.253.240.0/22
85.159.64.0/21
89.19.0.0/19
94.73.128.0/18
185.22.184.0/22
Signature Algorithm: sha256WithRSAEncryption
17:ee:b7:8a:d0:1f:e8:6e:b0:7b:67:0b:83:da:0b:b6:56:50:
96:3b:bc:3f:e5:f2:c7:af:96:e1:d3:23:17:2d:e0:a5:0b:c8:
89:a1:62:1a:49:9c:6e:3a:6a:1e:8d:3d:31:12:71:d6:a6:a2:
a8:3c:70:29:0b:bb:17:bb:b8:7a:6e:25:05:df:5b:a4:76:91:
3f:ce:2a:bf:51:9d:b2:d4:49:e9:08:53:a7:a6:a2:38:00:37:
ba:e6:2e:68:f7:75:4f:b9:c2:46:38:58:e6:3c:a8:4a:e4:3c:
7f:9d:0a:f7:68:05:af:95:76:d2:1a:65:20:73:44:a4:3e:f6:
55:d7:90:11:39:13:ef:f7:97:27:f5:c5:3e:dd:4a:ed:9b:c7:
27:39:c9:08:d9:ae:5c:a9:ea:22:d3:ed:93:ee:fe:f3:2f:4d:
d9:95:62:3a:bb:85:7a:e0:82:6f:da:1c:e1:e2:d3:64:9a:c8:
61:28:2d:02:f2:44:c0:51:9f:49:d2:8a:4e:5f:30:80:c3:d4:
e2:01:1f:98:16:a8:5e:53:49:4f:e8:51:d5:fe:6b:15:51:8d:
10:b2:60:5a:cb:a3:cc:82:3a:61:63:63:5a:59:f7:82:8a:d7:
35:88:72:35:06:69:7a:27:72:21:84:5e:44:2a:46:90:82:8e:
96:46:71:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:45 2025 by rpki-client on console.sobornost.net