Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/DmspTgBWfwCRXv4YidxL9MxMuLs.roa
File: DmspTgBWfwCRXv4YidxL9MxMuLs.roa (raw, json)
Hash identifier: 1HDwuoapwdXHm8uFL7aQ8AiJfzmdU8tLWRG1TVtsgIw=
Subject key identifier: 0E:6B:29:4E:00:56:7F:00:91:5E:FE:18:89:DC:4B:F4:CC:4C:B8:BB
Certificate issuer: /CN=bc127864cd43048550ed1699c584b5c14d80e098
Certificate serial: 019421B1D0AAD67C21828B9EECFF60B1C7AC
Authority key identifier: BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/DmspTgBWfwCRXv4YidxL9MxMuLs.roa
Signing time: Wed 01 Jan 2025 11:48:08 +0000
ROA not before: Wed 01 Jan 2025 11:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15743
IP address blocks: 37.131.240.0/21 maxlen: 21
62.48.64.0/19 maxlen: 19
193.35.198.0/23 maxlen: 23
193.35.218.0/23 maxlen: 23
193.35.218.0/24 maxlen: 24
193.35.219.0/24 maxlen: 24
193.98.1.0/24 maxlen: 24
217.26.224.0/21 maxlen: 21
2a00:e68::/29 maxlen: 29
2a0b:2c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d0:aa:d6:7c:21:82:8b:9e:ec:ff:60:b1:c7:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc127864cd43048550ed1699c584b5c14d80e098
Validity
Not Before: Jan 1 11:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e6b294e00567f00915efe1889dc4bf4cc4cb8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:26:6f:2e:ce:85:d2:6b:a6:69:db:0a:76:b8:
6c:1a:8f:f0:6e:5c:9a:e2:62:3d:b9:f4:2c:02:ff:
1e:90:09:30:0a:82:16:ab:b8:8c:ce:06:a8:44:29:
9f:2f:89:3b:c9:7b:de:1c:16:1c:cf:58:c1:6c:6b:
9b:52:8b:65:73:b7:8f:4f:ea:7e:e1:dc:91:39:10:
9e:33:47:28:be:58:7a:5a:f3:87:08:2e:91:de:ef:
0a:ad:2e:fd:16:25:e8:8f:62:d7:fd:4e:b4:4d:ac:
0d:38:69:89:ea:ec:bb:93:5e:5b:df:ab:76:0d:9a:
f8:2c:46:f0:94:47:d3:6a:8f:aa:7e:07:28:ab:f7:
b7:7b:d9:7d:ea:64:89:55:e7:43:b5:a1:c3:3e:b6:
7e:aa:1e:18:b8:14:23:52:07:91:12:63:f7:5c:46:
ae:27:c1:6a:77:e8:d6:fb:84:af:8b:33:f0:79:1c:
af:2a:67:29:bb:19:e2:5f:39:7e:f7:b3:23:25:0f:
34:5c:79:6a:a8:23:ee:85:1c:52:90:63:c7:76:85:
00:14:53:cf:35:3d:96:42:36:88:6a:51:4e:46:d1:
f4:26:15:41:01:1b:3b:86:83:47:be:65:8e:2c:7f:
e4:e4:a8:ff:40:36:92:e2:b9:3f:8b:98:50:9c:4d:
3c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6B:29:4E:00:56:7F:00:91:5E:FE:18:89:DC:4B:F4:CC:4C:B8:BB
X509v3 Authority Key Identifier:
keyid:BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/DmspTgBWfwCRXv4YidxL9MxMuLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.131.240.0/21
62.48.64.0/19
193.35.198.0/23
193.35.218.0/23
193.98.1.0/24
217.26.224.0/21
IPv6:
2a00:e68::/29
2a0b:2c0::/29
Signature Algorithm: sha256WithRSAEncryption
aa:f4:fb:fc:22:cd:6c:f8:1e:15:8a:94:fd:f5:65:53:7b:1b:
8b:9c:25:12:0f:f2:12:72:35:43:ee:f9:ec:dc:27:26:f4:c5:
e3:13:ba:1f:20:ea:70:6f:b2:f6:b7:55:be:2e:ec:8a:2d:23:
8e:7a:1b:72:60:29:aa:a6:65:c7:ed:3e:e5:7a:51:c7:7a:40:
9d:d8:0d:e1:5f:c8:b2:90:94:7d:fb:8b:d1:39:69:77:42:a3:
2c:8e:33:7a:fb:e2:6b:14:b2:1b:a7:1d:71:14:46:ab:48:6e:
5b:d8:75:38:1e:ce:9b:1e:f4:22:b7:74:4f:0d:f6:ec:72:c6:
25:1e:1c:24:fa:20:83:fc:11:fe:0a:a5:0f:c6:d1:d3:8f:42:
4f:6c:e8:61:82:20:39:0c:d1:2b:35:5f:f5:ff:1e:0f:d5:f2:
23:15:17:2c:bd:43:78:a7:28:a0:73:93:6b:13:74:36:19:a9:
10:21:b0:eb:56:34:ab:b7:4b:72:6c:73:ed:83:5b:e3:03:cd:
b5:72:19:5d:ca:64:4d:4a:d4:a8:cc:fb:bd:22:a3:f0:ca:8c:
0d:bb:48:67:ec:ac:e1:81:f6:c3:64:b6:ef:ec:0e:bd:b6:3c:
6f:34:3a:92:00:5e:65:81:30:09:07:be:a7:a6:f5:7a:18:67:
e5:fd:2c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:49 2025 by rpki-client on console.sobornost.net