Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/DE6NvjIaKiNR10OMEBeCu3jt1Bw.roa
File: DE6NvjIaKiNR10OMEBeCu3jt1Bw.roa (raw, json)
Hash identifier: smrMDrQgJcmO0ZwXYsMS5T0WgXCSpbF79U5ycRrSPQA=
Subject key identifier: 0C:4E:8D:BE:32:1A:2A:23:51:D7:43:8C:10:17:82:BB:78:ED:D4:1C
Certificate issuer: /CN=3b7ec9423bf90c81d22d94841c10357a54260379
Certificate serial: 01942068106FFD12190C444BAAE308D9BFF8
Authority key identifier: 3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/DE6NvjIaKiNR10OMEBeCu3jt1Bw.roa
Signing time: Wed 01 Jan 2025 05:47:58 +0000
ROA not before: Wed 01 Jan 2025 05:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14576
IP address blocks: 85.239.35.0/24 maxlen: 24
85.239.36.0/24 maxlen: 24
85.239.37.0/24 maxlen: 24
85.239.38.0/24 maxlen: 24
85.239.39.0/24 maxlen: 24
85.239.48.0/22 maxlen: 24
85.239.56.0/22 maxlen: 24
185.152.93.0/24 maxlen: 24
185.152.94.0/24 maxlen: 24
185.152.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:10:6f:fd:12:19:0c:44:4b:aa:e3:08:d9:bf:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7ec9423bf90c81d22d94841c10357a54260379
Validity
Not Before: Jan 1 05:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c4e8dbe321a2a2351d7438c101782bb78edd41c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:86:14:9f:31:ba:6f:2c:4a:f7:55:67:5e:6d:
71:66:05:07:77:d4:a0:77:a9:ce:2e:35:90:b5:e0:
ac:93:ed:f2:34:3e:3f:5f:ad:ec:56:60:c9:95:19:
90:d2:71:b1:3b:b5:8f:4e:e3:a2:b9:a4:59:61:f9:
52:8c:fc:5e:86:7a:5f:1d:a3:9b:3f:83:4d:1f:1a:
fc:20:43:da:ee:ca:9a:f8:b2:71:22:fe:42:ed:9f:
ce:bc:63:52:f4:f5:48:a8:2d:e0:03:d1:f6:a4:8c:
23:70:e4:fa:e5:d3:8c:18:e2:db:fc:bb:72:23:8c:
a9:b6:d4:8e:fd:3c:a3:78:46:94:54:f0:a3:f1:bc:
3a:8b:cd:89:58:fd:77:40:10:0b:b5:18:a9:72:26:
5b:82:f9:1e:fc:5b:b5:5e:e6:f6:a4:91:9d:f4:23:
77:71:10:cf:89:c8:57:90:69:8c:0c:d2:13:20:69:
24:8e:ce:70:af:c1:91:5b:3a:ce:9f:13:cd:0c:70:
82:0e:d9:f2:91:e6:26:68:69:3a:7e:48:27:64:2b:
10:09:8d:c9:15:39:16:d4:09:9c:5f:fc:c4:b6:0d:
61:d7:f8:fd:47:63:3e:1e:8c:c7:1f:1d:17:ac:56:
f2:be:80:bf:2d:50:1d:34:88:08:c1:df:d7:87:d1:
af:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4E:8D:BE:32:1A:2A:23:51:D7:43:8C:10:17:82:BB:78:ED:D4:1C
X509v3 Authority Key Identifier:
keyid:3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/DE6NvjIaKiNR10OMEBeCu3jt1Bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.35.0-85.239.39.255
85.239.48.0/22
85.239.56.0/22
185.152.93.0-185.152.95.255
Signature Algorithm: sha256WithRSAEncryption
73:99:43:3a:3d:0a:56:d5:5c:b0:7e:dd:b7:a4:de:11:23:06:
cd:e6:b4:4e:7b:82:cb:9e:f0:e4:5b:75:ae:10:8b:f0:6b:6d:
83:bd:64:f7:82:97:51:62:6a:8f:b1:40:c4:ad:61:fa:8b:10:
ed:d8:d9:59:f4:fb:98:03:b0:88:a6:5d:e0:a4:32:15:c3:52:
b2:53:86:69:2b:3b:5a:bc:4d:58:45:33:b1:47:0b:4b:fc:2a:
99:ac:7e:35:36:ec:71:32:a7:bd:f2:58:67:65:42:f5:fc:82:
f9:c3:ad:d7:01:4d:55:b2:12:84:16:2b:6e:79:1f:69:de:2f:
13:f8:18:af:86:df:44:d8:30:30:5f:76:ab:db:ee:4c:ea:87:
fe:70:c4:47:3f:6e:25:f5:e6:6b:d9:cc:7d:31:43:eb:2c:39:
79:ed:4f:4c:4d:ed:67:5e:50:f0:49:fb:e2:ab:56:30:2a:95:
43:45:d6:e1:56:5b:a8:05:44:80:cb:d3:34:03:cb:fa:04:c7:
1a:cf:5d:ba:4f:e3:3c:ae:65:29:77:c5:d5:5f:2a:0c:7f:4a:
42:22:07:1f:8b:45:97:42:ce:31:ee:a1:fc:a8:1d:97:5f:58:
74:08:fa:05:c6:1b:c9:4c:0d:3c:d3:80:c6:d2:9b:b9:d5:31:
08:5b:ad:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:32:53 2025 by rpki-client