Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/6DiazTfSLwiU3nHVXB2_ipX3pSI.roa
File: 6DiazTfSLwiU3nHVXB2_ipX3pSI.roa (raw, json)
Hash identifier: GgVQ0c2h8QmAuSALS7AfweuOCzU4KJ/qThY066+SiL8=
Subject key identifier: E8:38:9A:CD:37:D2:2F:08:94:DE:71:D5:5C:1D:BF:8A:95:F7:A5:22
Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c
Certificate serial: 019425FD576E98BD0B45F8B30C40F6333A4D
Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/6DiazTfSLwiU3nHVXB2_ipX3pSI.roa
Signing time: Thu 02 Jan 2025 07:49:07 +0000
ROA not before: Thu 02 Jan 2025 07:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57633
IP address blocks: 37.25.72.0/21 maxlen: 21
45.9.244.0/22 maxlen: 22
46.182.208.0/21 maxlen: 21
77.240.192.0/20 maxlen: 20
185.79.220.0/22 maxlen: 22
195.49.132.0/22 maxlen: 22
2a00:1ab0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:57:6e:98:bd:0b:45:f8:b3:0c:40:f6:33:3a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c
Validity
Not Before: Jan 2 07:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8389acd37d22f0894de71d55c1dbf8a95f7a522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cd:9b:cc:3d:06:f1:e8:24:d7:3d:58:e6:77:
5c:8f:33:01:3c:3e:a6:60:7d:31:79:03:aa:4a:27:
56:bc:30:0b:41:1c:74:52:25:08:8d:87:31:4a:d4:
f0:8d:d8:3f:8d:d3:04:ab:91:ff:cc:f0:9b:f5:c8:
fd:41:6e:34:66:ab:1d:64:35:38:82:7d:cf:7b:a0:
5a:1a:f1:3b:20:60:f6:e2:69:16:47:9a:bd:5c:20:
fd:29:a0:9e:0d:8e:d0:5d:47:52:21:56:1b:ea:6f:
00:ca:55:a2:b6:71:01:e9:32:77:da:8f:39:3c:56:
46:c8:13:3a:33:4e:c4:bb:30:70:7d:2d:2d:1a:d0:
56:74:a5:cf:50:c6:da:8c:e5:0c:b7:37:48:0b:ba:
34:45:58:63:d8:4b:63:0e:1b:ca:38:dd:36:0a:23:
20:9d:4d:22:ca:d4:c6:de:32:97:4c:3e:50:e3:47:
09:fb:fa:e2:28:87:a7:95:d1:0e:cc:8c:7f:79:5a:
05:6c:0f:45:f4:8b:a7:31:04:70:f6:69:03:e8:fa:
46:40:44:e3:84:11:bb:c6:af:50:9b:d9:29:20:17:
68:bb:6a:76:9b:64:14:4d:b9:7a:ce:c8:be:a9:38:
bf:a0:50:33:4f:bc:c9:c7:3a:4a:84:7a:78:00:e8:
20:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:38:9A:CD:37:D2:2F:08:94:DE:71:D5:5C:1D:BF:8A:95:F7:A5:22
X509v3 Authority Key Identifier:
keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/6DiazTfSLwiU3nHVXB2_ipX3pSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.25.72.0/21
45.9.244.0/22
46.182.208.0/21
77.240.192.0/20
185.79.220.0/22
195.49.132.0/22
IPv6:
2a00:1ab0::/32
Signature Algorithm: sha256WithRSAEncryption
7f:5c:04:aa:81:87:c0:8c:49:17:62:ea:08:38:68:4c:04:68:
1e:72:db:f1:38:53:29:ef:d1:df:30:75:29:d5:74:51:a4:7a:
9f:a8:c9:dd:0a:41:8d:6b:2e:9a:91:a6:22:34:80:1a:92:3e:
e9:18:23:ae:68:42:dc:e2:d1:d6:99:52:6f:27:8e:95:94:26:
19:5b:12:f1:87:2d:7a:4c:e6:b7:11:16:13:2d:9c:07:4b:18:
62:2b:f8:ee:aa:ac:f2:54:a9:d2:5b:37:5d:29:1a:1a:c0:42:
6f:13:e4:ff:5f:92:1b:44:d9:f3:87:e1:80:80:aa:f2:e3:cc:
7a:6b:fd:ef:2e:80:92:60:a9:65:bc:3f:bc:a2:fb:a0:c9:06:
3b:fa:77:d5:12:54:98:b9:4b:78:1a:5c:53:c0:c1:ea:e4:c3:
1e:69:31:c7:9d:e8:f7:be:26:05:86:e0:cd:a2:70:8d:05:75:
fc:d2:c6:3f:0d:4f:ac:6b:d4:68:48:d9:f8:a3:97:6f:0c:e4:
30:d8:17:5b:4a:2b:56:fd:42:7a:58:2c:ca:a8:9f:50:1b:49:
0a:2e:a2:59:ab:57:76:59:f7:56:a3:5c:d8:29:c1:9c:23:6d:
df:0b:2f:12:52:3e:05:df:65:f8:9e:a5:91:1e:1b:6b:47:f7:
25:7d:9f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:33 2025 by rpki-client on console.sobornost.net