Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/9lC3vM5Nbjp-LOx7UJo8i2EcOG4.roa
File: 9lC3vM5Nbjp-LOx7UJo8i2EcOG4.roa (raw, json)
Hash identifier: 85XPX9S+1Z8fK0VpRI7Zx7Mm/0/YisvKYXdljt/G2Qo=
Subject key identifier: F6:50:B7:BC:CE:4D:6E:3A:7E:2C:EC:7B:50:9A:3C:8B:61:1C:38:6E
Certificate issuer: /CN=2f814adc1d5209e098f078adbc856bad83b749c2
Certificate serial: 01924CA843D0C1EBA8926AFFBBA94D7CE749
Authority key identifier: 2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/9lC3vM5Nbjp-LOx7UJo8i2EcOG4.roa
Signing time: Wed 02 Oct 2024 09:55:48 +0000
ROA not before: Wed 02 Oct 2024 09:55:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16322
IP address blocks: 31.214.132.0/23 maxlen: 23
31.214.146.0/23 maxlen: 23
31.214.146.0/24 maxlen: 24
31.214.147.0/24 maxlen: 24
31.214.154.0/24 maxlen: 24
31.214.168.0/21 maxlen: 21
31.214.168.0/23 maxlen: 23
31.214.170.0/23 maxlen: 23
31.214.172.0/22 maxlen: 22
31.214.200.0/23 maxlen: 23
31.214.228.0/22 maxlen: 22
31.214.248.0/21 maxlen: 21
37.10.64.0/22 maxlen: 22
37.10.109.0/24 maxlen: 24
37.10.117.0/24 maxlen: 24
37.228.131.0/24 maxlen: 24
37.228.133.0/24 maxlen: 24
37.228.135.0/24 maxlen: 24
37.228.136.0/22 maxlen: 22
46.41.192.0/18 maxlen: 18
46.41.192.0/19 maxlen: 19
46.41.192.0/20 maxlen: 20
46.41.224.0/19 maxlen: 19
46.41.224.0/20 maxlen: 20
46.251.224.0/24 maxlen: 24
46.251.226.0/24 maxlen: 24
46.251.237.0/24 maxlen: 24
82.99.192.0/18 maxlen: 18
82.99.192.0/19 maxlen: 22
82.99.192.0/24 maxlen: 24
82.99.193.0/24 maxlen: 24
82.99.195.0/24 maxlen: 24
82.99.196.0/24 maxlen: 24
82.99.198.0/24 maxlen: 24
82.99.199.0/24 maxlen: 24
82.99.200.0/24 maxlen: 24
82.99.201.0/24 maxlen: 24
82.99.204.0/24 maxlen: 24
82.99.205.0/24 maxlen: 24
82.99.206.0/24 maxlen: 24
82.99.209.0/24 maxlen: 24
82.99.210.0/24 maxlen: 24
82.99.212.0/24 maxlen: 24
82.99.214.0/24 maxlen: 24
82.99.216.0/22 maxlen: 22
82.99.224.0/19 maxlen: 19
82.99.224.0/20 maxlen: 20
82.99.225.0/24 maxlen: 24
82.99.228.0/24 maxlen: 24
82.99.229.0/24 maxlen: 24
82.99.230.0/24 maxlen: 24
82.99.231.0/24 maxlen: 24
82.99.232.0/24 maxlen: 24
82.99.233.0/24 maxlen: 24
82.99.234.0/24 maxlen: 24
82.99.235.0/24 maxlen: 24
82.99.240.0/24 maxlen: 24
82.99.249.0/24 maxlen: 24
82.99.250.0/24 maxlen: 24
82.99.251.0/24 maxlen: 24
82.99.252.0/24 maxlen: 24
82.99.254.0/24 maxlen: 24
82.99.255.0/24 maxlen: 24
95.156.222.0/23 maxlen: 23
95.156.233.0/24 maxlen: 24
95.156.234.0/23 maxlen: 23
95.156.236.0/23 maxlen: 23
95.156.248.0/23 maxlen: 23
109.230.192.0/23 maxlen: 23
109.230.200.0/24 maxlen: 24
109.230.204.0/22 maxlen: 22
109.230.221.0/24 maxlen: 24
109.230.223.0/24 maxlen: 24
109.230.242.0/24 maxlen: 24
109.230.246.0/23 maxlen: 23
109.230.246.0/24 maxlen: 24
109.230.247.0/24 maxlen: 24
109.230.251.0/24 maxlen: 24
134.255.196.0/23 maxlen: 23
134.255.200.0/21 maxlen: 21
134.255.245.0/24 maxlen: 24
134.255.246.0/24 maxlen: 24
134.255.249.0/24 maxlen: 24
185.10.71.0/24 maxlen: 24
185.13.228.0/22 maxlen: 22
2a00:1a88::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4c:a8:43:d0:c1:eb:a8:92:6a:ff:bb:a9:4d:7c:e7:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f814adc1d5209e098f078adbc856bad83b749c2
Validity
Not Before: Oct 2 09:55:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f650b7bcce4d6e3a7e2cec7b509a3c8b611c386e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1d:ac:b9:24:55:89:9a:20:da:73:5a:c0:b1:
da:4b:e7:af:d6:f4:ef:93:41:f3:c9:c4:71:72:4d:
ae:44:7d:42:74:6a:c1:35:20:2b:7e:91:7d:d3:74:
e3:70:c0:24:10:34:d6:c8:b3:fe:26:9b:00:6b:91:
91:39:5a:81:b7:5d:6f:e3:52:d5:93:42:88:11:e8:
cb:3e:e4:2d:03:12:ed:9a:45:6f:08:35:26:68:5d:
92:b0:03:07:c6:5c:1a:03:b6:92:93:cb:bf:72:2e:
74:6b:06:78:0d:e7:e3:00:fa:4a:cc:88:ce:27:94:
e2:95:2c:6f:14:ca:b1:61:d5:f2:ee:8f:fb:07:40:
0d:d7:c4:2b:96:72:f8:d4:bc:65:b2:d4:5a:4f:c3:
8a:60:13:f6:b7:ef:08:22:6e:ed:b1:49:0d:92:6e:
71:3e:ed:7d:95:8e:d6:c1:c5:98:ea:68:e0:b2:b8:
10:9a:2d:4c:9b:a3:5e:46:75:59:de:e5:ac:2d:f0:
57:a0:d6:5f:0d:76:35:f1:70:a9:78:53:4d:7b:56:
9b:64:cc:41:8f:45:82:b5:1f:d0:56:de:e8:45:87:
e5:d0:5d:0f:58:9a:dd:12:44:25:07:88:46:5f:23:
c7:5a:08:28:cc:bb:c2:26:48:d7:21:dc:02:51:2a:
7e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:50:B7:BC:CE:4D:6E:3A:7E:2C:EC:7B:50:9A:3C:8B:61:1C:38:6E
X509v3 Authority Key Identifier:
keyid:2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/9lC3vM5Nbjp-LOx7UJo8i2EcOG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.214.132.0/23
31.214.146.0/23
31.214.154.0/24
31.214.168.0/21
31.214.200.0/23
31.214.228.0/22
31.214.248.0/21
37.10.64.0/22
37.10.109.0/24
37.10.117.0/24
37.228.131.0/24
37.228.133.0/24
37.228.135.0-37.228.139.255
46.41.192.0/18
46.251.224.0/24
46.251.226.0/24
46.251.237.0/24
82.99.192.0/18
95.156.222.0/23
95.156.233.0-95.156.237.255
95.156.248.0/23
109.230.192.0/23
109.230.200.0/24
109.230.204.0/22
109.230.221.0/24
109.230.223.0/24
109.230.242.0/24
109.230.246.0/23
109.230.251.0/24
134.255.196.0/23
134.255.200.0/21
134.255.245.0-134.255.246.255
134.255.249.0/24
185.10.71.0/24
185.13.228.0/22
IPv6:
2a00:1a88::/32
Signature Algorithm: sha256WithRSAEncryption
03:28:12:ba:ae:33:ca:8d:ec:bb:f9:19:9c:72:3e:54:48:d7:
35:41:9c:f9:c5:c6:1d:cc:fa:d9:44:e3:39:9d:f2:e4:83:30:
c0:6e:9b:22:32:79:89:bb:74:c1:73:63:84:59:20:62:de:b4:
a0:e1:e4:37:a0:29:34:fe:fe:65:fb:29:d6:d9:e0:13:ed:6d:
3a:7b:70:f6:48:d9:7c:be:de:79:63:f8:62:ba:97:aa:99:c3:
45:66:1b:1d:15:ce:bb:99:3e:eb:ca:81:38:4c:14:4b:26:08:
62:25:63:f7:2e:50:a4:8a:ce:8c:d9:6a:c6:98:3f:81:be:a3:
6b:dd:de:2a:48:d2:d8:f1:a4:9a:30:26:21:ed:16:a6:3d:45:
fa:a3:ad:53:38:8f:d0:0b:a0:30:f5:ec:0b:3b:96:7e:bc:d0:
33:d1:63:0b:10:51:43:a7:c3:42:a3:9b:37:6c:dc:44:6b:fd:
d2:01:b3:4a:d0:66:c4:67:56:56:5f:03:14:d0:3a:28:9b:5d:
9b:c1:b6:12:9f:c5:d0:91:74:49:52:66:ae:4a:fa:5d:cc:e7:
1c:7b:80:b1:1a:78:f3:66:d7:32:c1:11:6c:92:36:48:d8:cd:
a8:b7:af:8c:36:02:39:63:fe:00:b2:f6:da:17:fc:9b:43:b0:
9f:bc:d4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:19 2024 by rpki-client on console.sobornost.net