Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ntVv655TMuvKob40kJi8v1QScbQ.roa
File: ntVv655TMuvKob40kJi8v1QScbQ.roa (raw, json)
Hash identifier: RKDnQDKOaVsTgF0dfHkGMRZV2VYcqJifxS2Vs0AXGjI=
Subject key identifier: 9E:D5:6F:EB:9E:53:32:EB:CA:A1:BE:34:90:98:BC:BF:54:12:71:B4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0196144E2E2D02B9EE1ECA4045C9B6FD0BEC
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ntVv655TMuvKob40kJi8v1QScbQ.roa
Signing time: Tue 08 Apr 2025 07:29:50 +0000
ROA not before: Tue 08 Apr 2025 07:29:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 31.169.124.0/22 maxlen: 24
37.139.128.0/24 maxlen: 24
45.88.66.0/24 maxlen: 24
45.128.234.0/24 maxlen: 24
45.128.235.0/24 maxlen: 24
79.110.63.0/24 maxlen: 24
85.31.44.0/24 maxlen: 24
85.31.46.0/24 maxlen: 24
85.208.136.0/24 maxlen: 24
87.120.92.0/24 maxlen: 24
87.120.108.0/24 maxlen: 24
87.120.196.0/24 maxlen: 24
87.120.205.0/24 maxlen: 24
87.120.216.0/24 maxlen: 24
87.120.219.0/24 maxlen: 24
87.120.222.0/24 maxlen: 24
87.121.47.0/24 maxlen: 24
91.92.21.0/24 maxlen: 24
94.156.236.0/24 maxlen: 24
109.206.240.0/24 maxlen: 24
109.206.243.0/24 maxlen: 24
171.22.30.0/24 maxlen: 24
185.207.14.0/23 maxlen: 24
185.218.138.0/24 maxlen: 24
185.246.220.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
185.252.179.0/24 maxlen: 24
193.47.60.0/24 maxlen: 24
193.47.61.0/24 maxlen: 24
193.148.56.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:14:4e:2e:2d:02:b9:ee:1e:ca:40:45:c9:b6:fd:0b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 8 07:29:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ed56feb9e5332ebcaa1be349098bcbf541271b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c1:d4:67:f0:0a:79:64:08:e9:c8:65:9f:16:
31:4d:c3:4a:7c:f7:55:8f:96:b6:6e:42:71:78:5e:
46:6a:a0:de:d7:3d:aa:a8:5b:74:9c:82:45:d5:3a:
c7:ca:e3:3c:73:ec:b5:93:ec:89:44:b4:a0:af:14:
34:b2:3b:47:65:e2:9d:83:15:e6:5b:ef:11:d0:c0:
3c:fa:ef:ce:4b:39:72:0e:39:33:58:ae:4a:3b:c8:
f0:4e:1d:b1:1a:be:7c:a3:13:f9:e2:cb:4a:21:62:
79:d9:1d:ae:44:38:02:71:65:08:c4:24:eb:b4:8c:
f7:2f:5f:a3:12:c0:7d:ed:28:58:14:e6:83:56:c7:
63:d2:4f:ea:29:a5:b1:31:73:e5:a4:55:d1:7f:c1:
1a:16:03:5b:18:d6:be:3b:6b:a3:85:ea:c9:50:6e:
32:fb:50:4d:ab:ad:81:f5:73:a8:37:93:33:ee:ba:
e6:21:0f:7e:e5:2d:bb:cd:6a:5a:f7:31:e0:30:ca:
dd:99:0a:79:3d:22:82:02:8b:21:58:45:09:90:d7:
1f:f3:15:b2:de:51:ac:fa:6c:29:d8:31:22:40:c9:
f8:7d:ef:23:fa:b5:83:f3:13:47:73:d9:fd:28:bd:
e6:31:3a:3b:1f:b2:52:70:10:97:e4:7f:53:ff:9f:
e1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D5:6F:EB:9E:53:32:EB:CA:A1:BE:34:90:98:BC:BF:54:12:71:B4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ntVv655TMuvKob40kJi8v1QScbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.124.0/22
37.139.128.0/24
45.88.66.0/24
45.128.234.0/23
79.110.63.0/24
85.31.44.0/24
85.31.46.0/24
85.208.136.0/24
87.120.92.0/24
87.120.108.0/24
87.120.196.0/24
87.120.205.0/24
87.120.216.0/24
87.120.219.0/24
87.120.222.0/24
87.121.47.0/24
91.92.21.0/24
94.156.236.0/24
109.206.240.0/24
109.206.243.0/24
171.22.30.0/24
185.207.14.0/23
185.218.138.0/24
185.246.220.0/23
185.252.179.0/24
193.47.60.0/23
193.148.56.0/22
Signature Algorithm: sha256WithRSAEncryption
59:54:f9:ff:96:65:3a:91:63:d9:6c:5f:47:71:34:c3:97:4d:
f4:c7:bf:07:fe:d8:35:1f:dd:06:c4:fb:e3:7b:16:cd:06:9a:
d9:74:53:5f:c2:e2:5d:26:22:52:35:1d:29:ed:79:e6:ae:0b:
b4:96:3c:88:9c:1b:c4:53:72:39:9b:06:47:8f:b0:a2:2b:12:
fd:7e:73:9d:0b:7b:cb:80:12:3f:0c:d6:83:ec:35:c7:27:69:
1b:11:37:ca:9a:7a:a2:4c:d7:5d:b0:8f:de:bc:6c:b1:6b:b1:
9c:0a:be:12:f1:fa:ff:17:a0:ea:30:38:dd:dd:eb:05:8f:f0:
f8:3d:79:49:f0:f5:6e:f6:57:46:c2:63:f7:96:b3:a4:b5:70:
d4:eb:3e:f8:40:bb:fd:b7:56:15:e1:a7:97:79:52:ca:6e:b4:
60:61:b0:ed:42:01:e2:44:bb:9f:8d:57:1b:d7:78:79:31:59:
b7:aa:49:d9:cb:1a:42:2e:0a:cb:e4:51:05:ce:17:89:41:89:
96:c5:a4:1b:16:6e:fc:b7:08:ec:75:f9:01:ea:be:c4:8d:2a:
7d:b7:ba:ab:ee:4b:01:e4:ef:d0:d0:02:ed:e0:0e:dd:ba:7a:
23:47:a4:e2:f7:6a:6e:84:a1:32:32:57:33:12:bd:f5:bb:76:
f2:04:16:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:44 2025 by rpki-client on console.sobornost.net