Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/3NDpUsqPhJcxz3A4C7fxd4qK490.roa
File: 3NDpUsqPhJcxz3A4C7fxd4qK490.roa (raw, json)
Hash identifier: seRjEjrca1U020SOwQkEAWYH1YXwwlJnTmGlO6JWc44=
Subject key identifier: DC:D0:E9:52:CA:8F:84:97:31:CF:70:38:0B:B7:F1:77:8A:8A:E3:DD
Certificate issuer: /CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
Certificate serial: 0195FFBECF73E08A855A99AE9622C863D8AE
Authority key identifier: B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/3NDpUsqPhJcxz3A4C7fxd4qK490.roa
Signing time: Fri 04 Apr 2025 07:40:49 +0000
ROA not before: Fri 04 Apr 2025 07:40:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61275
IP address blocks: 5.100.176.0/21 maxlen: 21
5.100.184.0/22 maxlen: 22
77.223.161.0/24 maxlen: 24
77.223.162.0/23 maxlen: 23
77.223.164.0/22 maxlen: 22
77.223.168.0/22 maxlen: 22
77.223.172.0/22 maxlen: 22
77.223.176.0/20 maxlen: 20
85.93.224.0/19 maxlen: 19
91.135.48.0/21 maxlen: 21
91.135.56.0/23 maxlen: 23
91.135.58.0/23 maxlen: 23
91.135.58.0/24 maxlen: 24
91.135.59.0/24 maxlen: 24
91.135.60.0/22 maxlen: 22
178.248.96.0/21 maxlen: 21
185.3.0.0/22 maxlen: 22
185.24.188.0/22 maxlen: 22
188.93.184.0/21 maxlen: 21
2a03:ba00::/32 maxlen: 32
2a03:ba01::/32 maxlen: 32
2a03:ba02::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ff:be:cf:73:e0:8a:85:5a:99:ae:96:22:c8:63:d8:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
Validity
Not Before: Apr 4 07:40:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcd0e952ca8f849731cf70380bb7f1778a8ae3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:37:54:86:66:93:47:3a:47:3c:01:98:fa:44:
f9:8f:a8:cd:b5:55:81:8d:f5:bf:e2:64:57:29:d2:
60:28:38:4a:04:fc:98:eb:fe:40:14:02:8b:98:85:
85:40:35:38:c5:27:d7:3e:85:22:e6:4a:bd:8d:cf:
30:af:ec:26:ce:d3:7a:9c:34:30:18:d8:fc:69:f5:
24:17:cd:93:0a:14:51:65:75:c1:8d:b6:11:00:fa:
ae:c7:5d:37:3e:ef:fe:d5:78:13:d7:40:b0:98:fa:
65:4d:e1:62:2d:e5:6a:43:a0:08:78:ad:bb:22:2d:
cd:96:68:5a:5a:57:4b:3f:10:8d:e7:f1:12:0e:8f:
d0:72:30:26:ea:3a:21:1a:06:1f:75:27:98:1e:56:
9d:df:3f:ff:7c:54:de:99:cd:4c:e7:2b:fc:3d:0b:
28:04:72:9d:22:51:ff:06:66:32:ef:62:fe:92:50:
90:29:b9:de:c4:55:af:3a:5b:fd:4b:c2:da:0b:c6:
c4:6e:80:c6:88:1c:aa:27:cd:07:1d:5c:e9:2f:06:
f8:68:ff:e3:76:3d:3d:41:79:00:a5:d4:aa:8b:5b:
ef:f7:72:74:4d:22:6d:65:03:32:9f:1d:19:87:f3:
e6:cc:99:e6:3e:40:d0:e1:37:7e:79:d1:3a:05:c4:
ce:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D0:E9:52:CA:8F:84:97:31:CF:70:38:0B:B7:F1:77:8A:8A:E3:DD
X509v3 Authority Key Identifier:
keyid:B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/3NDpUsqPhJcxz3A4C7fxd4qK490.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.176.0-5.100.187.255
77.223.161.0-77.223.191.255
85.93.224.0/19
91.135.48.0/20
178.248.96.0/21
185.3.0.0/22
185.24.188.0/22
188.93.184.0/21
IPv6:
2a03:ba00::-2a03:ba02:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
c7:74:42:0e:db:9c:1c:cb:76:d9:a2:0e:d9:ba:12:52:96:86:
ff:cd:1b:38:32:90:0a:23:54:6f:90:51:f1:dd:bb:d3:d6:c8:
20:9d:05:01:d3:5c:cc:5d:e8:f0:d8:73:c5:ec:b9:03:17:7b:
33:9a:a2:c6:00:e7:8e:e4:a1:67:c2:7c:51:0e:4f:f6:ca:a8:
47:3f:55:b3:f2:37:e8:0a:4d:9c:70:a5:bb:8b:24:e7:63:61:
a3:9a:ee:30:ca:28:04:a4:6b:5b:50:f0:60:d0:65:61:84:64:
dc:77:1d:73:24:64:d2:5f:f3:62:98:da:67:3a:66:b9:c1:8a:
1f:d5:65:d4:51:b5:b2:ac:dd:2e:94:d4:63:10:0a:07:7c:07:
b6:85:61:cc:6f:40:01:65:b5:20:5b:55:e7:b1:f6:5f:3f:54:
b4:92:ba:b1:0f:d4:09:5b:5c:7d:ce:85:cf:36:40:6f:3a:9f:
0f:29:a2:dc:8a:12:5b:57:ce:4f:c2:70:e0:b7:24:ea:fd:d9:
b9:0a:78:34:2f:55:56:4d:00:bb:a6:a2:9f:61:41:a5:35:8e:
89:fe:04:c7:12:39:a5:ae:1b:f6:5a:b1:d5:3d:0e:e9:15:12:
52:16:0d:d1:af:4b:20:16:20:4d:c5:6c:b3:94:38:a8:ef:ad:
1e:ca:f5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:47 2025 by rpki-client on console.sobornost.net