Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/fcUl98sKluiY4Z6HclXCv7bDmnU.roa
File: fcUl98sKluiY4Z6HclXCv7bDmnU.roa (raw, json)
Hash identifier: SP5xh1GaA83MywFSUlhztkzJVmjQdJpF6NtlQuuubs4=
Subject key identifier: 7D:C5:25:F7:CB:0A:96:E8:98:E1:9E:87:72:55:C2:BF:B6:C3:9A:75
Certificate issuer: /CN=c1ab247c636ad389bf9f8c5074c8220230e8edcc
Certificate serial: 01941F8C8DE05F5B9BA9D258614448B6EB64
Authority key identifier: C1:AB:24:7C:63:6A:D3:89:BF:9F:8C:50:74:C8:22:02:30:E8:ED:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/fcUl98sKluiY4Z6HclXCv7bDmnU.roa
Signing time: Wed 01 Jan 2025 01:48:12 +0000
ROA not before: Wed 01 Jan 2025 01:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44964
IP address blocks: 37.203.240.0/24 maxlen: 24
37.203.242.0/24 maxlen: 29
37.203.242.32/28 maxlen: 28
37.203.242.48/29 maxlen: 29
37.203.242.64/27 maxlen: 27
37.203.242.128/26 maxlen: 26
37.203.242.192/26 maxlen: 26
37.203.243.0/24 maxlen: 24
37.203.245.0/24 maxlen: 24
37.203.246.0/24 maxlen: 24
37.203.247.0/24 maxlen: 24
93.188.40.0/21 maxlen: 21
93.188.41.79/32 maxlen: 32
2a00:c8c0::/47 maxlen: 47
2a00:c8c0:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:8d:e0:5f:5b:9b:a9:d2:58:61:44:48:b6:eb:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1ab247c636ad389bf9f8c5074c8220230e8edcc
Validity
Not Before: Jan 1 01:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7dc525f7cb0a96e898e19e877255c2bfb6c39a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c0:da:01:73:c9:f6:cf:a5:92:9d:de:6e:12:
74:7b:8c:9e:d6:f1:cd:9e:8f:47:40:68:f0:f6:58:
e7:df:84:a1:a3:ab:2b:53:3b:18:03:b8:91:3d:dd:
c8:1f:6d:03:21:72:ba:ff:2e:3b:e4:97:bf:c9:65:
8c:7d:5d:86:7e:91:28:db:91:10:63:77:cf:a1:b8:
4c:5f:60:4d:01:21:e1:1a:8b:72:9f:12:62:39:d8:
d4:2a:72:7a:17:70:14:25:77:ed:16:20:f3:4a:58:
01:f2:47:14:17:d7:f6:51:f3:f1:10:54:e7:18:76:
da:25:e4:b8:9c:48:f2:25:c8:71:53:8f:29:cf:c4:
37:9a:27:eb:e3:80:cd:5b:1e:58:88:b1:59:77:64:
ae:04:df:16:91:4b:84:25:11:06:6e:e9:2d:6b:32:
24:2a:b7:e9:a1:02:8c:8a:94:b1:c6:5d:d1:80:05:
83:d8:86:dd:6b:06:9a:d5:8c:13:26:2f:e1:f0:b9:
0f:1d:37:63:31:c4:20:84:cc:dc:0c:f2:34:3c:75:
68:b9:40:66:42:7e:c7:45:3f:5d:fc:c3:32:2b:8d:
10:50:27:7d:cb:a6:db:a3:83:97:2a:89:18:3a:bb:
5e:3e:93:54:30:a0:8c:8c:f3:9f:90:a6:21:70:80:
d4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C5:25:F7:CB:0A:96:E8:98:E1:9E:87:72:55:C2:BF:B6:C3:9A:75
X509v3 Authority Key Identifier:
keyid:C1:AB:24:7C:63:6A:D3:89:BF:9F:8C:50:74:C8:22:02:30:E8:ED:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/fcUl98sKluiY4Z6HclXCv7bDmnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.203.240.0/24
37.203.242.0/23
37.203.245.0-37.203.247.255
93.188.40.0/21
IPv6:
2a00:c8c0::/47
Signature Algorithm: sha256WithRSAEncryption
78:a4:46:a4:98:d5:1b:0d:f5:f2:48:6c:f4:74:a0:09:10:aa:
53:db:e5:75:2d:c2:43:c2:cb:52:0d:eb:d6:26:92:c5:cf:4c:
6e:95:75:bc:24:b1:ca:63:c2:dd:89:36:f7:41:8c:34:6e:ef:
eb:6e:cb:28:20:53:30:22:9f:14:99:20:ab:28:4b:b6:59:a7:
8b:b3:36:ad:03:cd:75:4f:f7:73:c1:f8:98:a3:3e:65:b8:0c:
6e:2d:10:c0:21:7b:1a:3f:36:93:70:3f:a2:b3:81:04:59:57:
d9:ae:a9:b1:33:63:d1:84:89:f9:b0:e0:c7:b4:4a:40:40:6e:
76:18:92:62:24:6c:88:24:3f:21:f2:46:ec:84:cd:57:26:cf:
d5:a8:d2:94:41:28:3e:89:0d:8b:d2:b2:a0:8d:8a:6f:07:0f:
ac:5f:96:03:ca:ad:58:14:d3:60:8a:eb:b8:94:b9:86:f3:cd:
1d:70:6b:88:29:5e:8f:4f:61:e6:1f:ce:5c:78:1a:b6:7f:46:
b0:3f:e3:23:a0:8d:75:33:87:06:4d:3c:e3:3e:e3:f5:70:b4:
89:4e:fb:69:bc:88:7e:1b:02:2e:3d:4e:a0:25:ec:55:e6:1a:
6a:9b:a7:d1:f6:2d:25:62:26:5b:b4:26:7e:cb:93:42:dd:63:
50:44:18:56
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgISAZQfjI3gX1ubqdJYYURItutkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYWIyNDdjNjM2YWQzODliZjlmOGM1MDc0YzgyMjAyMzBl
OGVkY2MwHhcNMjUwMTAxMDE0ODEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGM1MjVmN2NiMGE5NmU4OThlMTllODc3MjU1YzJiZmI2YzM5YTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5cDaAXPJ9s+lkp3ebhJ0e4ye1vHN
no9HQGjw9ljn34Sho6srUzsYA7iRPd3IH20DIXK6/y475Je/yWWMfV2GfpEo25EQ
Y3fPobhMX2BNASHhGotynxJiOdjUKnJ6F3AUJXftFiDzSlgB8kcUF9f2UfPxEFTn
GHbaJeS4nEjyJchxU48pz8Q3mifr44DNWx5YiLFZd2SuBN8WkUuEJREGbuktazIk
KrfpoQKMipSxxl3RgAWD2Ibdawaa1YwTJi/h8LkPHTdjMcQghMzcDPI0PHVouUBm
Qn7HRT9d/MMyK40QUCd9y6bbo4OXKokYOrtePpNUMKCMjPOfkKYhcIDUfQIDAQAB
o4ICNDCCAjAwHQYDVR0OBBYEFH3FJffLCpbomOGeh3JVwr+2w5p1MB8GA1UdIwQY
MBaAFMGrJHxjatOJv5+MUHTIIgIw6O3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2Fza2ZHTnEwNG1fbjR4UWRNZ2lBakRvN2N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81NjY5MzgtZTJhOC00OGIzLTgxNmIt
MjdiMTEzY2ZmNTNiLzEvZmNVbDk4c0tsdWlZNFo2SGNsWEN2N2JEbW5VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS81NjY5MzgtZTJhOC00OGIzLTgxNmItMjdiMTEzY2ZmNTNi
LzEvd2Fza2ZHTnEwNG1fbjR4UWRNZ2lBakRvN2N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTAmBAIAATAgAwQAJcvwAwQB
JcvyMAwDBAAly/UDBAMly/ADBANdvCgwDwQCAAIwCQMHASoAyMAAADANBgkqhkiG
9w0BAQsFAAOCAQEAeKRGpJjVGw318khs9HSgCRCqU9vldS3CQ8LLUg3r1iaSxc9M
bpV1vCSxymPC3Yk290GMNG7v627LKCBTMCKfFJkgqyhLtlmni7M2rQPNdU/3c8H4
mKM+ZbgMbi0QwCF7Gj82k3A/orOBBFlX2a6psTNj0YSJ+bDgx7RKQEBudhiSYiRs
iCQ/IfJG7ITNVybP1ajSlEEoPokNi9KyoI2KbwcPrF+WA8qtWBTTYIrruJS5hvPN
HXBriClej09h5h/OXHgatn9GsD/jI6CNdTOHBk084z7j9XC0iU77abyIfhsCLj1O
oCXsVeYaapun0fYtJWImW7QmfsuTQt1jUEQYVg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:01 2025 by rpki-client on console.sobornost.net