Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/cwlcUqjMTfEdbvTuuvejw-lUBd4.roa
File: cwlcUqjMTfEdbvTuuvejw-lUBd4.roa (raw, json)
Hash identifier: ZDYHX14do9hr1lUFKNqTx5RIBWwnueYI0rEZQZpyW1E=
Subject key identifier: 73:09:5C:52:A8:CC:4D:F1:1D:6E:F4:EE:BA:F7:A3:C3:E9:54:05:DE
Certificate issuer: /CN=3edf7b2d68ba76a0bd1ba7e9d29fac5852316b9c
Certificate serial: 01941F8CA799F7752E30AE21E4A7BAA1199F
Authority key identifier: 3E:DF:7B:2D:68:BA:76:A0:BD:1B:A7:E9:D2:9F:AC:58:52:31:6B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pt97LWi6dqC9G6fp0p-sWFIxa5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/cwlcUqjMTfEdbvTuuvejw-lUBd4.roa
Signing time: Wed 01 Jan 2025 01:48:19 +0000
ROA not before: Wed 01 Jan 2025 01:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44489
IP address blocks: 45.92.236.0/22 maxlen: 22
89.31.40.0/21 maxlen: 21
91.235.200.0/23 maxlen: 23
92.62.224.0/20 maxlen: 20
109.164.0.0/17 maxlen: 17
109.164.108.0/22 maxlen: 22
109.164.116.0/24 maxlen: 24
109.164.117.0/24 maxlen: 24
109.164.118.0/24 maxlen: 24
178.217.144.0/21 maxlen: 21
178.255.168.0/21 maxlen: 21
178.255.168.0/22 maxlen: 22
178.255.172.0/22 maxlen: 22
185.15.144.0/22 maxlen: 22
185.131.60.0/22 maxlen: 22
185.173.248.0/22 maxlen: 22
2a02:768::/32 maxlen: 32
2a03:3a00::/29 maxlen: 29
2a0b:7f00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:a7:99:f7:75:2e:30:ae:21:e4:a7:ba:a1:19:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3edf7b2d68ba76a0bd1ba7e9d29fac5852316b9c
Validity
Not Before: Jan 1 01:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73095c52a8cc4df11d6ef4eebaf7a3c3e95405de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:06:d0:3d:9f:d6:e4:93:bd:be:18:6f:69:c5:
d5:2b:b9:61:07:37:2f:49:fc:b5:30:5d:cb:b2:b0:
91:5c:02:2a:43:f9:22:71:af:d9:21:31:13:37:47:
35:a8:55:56:45:1a:ea:be:a3:fd:67:1f:e6:95:e9:
69:e2:64:5a:3f:60:68:da:02:f3:32:27:c3:58:69:
c9:98:89:83:21:26:fc:58:68:a9:c4:59:3a:a0:c0:
f8:1b:21:e9:32:29:43:5a:0f:e2:41:5c:74:26:6b:
2b:ee:8d:54:1e:60:dd:17:d5:f0:a6:da:b0:c1:f5:
9c:32:79:f1:18:3c:18:8a:a0:c7:8b:38:93:db:96:
28:b8:56:fe:a2:6a:2d:98:0f:3e:21:e7:03:2f:86:
da:3e:36:a5:4d:c2:7b:df:d7:f4:94:12:78:44:81:
9e:38:48:4b:ce:b5:b8:0a:a4:a9:8b:09:7a:01:b0:
0e:c7:b2:84:1f:20:6b:ae:2c:6a:31:a2:54:af:8d:
db:ce:a9:43:7f:74:7d:5a:a6:ae:2e:5d:24:50:ea:
18:40:4d:fd:7b:de:90:6f:18:28:4e:d9:60:67:ba:
17:3f:86:65:62:03:ed:15:15:e6:68:7c:3b:8e:c5:
9f:85:ac:5a:a6:72:6a:ad:05:b8:4a:48:43:44:91:
72:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:09:5C:52:A8:CC:4D:F1:1D:6E:F4:EE:BA:F7:A3:C3:E9:54:05:DE
X509v3 Authority Key Identifier:
keyid:3E:DF:7B:2D:68:BA:76:A0:BD:1B:A7:E9:D2:9F:AC:58:52:31:6B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt97LWi6dqC9G6fp0p-sWFIxa5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/cwlcUqjMTfEdbvTuuvejw-lUBd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.236.0/22
89.31.40.0/21
91.235.200.0/23
92.62.224.0/20
109.164.0.0/17
178.217.144.0/21
178.255.168.0/21
185.15.144.0/22
185.131.60.0/22
185.173.248.0/22
IPv6:
2a02:768::/32
2a03:3a00::/29
2a0b:7f00::/29
Signature Algorithm: sha256WithRSAEncryption
0f:50:9b:b0:bf:10:05:37:ef:af:0c:81:99:c0:92:9d:7a:7e:
11:b5:cd:93:14:22:21:24:34:6a:4f:3c:df:19:32:bb:1c:15:
a3:16:ad:bc:08:b9:eb:2e:fd:d3:af:c0:71:90:fb:da:df:f0:
a0:53:53:e9:eb:ee:b8:c2:4c:b9:9c:b0:66:43:42:ae:41:69:
25:26:b4:e3:2d:1c:59:1a:7c:e9:96:f8:91:7b:97:ae:89:56:
c1:e7:24:12:a9:53:72:20:ff:f9:9a:83:fa:58:fe:3d:a9:7b:
84:3f:52:a8:9a:7b:51:96:10:5c:15:04:7c:a1:da:d5:6d:81:
b1:8c:eb:24:71:9a:2c:dc:e8:81:af:0a:b6:7e:2d:1d:71:fc:
3c:e9:5a:67:91:6e:6b:99:ad:5c:de:29:21:51:57:74:e3:f4:
e3:b0:ae:70:73:be:14:42:61:4c:34:51:d4:2a:97:e0:6e:8a:
c2:0f:16:47:09:5a:82:b0:45:c9:17:0d:78:1e:e1:91:12:c2:
22:99:f1:ae:bb:7e:84:9c:db:05:d1:b4:6a:35:2c:49:08:eb:
da:8a:ba:05:56:05:a9:cb:24:99:b9:05:a4:66:3b:75:f1:8e:
41:01:28:c6:b4:9a:3d:78:44:85:6d:f2:db:4c:07:e9:6f:cb:
1c:a9:be:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:06 2025 by rpki-client on console.sobornost.net