Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/9-RVM-y3DRicWvQd25TOzw1ok3M.roa
File: 9-RVM-y3DRicWvQd25TOzw1ok3M.roa (raw, json)
Hash identifier: FZ/EylrDMiv6g07Z0XxDc/kBJEQObZHKRH6kmnRIHYI=
Subject key identifier: F7:E4:55:33:EC:B7:0D:18:9C:5A:F4:1D:DB:94:CE:CF:0D:68:93:73
Certificate issuer: /CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Certificate serial: 018CC56ECE27305C77ECD618083032D331D3
Authority key identifier: C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/9-RVM-y3DRicWvQd25TOzw1ok3M.roa
Signing time: Mon 01 Jan 2024 14:30:22 +0000
ROA not before: Mon 01 Jan 2024 14:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206405
IP address blocks: 37.122.192.0/21 maxlen: 24
37.122.198.0/23 maxlen: 23
37.122.196.0/22 maxlen: 22
37.122.196.0/23 maxlen: 24
185.156.190.0/23 maxlen: 23
185.156.188.0/23 maxlen: 23
185.156.188.0/22 maxlen: 22
185.156.189.0/24 maxlen: 24
185.224.252.0/22 maxlen: 22
2a00:9e40::/34 maxlen: 34
2a00:9e40:8000::/33 maxlen: 33
2a00:9e40:1000::/36 maxlen: 36
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:ce:27:30:5c:77:ec:d6:18:08:30:32:d3:31:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Validity
Not Before: Jan 1 14:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7e45533ecb70d189c5af41ddb94cecf0d689373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0b:77:69:0f:fc:fd:8c:bb:dd:b7:f4:5d:0f:
fc:47:7c:58:e3:dc:44:a0:e2:7b:b2:be:5c:05:26:
f2:be:a4:15:6c:09:10:23:28:88:34:d0:89:33:79:
9e:ae:34:69:e8:ad:15:27:92:0b:99:d3:55:ed:67:
e7:cb:24:41:9d:73:26:4c:cc:e3:11:d1:aa:6c:fe:
47:8b:98:87:d3:db:20:7d:9e:12:f9:66:1b:79:74:
15:cd:90:13:c1:58:61:23:20:b8:4d:db:f5:1d:2f:
54:ae:f6:c8:c4:84:2d:ea:98:3b:46:c5:46:21:da:
69:33:db:0a:22:49:93:d1:67:8b:be:4e:d2:fe:28:
27:ad:18:3b:ec:ff:00:70:cb:80:bf:80:61:6a:80:
a3:0c:0e:11:28:68:05:39:ac:e3:76:b1:dc:3c:e0:
b9:2e:52:37:a1:28:92:20:5c:ea:69:82:13:7c:dc:
dd:89:8b:2f:5d:08:a1:12:01:c0:1b:6e:ec:cb:02:
d2:18:8b:44:fa:ae:11:84:e2:1d:61:9e:10:cb:a4:
59:4a:54:c4:64:68:36:ca:49:6d:2e:1d:24:86:2d:
b4:66:38:85:db:01:44:03:29:96:c0:5b:c6:91:58:
ad:b3:98:e2:42:00:6d:d1:37:93:38:ae:e9:05:2a:
81:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E4:55:33:EC:B7:0D:18:9C:5A:F4:1D:DB:94:CE:CF:0D:68:93:73
X509v3 Authority Key Identifier:
keyid:C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/9-RVM-y3DRicWvQd25TOzw1ok3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.122.192.0/21
185.156.188.0/22
185.224.252.0/22
IPv6:
2a00:9e40::/34
2a00:9e40:8000::/33
Signature Algorithm: sha256WithRSAEncryption
26:ee:37:92:dd:00:f6:20:ad:8d:c4:44:cc:1e:04:05:28:86:
42:fe:c7:ad:0f:c9:db:3b:d9:9b:7d:0a:e2:e0:2b:b1:a0:eb:
3c:b4:d1:76:db:61:f1:00:17:86:b6:79:06:bc:d5:79:9b:84:
d5:32:f9:0c:87:d3:16:1e:2d:3c:a5:94:00:81:4f:58:d9:c0:
75:63:74:63:81:1e:2a:32:88:a1:8e:20:38:a2:6d:1e:77:b2:
6d:b6:c2:06:64:7c:63:fd:21:a3:aa:d0:7e:fa:cc:57:ea:8d:
26:95:63:11:a2:47:0f:c2:c8:cd:bc:31:af:0b:5b:56:d8:d7:
5a:8d:87:47:75:cd:1c:59:cf:ad:c7:a3:85:59:66:0a:71:60:
6c:77:37:c8:af:70:08:1a:7b:77:2e:57:37:77:96:e1:94:e0:
9d:22:30:35:eb:60:f7:43:03:4b:b6:c8:07:13:c5:1d:63:a4:
f3:90:71:ed:34:4f:18:34:e7:fb:5d:64:3a:24:de:2b:8f:24:
84:aa:c4:d5:8a:a3:b0:ff:d1:e3:a5:21:0d:15:31:87:eb:2b:
2e:07:f6:ee:ef:12:6f:fe:53:13:fb:1e:ff:b9:73:9c:f3:8c:
53:d7:1c:30:a1:8a:3c:6f:fe:c7:a1:5d:b1:ba:e5:93:1f:86:
16:ef:a9:4a
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYzFbs4nMFx37NYYCDAy0zHTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5Yzg4MTI0N2NhZGJjYmY1MmFhMmFkNzYyY2M3NDU0YTdh
ODcyNmUwHhcNMjQwMTAxMTQzMDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2U0NTUzM2VjYjcwZDE4OWM1YWY0MWRkYjk0Y2VjZjBkNjg5MzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gt3aQ/8/Yy73bf0XQ/8R3xY49xE
oOJ7sr5cBSbyvqQVbAkQIyiINNCJM3merjRp6K0VJ5ILmdNV7WfnyyRBnXMmTMzj
EdGqbP5Hi5iH09sgfZ4S+WYbeXQVzZATwVhhIyC4Tdv1HS9UrvbIxIQt6pg7RsVG
IdppM9sKIkmT0WeLvk7S/ignrRg77P8AcMuAv4BhaoCjDA4RKGgFOazjdrHcPOC5
LlI3oSiSIFzqaYITfNzdiYsvXQihEgHAG27sywLSGItE+q4RhOIdYZ4Qy6RZSlTE
ZGg2ykltLh0khi20ZjiF2wFEAymWwFvGkVits5jiQgBt0TeTOK7pBSqBbwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFPfkVTPstw0YnFr0HduUzs8NaJNzMB8GA1UdIwQY
MBaAFMnIgSR8rby/Uqoq12LMdFSnqHJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWNpQkpIeXR2TDlTcWlyWFlzeDBWS2VvY200LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82ZDZiNTMtOTVhOS00ZDYwLWI0NmQt
N2VmZTkwNWZmMjkxLzEvOS1SVk0teTNEUmljV3ZRZDI1VE96dzFvazNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82ZDZiNTMtOTVhOS00ZDYwLWI0NmQtN2VmZTkwNWZmMjkx
LzEveWNpQkpIeXR2TDlTcWlyWFlzeDBWS2VvY200LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAYBAIAATASAwQDJXrAAwQC
uZy8AwQCueD8MBYEAgACMBADBgYqAJ5AAAMGByoAnkCAMA0GCSqGSIb3DQEBCwUA
A4IBAQAm7jeS3QD2IK2NxETMHgQFKIZC/setD8nbO9mbfQri4CuxoOs8tNF222Hx
ABeGtnkGvNV5m4TVMvkMh9MWHi08pZQAgU9Y2cB1Y3RjgR4qMoihjiA4om0ed7Jt
tsIGZHxj/SGjqtB++sxX6o0mlWMRokcPwsjNvDGvC1tW2NdajYdHdc0cWc+tx6OF
WWYKcWBsdzfIr3AIGnt3Llc3d5bhlOCdIjA162D3QwNLtsgHE8UdY6TzkHHtNE8Y
NOf7XWQ6JN4rjySEqsTViqOw/9HjpSENFTGH6ysuB/bu7xJv/lMT+x7/uXOc84xT
1xwwoYo8b/7HoV2xuuWTH4YW76lK
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:05:14 2024 by rpki-client on console.sobornost.net