Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/mNJTLNjj6AfeuCVnfV00ORno5GU.roa
File: mNJTLNjj6AfeuCVnfV00ORno5GU.roa (raw, json)
Hash identifier: NE3MR19bhv1xyo6MpzB3l+rz7Un7WTCoqeufjmUuYPk=
Subject key identifier: 98:D2:53:2C:D8:E3:E8:07:DE:B8:25:67:7D:5D:34:39:19:E8:E4:65
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 019626CD700BDFBEB99CBAC0FAE424FC63F7
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/mNJTLNjj6AfeuCVnfV00ORno5GU.roa
Signing time: Fri 11 Apr 2025 21:41:59 +0000
ROA not before: Fri 11 Apr 2025 21:41:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 393336
IP address blocks: 37.49.144.0/24 maxlen: 24
37.49.147.0/24 maxlen: 24
94.74.171.0/24 maxlen: 24
94.74.187.0/24 maxlen: 24
109.203.161.0/24 maxlen: 24
109.203.163.0/24 maxlen: 24
109.203.166.0/24 maxlen: 24
176.46.129.0/24 maxlen: 24
176.46.130.0/24 maxlen: 24
176.46.133.0/24 maxlen: 24
176.46.135.0/24 maxlen: 24
176.46.137.0/24 maxlen: 24
176.46.148.0/24 maxlen: 24
176.46.149.0/24 maxlen: 24
176.46.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:26:cd:70:0b:df:be:b9:9c:ba:c0:fa:e4:24:fc:63:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Apr 11 21:41:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98d2532cd8e3e807deb825677d5d343919e8e465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f2:3b:08:1e:c4:8a:f0:86:8f:82:eb:90:23:
c8:9f:f0:59:13:01:a2:24:de:b5:ff:fc:20:89:52:
d4:a1:4d:9a:f8:75:46:a6:d4:ad:b2:5d:95:5c:4c:
cc:72:d5:e6:de:72:bf:63:46:4b:55:a3:83:42:78:
da:be:0f:67:e5:db:b7:af:08:a8:a4:68:aa:b5:8a:
94:53:e3:4f:76:f4:e6:09:5e:f8:2d:80:21:24:c7:
4f:1e:7c:09:01:6f:23:11:4d:70:16:fc:e2:7e:64:
da:45:99:8d:e7:a9:1a:2d:c0:44:70:b9:a8:cd:a3:
4e:fd:ce:96:9e:af:98:9c:8a:7d:f8:2f:25:e7:0f:
5e:49:f6:d5:0f:96:2a:26:f2:a6:2f:a7:64:85:a1:
43:39:9d:68:b7:e4:90:62:e1:43:d6:50:22:6f:9f:
90:12:e7:d8:bd:a6:db:30:18:b1:00:60:f6:eb:2b:
b0:25:86:36:f8:d6:d2:fb:96:3c:da:98:67:98:6c:
ff:fa:48:86:a8:1f:4d:9d:5e:bc:7a:f3:cd:09:60:
2d:17:1d:a3:54:97:77:09:8b:ea:25:b8:ba:7c:b0:
08:0e:00:92:72:20:50:de:95:b8:49:5d:73:3a:25:
c3:ab:c6:5a:54:f6:0f:08:bb:98:bb:d0:68:5f:f8:
06:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D2:53:2C:D8:E3:E8:07:DE:B8:25:67:7D:5D:34:39:19:E8:E4:65
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/mNJTLNjj6AfeuCVnfV00ORno5GU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.144.0/24
37.49.147.0/24
94.74.171.0/24
94.74.187.0/24
109.203.161.0/24
109.203.163.0/24
109.203.166.0/24
176.46.129.0-176.46.130.255
176.46.133.0/24
176.46.135.0/24
176.46.137.0/24
176.46.148.0/23
176.46.156.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:1f:62:6f:61:c9:7c:dc:0a:8a:b4:58:fa:48:8d:27:b7:83:
c6:5f:01:4c:5a:56:93:a1:d9:2c:da:7e:a2:13:ef:8c:87:9a:
67:3b:dd:26:db:54:cd:db:8a:02:ec:ef:87:0e:14:d4:b3:de:
d7:c7:32:f0:43:a3:07:3e:6b:c8:b6:d8:df:b3:3a:a9:47:93:
db:02:87:9e:9b:10:7a:45:b7:fe:48:7c:89:80:91:fd:5c:77:
af:1a:b2:83:86:d4:71:b1:82:bb:b9:8a:c0:c5:d2:05:6a:65:
f1:91:ea:14:11:2c:3a:0c:61:e8:61:b5:b3:42:80:a4:0e:03:
4b:40:cc:80:83:57:47:23:8d:21:ed:28:85:34:3a:ba:44:3b:
5b:60:8e:af:f7:05:b1:b9:c3:bb:82:47:ea:e3:f3:9a:c4:c2:
c0:65:95:fb:ae:a0:22:6a:32:ef:01:8b:f9:f0:96:5c:7d:44:
d6:d8:65:f4:76:46:f6:6f:32:b2:bf:b8:57:74:36:51:fd:46:
b5:ba:92:77:75:b0:ee:4c:bd:4e:b0:ab:b4:11:c8:9e:b2:e4:
1d:7a:29:87:5e:12:6a:9e:10:a6:0f:4e:d0:4b:b0:d5:0d:55:
5b:86:e3:1c:b0:a2:57:ec:e4:fd:c1:47:53:64:c9:b6:80:6a:
3b:0e:2f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:22 2025 by rpki-client on console.sobornost.net