Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/axSxMMtcB3jBMtkS5Q64HYcMtTc.roa
File: axSxMMtcB3jBMtkS5Q64HYcMtTc.roa (raw, json)
Hash identifier: 07zkvoafDXYe8NQE+E7DmWyzGtCgg9qsUOd0vT8DL1s=
Subject key identifier: 6B:14:B1:30:CB:5C:07:78:C1:32:D9:12:E5:0E:B8:1D:87:0C:B5:37
Certificate issuer: /CN=cff374657f57078f3ca2c71109d35927c2248681
Certificate serial: 019091C60E5C68AC89C83E1FFCC8841D6DC3
Authority key identifier: CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/axSxMMtcB3jBMtkS5Q64HYcMtTc.roa
Signing time: Mon 08 Jul 2024 09:56:34 +0000
ROA not before: Mon 08 Jul 2024 09:56:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12963
IP address blocks: 94.232.208.0/21 maxlen: 21
94.232.208.0/24 maxlen: 24
94.232.209.0/24 maxlen: 24
94.232.210.0/24 maxlen: 24
94.232.211.0/24 maxlen: 24
94.232.212.0/24 maxlen: 24
94.232.213.0/24 maxlen: 24
94.232.214.0/24 maxlen: 24
94.232.215.0/24 maxlen: 24
176.100.0.0/24 maxlen: 24
176.100.1.0/24 maxlen: 24
176.100.2.0/23 maxlen: 24
176.100.4.0/24 maxlen: 24
176.100.5.0/24 maxlen: 24
176.100.6.0/24 maxlen: 24
176.100.8.0/24 maxlen: 24
176.100.9.0/24 maxlen: 24
176.100.10.0/23 maxlen: 24
176.100.12.0/24 maxlen: 24
176.100.13.0/24 maxlen: 24
176.100.14.0/24 maxlen: 24
176.100.15.0/24 maxlen: 24
176.100.16.0/20 maxlen: 20
176.100.16.0/24 maxlen: 24
176.100.17.0/24 maxlen: 24
176.100.18.0/24 maxlen: 24
176.100.19.0/24 maxlen: 24
176.100.20.0/24 maxlen: 24
176.100.21.0/24 maxlen: 24
176.100.22.0/24 maxlen: 24
176.100.23.0/24 maxlen: 24
176.100.24.0/24 maxlen: 24
176.100.25.0/24 maxlen: 24
176.100.26.0/24 maxlen: 24
176.100.27.0/24 maxlen: 24
176.100.28.0/24 maxlen: 24
176.100.29.0/24 maxlen: 24
176.100.30.0/24 maxlen: 24
176.100.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:91:c6:0e:5c:68:ac:89:c8:3e:1f:fc:c8:84:1d:6d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff374657f57078f3ca2c71109d35927c2248681
Validity
Not Before: Jul 8 09:56:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b14b130cb5c0778c132d912e50eb81d870cb537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:01:71:2f:51:37:de:96:81:ec:a5:eb:3b:14:
c4:57:5f:d1:cf:25:a6:17:a0:89:f9:ac:b1:c4:7d:
42:fa:8c:f3:fa:5d:a8:e8:5f:6f:ca:ef:f7:dd:1b:
ae:d7:96:04:ec:16:d2:9d:57:61:2d:a9:02:a6:41:
d1:6e:3e:3c:77:5e:5f:99:be:f3:57:ab:52:a7:94:
e1:67:8e:e2:3c:a8:3f:31:ac:c6:94:9b:90:d3:f8:
63:e7:a2:3c:0c:d9:e0:6a:df:b7:e1:43:5d:6e:35:
f0:88:7d:3d:a4:47:2c:6d:2d:15:8e:a3:9f:0f:10:
3b:8c:e3:58:e1:be:38:fa:3e:95:d1:43:8f:4b:c1:
d2:ca:4a:a2:a1:7c:9d:b3:2b:16:f0:20:06:57:e0:
dc:32:ce:92:1f:65:11:ad:6b:27:6c:c2:96:dc:6c:
ce:dc:eb:f5:1d:5d:23:36:2a:b8:b2:d1:a3:41:af:
2c:2d:a5:30:b0:a0:3f:72:fc:7a:29:ac:fd:62:08:
2f:63:af:2c:75:f4:38:f3:b4:bd:7d:c9:ff:fd:02:
db:d9:d6:4a:b2:22:eb:82:ed:19:cb:c6:aa:19:9c:
92:e4:c6:da:20:69:89:27:13:d1:10:42:93:d1:d8:
41:82:bc:90:82:4a:29:20:02:4d:0c:79:fd:02:61:
1a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:14:B1:30:CB:5C:07:78:C1:32:D9:12:E5:0E:B8:1D:87:0C:B5:37
X509v3 Authority Key Identifier:
keyid:CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/axSxMMtcB3jBMtkS5Q64HYcMtTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.232.208.0/21
176.100.0.0-176.100.6.255
176.100.8.0-176.100.31.255
Signature Algorithm: sha256WithRSAEncryption
95:1f:f1:a5:c7:1e:3f:31:c0:f8:b0:81:55:c5:a6:e8:aa:a7:
7f:bf:c1:04:fd:1b:17:5f:41:54:e6:71:bc:74:b6:1c:3e:18:
69:0a:2d:c2:52:2c:6f:e3:99:ef:8e:a4:73:71:8f:6c:30:22:
05:de:cc:15:75:49:c7:09:bd:53:aa:c5:25:22:e2:9a:7c:ff:
25:b4:f4:cd:26:6c:24:c8:dd:47:b2:3e:8e:f0:c5:f0:ad:25:
87:3e:1a:04:eb:0c:02:e5:71:bd:a4:0a:f3:c5:82:16:a0:e0:
03:ea:41:be:b7:13:a5:8e:c1:84:7a:43:06:77:9a:22:7f:92:
6e:b6:5c:c0:d2:ee:4a:bf:7e:61:cb:4d:5d:e0:7b:0d:9d:8f:
54:dc:cd:5f:db:0e:c8:f9:c0:7f:21:0c:b1:71:7f:de:08:23:
50:ad:d3:af:24:70:30:1f:3f:ef:16:e6:a0:d1:c1:fc:8d:c2:
e1:f3:99:98:e6:1e:e7:6a:e0:c7:fb:d3:3f:26:bc:67:c5:99:
ee:3e:f5:06:b3:6b:2a:e2:eb:99:12:44:34:ff:f2:75:56:73:
94:d5:6d:26:eb:1a:34:23:27:5c:7b:8c:49:69:46:3f:86:d0:
34:eb:70:e1:5a:5a:b1:75:48:30:a4:25:7a:3b:7a:e2:53:b9:
31:fd:f7:c0
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZCRxg5caKyJyD4f/MiEHW3DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZjM3NDY1N2Y1NzA3OGYzY2EyYzcxMTA5ZDM1OTI3YzIy
NDg2ODEwHhcNMjQwNzA4MDk1NjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjE0YjEzMGNiNWMwNzc4YzEzMmQ5MTJlNTBlYjgxZDg3MGNiNTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQFxL1E33paB7KXrOxTEV1/RzyWm
F6CJ+ayxxH1C+ozz+l2o6F9vyu/33Ruu15YE7BbSnVdhLakCpkHRbj48d15fmb7z
V6tSp5ThZ47iPKg/MazGlJuQ0/hj56I8DNngat+34UNdbjXwiH09pEcsbS0VjqOf
DxA7jONY4b44+j6V0UOPS8HSykqioXydsysW8CAGV+DcMs6SH2URrWsnbMKW3GzO
3Ov1HV0jNiq4stGjQa8sLaUwsKA/cvx6Kaz9YggvY68sdfQ487S9fcn//QLb2dZK
siLrgu0Zy8aqGZyS5MbaIGmJJxPREEKT0dhBgryQgkopIAJNDHn9AmEapQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFGsUsTDLXAd4wTLZEuUOuB2HDLU3MB8GA1UdIwQY
MBaAFM/zdGV/VwePPKLHEQnTWSfCJIaBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvel9OMFpYOVhCNDg4b3NjUkNkTlpKOElraG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jZDIxNDYtN2ZiZS00ZTVkLTkzYmEt
M2VhMmViZmU4NzA3LzEvYXhTeE1NdGNCM2pCTXRrUzVRNjRIWWNNdFRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jZDIxNDYtN2ZiZS00ZTVkLTkzYmEtM2VhMmViZmU4NzA3
LzEvel9OMFpYOVhCNDg4b3NjUkNkTlpKOElraG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAnBAIAATAhAwQDXujQMAsD
AwKwZAMEALBkBjAMAwQDsGQIAwQFsGQAMA0GCSqGSIb3DQEBCwUAA4IBAQCVH/Gl
xx4/McD4sIFVxaboqqd/v8EE/RsXX0FU5nG8dLYcPhhpCi3CUixv45nvjqRzcY9s
MCIF3swVdUnHCb1TqsUlIuKafP8ltPTNJmwkyN1Hsj6O8MXwrSWHPhoE6wwC5XG9
pArzxYIWoOAD6kG+txOljsGEekMGd5oif5JutlzA0u5Kv35hy01d4HsNnY9U3M1f
2w7I+cB/IQyxcX/eCCNQrdOvJHAwHz/vFuag0cH8jcLh85mY5h7nauDH+9M/Jrxn
xZnuPvUGs2sq4uuZEkQ0//J1VnOU1W0m6xo0Iydce4xJaUY/htA063DhWlqxdUgw
pCV6O3riU7kx/ffA
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:57 2024 by rpki-client on console.sobornost.net