Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/dz4GaCjjUXngl3Zj_utXdsd_v3g.roa
File: dz4GaCjjUXngl3Zj_utXdsd_v3g.roa (raw, json)
Hash identifier: UUmwsGYin8MFiEvi+IERfKoiolzYidH35nxZg9rXnzQ=
Subject key identifier: 77:3E:06:68:28:E3:51:79:E0:97:76:63:FE:EB:57:76:C7:7F:BF:78
Certificate issuer: /CN=f1479b83c520d784445c24828bab633f0d702cf3
Certificate serial: 018F808C8C57A1C5F6BB7B97AE99B3419679
Authority key identifier: F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/dz4GaCjjUXngl3Zj_utXdsd_v3g.roa
Signing time: Thu 16 May 2024 08:37:25 +0000
ROA not before: Thu 16 May 2024 08:37:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8399
IP address blocks: 37.97.64.0/19 maxlen: 19
37.97.69.0/24 maxlen: 24
37.97.70.0/24 maxlen: 24
37.97.80.0/23 maxlen: 23
37.97.96.0/20 maxlen: 20
37.139.120.0/21 maxlen: 21
65.39.64.0/19 maxlen: 19
80.251.96.0/20 maxlen: 20
81.93.0.0/19 maxlen: 19
88.213.224.0/19 maxlen: 19
109.235.232.0/21 maxlen: 21
109.235.232.0/24 maxlen: 24
109.235.233.0/24 maxlen: 24
109.235.239.0/24 maxlen: 24
157.143.128.0/17 maxlen: 17
178.157.16.0/20 maxlen: 20
178.157.32.0/20 maxlen: 20
178.174.96.0/20 maxlen: 23
178.255.160.0/21 maxlen: 21
185.6.92.0/22 maxlen: 22
185.8.252.0/22 maxlen: 22
185.24.140.0/22 maxlen: 22
185.32.208.0/22 maxlen: 22
185.42.176.0/22 maxlen: 22
185.65.248.0/22 maxlen: 22
185.76.216.0/22 maxlen: 22
185.218.208.0/22 maxlen: 22
185.249.20.0/22 maxlen: 22
195.135.0.0/17 maxlen: 17
195.135.0.0/18 maxlen: 18
195.135.12.0/23 maxlen: 23
195.135.48.0/20 maxlen: 20
195.135.48.0/24 maxlen: 24
217.74.96.0/20 maxlen: 20
217.181.128.0/17 maxlen: 17
217.181.250.0/23 maxlen: 23
2a02:6e8::/32 maxlen: 32
2a02:c440::/29 maxlen: 29
2a05:5cc0::/29 maxlen: 29
2a0b:e3c0::/29 maxlen: 29
2a0c:600::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:80:8c:8c:57:a1:c5:f6:bb:7b:97:ae:99:b3:41:96:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1479b83c520d784445c24828bab633f0d702cf3
Validity
Not Before: May 16 08:37:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=773e066828e35179e0977663feeb5776c77fbf78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6e:ac:d9:9b:03:53:08:58:52:15:ce:5c:ae:
85:49:a9:bd:57:88:86:68:c4:01:5e:41:75:27:cd:
22:22:0c:b1:b8:5a:d1:88:95:3e:89:84:7c:61:76:
03:aa:2f:48:ad:4a:40:2d:78:f6:44:ec:9a:0e:da:
2a:24:fe:19:e9:c8:f1:44:d7:02:4d:13:a8:ee:87:
38:e4:6e:49:3a:99:5d:c4:a1:43:e4:8c:b3:0d:a0:
b6:b5:b3:4d:a5:b4:d1:1b:35:54:04:4a:14:60:d1:
a2:2e:d6:58:9e:dc:ef:1e:c8:36:3e:3a:29:9e:1f:
f4:5c:62:e2:40:72:5d:cf:3e:72:78:65:80:7d:b3:
34:42:60:b9:7f:4a:75:0f:cb:81:66:c1:2d:b0:9d:
4d:c7:67:dd:68:b2:f6:84:20:f9:35:27:7b:a8:af:
b7:71:e9:81:d8:20:6c:57:91:b8:f2:b5:e5:93:2b:
87:9d:5d:7a:6f:45:48:b6:48:c5:2a:7f:7f:8b:a7:
3b:28:f0:83:ce:2b:85:44:d6:bc:f8:ca:3a:1d:84:
3e:6f:1c:72:6e:b1:0f:9d:16:af:0f:0e:a1:e2:7f:
12:37:19:3d:9b:93:2f:bd:e3:eb:ac:c3:dc:02:c7:
72:93:75:b8:6b:22:7d:67:22:86:e1:10:a1:86:ed:
e8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3E:06:68:28:E3:51:79:E0:97:76:63:FE:EB:57:76:C7:7F:BF:78
X509v3 Authority Key Identifier:
keyid:F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/dz4GaCjjUXngl3Zj_utXdsd_v3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.97.64.0-37.97.111.255
37.139.120.0/21
65.39.64.0/19
80.251.96.0/20
81.93.0.0/19
88.213.224.0/19
109.235.232.0/21
157.143.128.0/17
178.157.16.0-178.157.47.255
178.174.96.0/20
178.255.160.0/21
185.6.92.0/22
185.8.252.0/22
185.24.140.0/22
185.32.208.0/22
185.42.176.0/22
185.65.248.0/22
185.76.216.0/22
185.218.208.0/22
185.249.20.0/22
195.135.0.0/17
217.74.96.0/20
217.181.128.0/17
IPv6:
2a02:6e8::/32
2a02:c440::/29
2a05:5cc0::/29
2a0b:e3c0::/29
2a0c:600::/29
Signature Algorithm: sha256WithRSAEncryption
4c:ce:56:8d:f5:46:d0:f4:b9:f5:13:c2:b4:3a:09:cb:36:30:
c6:72:7b:1a:82:a8:aa:3b:07:83:c3:e8:23:f6:2c:b4:63:55:
16:fc:06:35:3c:4c:07:cf:ac:c2:0b:ce:13:d0:75:16:12:b6:
60:ab:ae:67:a4:09:2f:cd:49:d1:7b:0d:6a:1a:42:79:b2:3c:
00:34:ab:8f:91:90:be:de:26:60:81:ad:41:46:78:05:d8:fd:
42:ba:ea:ec:7c:3e:d6:53:9f:13:33:76:34:14:04:0a:ea:3d:
b9:97:ae:3b:19:51:cb:5a:c6:fa:a7:68:93:17:eb:b0:8d:c7:
a3:9e:d8:26:51:8f:70:43:03:64:b3:86:5d:66:9b:be:0c:ea:
bd:ee:49:09:04:f4:01:4f:31:69:26:18:4e:84:9e:99:e1:fd:
31:d4:b6:82:f4:21:5d:61:06:d9:16:25:c0:6a:6f:be:59:ea:
ce:ea:db:fc:2b:aa:b2:cd:7a:cd:34:77:3d:a6:2c:be:15:97:
0a:80:e8:93:5d:8a:e7:ee:89:97:2f:f5:c5:d3:87:5c:4c:ee:
64:cf:fd:8b:8c:2a:d3:ed:f7:97:72:3a:d8:67:3c:93:b3:2e:
70:2c:9c:50:af:e4:d7:d6:91:d0:58:ba:95:9d:1e:01:d1:e6:
41:2d:cf:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:59 2024 by rpki-client on console.sobornost.net