Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/RZJ1dvTFKO9eBVJ_U9x6woW--cU.roa
File: RZJ1dvTFKO9eBVJ_U9x6woW--cU.roa (raw, json)
Hash identifier: C1wwVankxAXXgB5KUQmlZ1lYNQlcBbFMWjKjZ9yl10I=
Subject key identifier: 45:92:75:76:F4:C5:28:EF:5E:05:52:7F:53:DC:7A:C2:85:BE:F9:C5
Certificate issuer: /CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Certificate serial: 019420D609CC4C7127C7DCC92375D6E63664
Authority key identifier: 37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/RZJ1dvTFKO9eBVJ_U9x6woW--cU.roa
Signing time: Wed 01 Jan 2025 07:48:05 +0000
ROA not before: Wed 01 Jan 2025 07:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29134
IP address blocks: 37.46.80.0/21 maxlen: 21
62.109.128.0/19 maxlen: 19
130.193.8.0/21 maxlen: 24
171.33.136.0/21 maxlen: 21
185.100.92.0/22 maxlen: 22
185.102.20.0/22 maxlen: 22
185.102.76.0/22 maxlen: 22
213.109.164.0/22 maxlen: 24
217.31.48.0/20 maxlen: 20
2001:1ab0::/32 maxlen: 32
2a00:ca80::/32 maxlen: 32
2a03:b780::/32 maxlen: 32
2a09:ec00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:09:cc:4c:71:27:c7:dc:c9:23:75:d6:e6:36:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Validity
Not Before: Jan 1 07:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45927576f4c528ef5e05527f53dc7ac285bef9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ca:10:07:8d:c0:22:c1:58:f5:4d:0a:ce:4b:
3c:69:cf:f4:e9:8b:ae:f9:2a:de:8c:dc:aa:19:bf:
97:91:b6:3b:5c:26:a4:f0:d0:a9:e3:66:6c:52:18:
e3:b4:fa:6c:68:c6:1f:31:11:0d:2a:29:2b:18:7c:
7d:33:da:e3:7f:9d:1c:b5:6e:37:3e:77:4b:45:f5:
a3:3c:e1:4c:3a:f8:b3:0d:48:1b:48:dd:59:7d:24:
2f:6b:83:b2:ed:b3:28:4c:20:e3:0c:b1:d4:c4:93:
67:61:25:cb:8c:c0:3a:53:5d:15:0e:ed:8e:58:8c:
17:54:a9:a3:9d:65:84:7d:6e:37:c0:50:39:1b:83:
01:0a:9c:80:5a:e4:c5:97:86:44:a6:0c:88:d7:79:
40:a4:a8:62:01:50:e0:42:b2:b2:68:a9:11:e8:ce:
aa:2e:d5:14:d2:f5:f8:20:ee:1e:47:d1:1c:21:27:
11:43:de:f6:4f:41:2d:36:93:3f:bd:b3:cb:e9:31:
29:50:57:e2:29:60:60:fd:ca:40:6c:60:22:c8:64:
91:bb:4d:af:84:33:22:1e:43:41:f0:62:bf:24:4f:
60:28:ee:91:dc:00:49:4c:38:ff:1c:34:c1:e3:2a:
29:37:cb:16:1b:9e:55:f5:67:7c:08:c5:d0:5d:d5:
d9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:92:75:76:F4:C5:28:EF:5E:05:52:7F:53:DC:7A:C2:85:BE:F9:C5
X509v3 Authority Key Identifier:
keyid:37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/RZJ1dvTFKO9eBVJ_U9x6woW--cU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.80.0/21
62.109.128.0/19
130.193.8.0/21
171.33.136.0/21
185.100.92.0/22
185.102.20.0/22
185.102.76.0/22
213.109.164.0/22
217.31.48.0/20
IPv6:
2001:1ab0::/32
2a00:ca80::/32
2a03:b780::/32
2a09:ec00::/29
Signature Algorithm: sha256WithRSAEncryption
76:4b:ee:02:07:da:f8:2f:2a:cf:85:ae:90:74:48:d2:7e:7c:
55:55:63:4d:61:89:32:56:df:29:87:2a:df:b7:de:76:29:9a:
ec:94:23:6e:14:00:1c:b2:b7:85:62:e7:33:07:94:5c:5d:0e:
65:29:da:ce:a3:65:bd:f8:52:2a:a0:15:7f:a4:d0:3e:e9:3e:
5d:1e:7a:38:e9:be:85:e6:d4:f6:4d:a2:05:d7:c1:09:a5:28:
ae:bb:99:e4:7f:19:ea:c0:30:65:dc:27:94:50:7a:a4:fe:5e:
ee:1a:aa:0e:ab:f5:0f:98:9e:0d:62:4c:aa:14:bd:f1:13:27:
04:8d:17:83:58:c2:c5:6e:24:67:ee:e8:d6:30:6f:76:01:3d:
9b:e2:a8:62:8a:69:ad:43:39:26:59:97:50:df:dc:7e:d5:e3:
9e:37:7e:65:11:7b:23:dc:07:88:2f:3c:6e:fb:5f:ed:47:85:
74:a3:25:a3:11:1b:dc:e6:e2:d2:8a:bb:73:be:29:6b:c8:74:
d2:05:fa:a7:7f:9f:49:25:72:63:fa:1e:68:bb:36:c0:48:74:
15:98:be:6c:f2:63:21:62:f9:3e:d5:0f:a4:e9:43:09:df:e1:
bf:95:74:e3:25:ba:42:41:17:2b:17:39:80:fc:1b:3d:ec:c6:
6f:2d:79:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:12:47 2025 by rpki-client on console.sobornost.net