Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/R_qbdcP3J6fNY4wBg9OY5tABKio.roa
File: R_qbdcP3J6fNY4wBg9OY5tABKio.roa (raw, json)
Hash identifier: qGQBfwpujLWSfdD+BfOupXx9Us5BBEVEXuBPudsfsCw=
Subject key identifier: 47:FA:9B:75:C3:F7:27:A7:CD:63:8C:01:83:D3:98:E6:D0:01:2A:2A
Certificate issuer: /CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Certificate serial: 0194228DF28C441D7C30FFDC883DD49FC981
Authority key identifier: 96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/R_qbdcP3J6fNY4wBg9OY5tABKio.roa
Signing time: Wed 01 Jan 2025 15:48:35 +0000
ROA not before: Wed 01 Jan 2025 15:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28748
IP address blocks: 37.26.200.0/21 maxlen: 21
134.97.0.0/16 maxlen: 17
185.23.156.0/22 maxlen: 22
192.105.75.0/24 maxlen: 24
193.22.2.0/24 maxlen: 24
195.190.142.0/24 maxlen: 24
2001:650::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:f2:8c:44:1d:7c:30:ff:dc:88:3d:d4:9f:c9:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Validity
Not Before: Jan 1 15:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47fa9b75c3f727a7cd638c0183d398e6d0012a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6a:f9:ff:c4:ea:81:55:b2:d2:72:7f:84:05:
1e:9a:18:54:4a:9a:36:a2:1c:8a:8c:94:31:09:fd:
13:6a:b8:8d:f1:7e:db:15:eb:b8:32:81:c2:66:73:
24:e6:44:bd:58:a2:a0:18:15:1c:93:e7:bf:8c:68:
02:65:89:b9:60:fb:2b:67:18:04:1e:49:89:c0:ee:
f8:cd:95:e3:2b:fa:3f:d8:0a:f6:40:1f:6a:9c:8f:
ea:f9:8f:54:46:d1:8b:eb:66:17:9f:9a:4e:56:87:
64:ea:59:3d:e8:72:06:3b:97:c6:c5:3d:10:5f:28:
f5:d9:40:f3:41:70:d7:a4:00:e0:d8:22:3c:7f:ec:
27:97:e9:af:3c:f6:b7:54:52:3c:a0:15:7b:9a:7d:
9e:a0:f8:a1:65:ae:43:50:70:f8:d0:49:06:e0:65:
c2:da:c2:cb:0a:f4:ce:f7:20:b7:8a:0b:99:e4:37:
79:f1:02:76:9e:ba:3e:db:2f:3c:63:b7:a4:f0:ea:
34:ed:5e:d0:76:c7:17:a7:6d:51:db:48:a7:12:25:
9b:90:79:38:04:7f:38:8f:14:48:29:56:4a:41:33:
42:8a:36:84:0f:6e:47:87:03:96:d5:89:ea:d2:2f:
4a:dd:93:ba:71:83:99:20:8a:f8:8e:c1:65:a7:4d:
ec:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FA:9B:75:C3:F7:27:A7:CD:63:8C:01:83:D3:98:E6:D0:01:2A:2A
X509v3 Authority Key Identifier:
keyid:96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/R_qbdcP3J6fNY4wBg9OY5tABKio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.26.200.0/21
134.97.0.0/16
185.23.156.0/22
192.105.75.0/24
193.22.2.0/24
195.190.142.0/24
IPv6:
2001:650::/29
Signature Algorithm: sha256WithRSAEncryption
a2:11:47:0e:f7:74:d8:13:58:79:00:d9:49:df:e6:94:ba:7d:
1e:9c:1e:35:7f:74:44:fe:e0:df:0b:66:2b:e6:67:e5:44:91:
ad:a3:1a:b8:0e:a3:41:58:bd:bd:19:39:3d:c3:1f:b6:14:c4:
e2:19:94:68:7b:f9:d2:12:e4:13:95:d8:e0:f5:0e:4e:f9:c6:
82:ad:b2:cc:eb:a4:a8:63:5f:e9:23:07:69:98:a9:cd:df:49:
aa:e9:e0:e5:cf:e0:eb:02:db:f2:19:dd:71:34:48:77:61:67:
94:bf:32:df:3f:40:dd:c8:6c:0a:23:62:e7:be:b0:e8:c3:c2:
e2:99:a1:38:f1:fe:71:a0:df:db:f4:1e:2a:e9:23:4b:16:f5:
50:8e:83:59:4f:4e:8f:23:d7:3b:54:15:bc:4f:52:05:7b:40:
93:60:58:c2:48:3e:3f:ea:db:83:a1:86:26:d0:28:fe:b5:06:
6e:50:78:1c:b4:68:a9:c9:c0:86:e2:b7:4a:e4:6f:42:2b:7d:
75:a7:83:f2:35:5a:02:68:20:4a:75:69:4c:9a:0c:ec:86:56:
fb:43:7c:2c:ca:e5:19:a6:24:a6:1c:9b:16:57:bc:1b:ba:9d:
42:10:e0:03:e3:20:e3:65:ec:46:a4:08:7b:22:77:7b:44:ea:
66:d7:7d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:32 2025 by rpki-client on console.sobornost.net