Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/c2KmzgC2E8wnyMl3ET7bbXtsl28.roa
File: c2KmzgC2E8wnyMl3ET7bbXtsl28.roa (raw, json)
Hash identifier: iCu/CgeKq6j6xvBOhyPWL0bUM1p4HmortGMzXWFLmpc=
Subject key identifier: 73:62:A6:CE:00:B6:13:CC:27:C8:C9:77:11:3E:DB:6D:7B:6C:97:6F
Certificate issuer: /CN=a57d4cfe60f8a30a4d0ff94b94ebadfc88c9ac11
Certificate serial: 019422FC19E20E84AF9B6A4D23E0AE0F07DA
Authority key identifier: A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/c2KmzgC2E8wnyMl3ET7bbXtsl28.roa
Signing time: Wed 01 Jan 2025 17:48:54 +0000
ROA not before: Wed 01 Jan 2025 17:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28952
IP address blocks: 31.3.32.0/19 maxlen: 19
37.58.0.0/20 maxlen: 20
37.152.96.0/19 maxlen: 19
46.34.224.0/19 maxlen: 19
151.236.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:19:e2:0e:84:af:9b:6a:4d:23:e0:ae:0f:07:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57d4cfe60f8a30a4d0ff94b94ebadfc88c9ac11
Validity
Not Before: Jan 1 17:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7362a6ce00b613cc27c8c977113edb6d7b6c976f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9d:fe:38:89:a1:c8:d6:d0:3f:98:fb:d8:63:
3e:a9:1d:08:74:e4:17:9b:94:f4:05:33:c1:89:16:
64:d4:09:9b:d7:57:78:5b:b2:37:fd:4a:bb:94:d4:
e6:c4:c5:13:29:71:d4:cf:4f:62:0c:62:b4:91:ca:
e9:c7:4d:84:e1:2e:b7:24:1c:14:fb:b2:0f:38:ad:
60:bf:f1:d5:ce:4d:94:df:74:78:c6:2a:15:0a:f2:
df:d1:c9:6c:6f:fa:7a:e6:7f:45:85:93:94:bc:e6:
d8:a3:3b:01:04:ad:fb:4f:61:9e:30:74:7d:00:c2:
da:2f:b5:14:65:32:1d:13:db:57:43:71:23:42:e5:
9b:ba:8f:43:85:5c:41:97:6f:9e:60:0a:8c:95:0d:
fd:7c:a2:e6:46:f7:13:f6:ea:69:4c:d3:9c:bc:cc:
72:f6:24:b0:6b:d5:a1:b9:a0:d4:11:41:d4:71:bd:
19:d1:1c:6b:9d:13:ec:fe:f8:4b:23:66:c0:44:c2:
86:7f:16:ad:1e:47:8e:ca:fc:0f:38:ed:5b:db:4c:
e4:1a:36:40:f8:d6:eb:4b:ba:9d:53:98:9d:fa:e1:
74:45:36:fc:c2:47:bb:99:93:c7:7a:4f:85:ad:22:
fe:33:27:43:04:76:bc:57:29:88:3b:6b:e7:2b:d0:
2a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:62:A6:CE:00:B6:13:CC:27:C8:C9:77:11:3E:DB:6D:7B:6C:97:6F
X509v3 Authority Key Identifier:
keyid:A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/c2KmzgC2E8wnyMl3ET7bbXtsl28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.32.0/19
37.58.0.0/20
37.152.96.0/19
46.34.224.0/19
151.236.224.0/20
Signature Algorithm: sha256WithRSAEncryption
3e:21:54:f4:52:f5:9f:29:26:35:bf:a6:e9:21:c4:a2:13:6c:
c7:50:9a:55:3e:51:d2:33:a4:6e:12:97:6a:5b:e7:2e:09:bf:
10:b1:4f:dc:73:08:00:0c:e1:d3:6b:e4:a0:ea:f2:b4:a1:95:
b4:eb:80:a3:ac:e6:3e:d5:29:5e:1f:37:6d:b1:3c:6d:ff:5c:
2a:2a:51:81:5e:32:7c:d5:17:bd:81:c0:23:34:06:5c:55:d9:
b1:71:4f:46:6d:d0:ba:6d:de:5d:85:3d:ee:b7:8a:ca:77:84:
8f:5d:a0:13:56:ae:e9:c9:4d:f7:55:ac:00:35:a4:4a:45:a8:
dc:b1:49:c0:f9:7b:ee:9f:f6:a6:e1:f8:76:b6:ea:7e:20:39:
c6:cf:34:6c:35:d9:65:bc:d4:99:19:bf:0c:f9:16:91:53:f9:
e4:39:45:6a:4d:33:05:7f:ac:d2:0f:a8:e4:0e:3e:1a:64:8e:
e2:6f:fa:bc:94:d2:1c:21:70:c2:39:9f:1a:86:d1:51:57:dd:
0c:11:bb:94:60:9b:82:aa:79:db:31:fc:0f:11:37:5a:71:c2:
a0:ed:ca:66:17:3b:d8:98:5d:f9:7a:1b:cb:d9:25:91:55:5f:
be:77:bd:f1:d5:be:78:39:a4:80:3a:d1:dc:a6:e2:52:7c:54:
5a:8a:57:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:33 2025 by rpki-client on console.sobornost.net