Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/YUczG5dGYRQf7s0wy9SzxbyGN1c.roa
File: YUczG5dGYRQf7s0wy9SzxbyGN1c.roa (raw, json)
Hash identifier: AUrq9hAikj9WxxWS78u0ChjSuDjwGem9EdzmHLzSliw=
Subject key identifier: 61:47:33:1B:97:46:61:14:1F:EE:CD:30:CB:D4:B3:C5:BC:86:37:57
Certificate issuer: /CN=13c9fd37c7431ce6aa3c93a6952c67f0f0c9846e
Certificate serial: 01941F8C6926D8808C116C99C507E0360B0B
Authority key identifier: 13:C9:FD:37:C7:43:1C:E6:AA:3C:93:A6:95:2C:67:F0:F0:C9:84:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/YUczG5dGYRQf7s0wy9SzxbyGN1c.roa
Signing time: Wed 01 Jan 2025 01:48:03 +0000
ROA not before: Wed 01 Jan 2025 01:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12835
IP address blocks: 37.128.136.0/21 maxlen: 24
46.226.200.0/21 maxlen: 24
77.72.192.0/21 maxlen: 24
109.205.104.0/21 maxlen: 24
185.38.252.0/22 maxlen: 24
194.105.48.0/21 maxlen: 24
2a00:10c8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:69:26:d8:80:8c:11:6c:99:c5:07:e0:36:0b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13c9fd37c7431ce6aa3c93a6952c67f0f0c9846e
Validity
Not Before: Jan 1 01:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6147331b974661141feecd30cbd4b3c5bc863757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:61:24:5b:1b:6e:22:a1:40:2f:08:f4:c6:28:
2e:e9:91:bf:7f:81:48:0a:61:7f:48:d2:cb:0e:cf:
d4:b2:ed:9e:35:ba:5b:8e:cf:a8:80:54:3d:c6:89:
f9:1d:46:0c:5e:c0:0f:aa:a0:0c:ff:74:b1:72:d1:
a0:f5:16:76:b8:fa:2c:a7:ec:5d:6c:53:c0:0b:cd:
62:ce:55:90:38:c4:e6:23:a3:59:1b:9e:20:0e:6d:
03:6d:f3:76:90:94:42:83:4f:fa:52:02:48:ec:09:
d8:cf:2d:bc:22:0c:83:99:78:9d:2f:6c:89:b3:8c:
41:84:e6:aa:8d:11:c3:b2:25:dd:f5:4a:5b:e7:57:
12:80:44:0e:88:d8:5f:3b:9e:ff:7b:4d:c2:4d:e6:
44:e7:de:73:86:e6:44:94:7e:0b:07:00:21:d3:46:
fd:35:7e:6b:be:4c:ae:fc:d4:dd:77:28:9b:57:bd:
4d:f6:77:59:43:e9:74:93:0f:20:d0:c3:e5:a3:7a:
df:bd:0e:ac:cf:f2:db:5c:2a:50:4d:8a:c8:13:a7:
3d:63:1d:55:ec:eb:17:1e:8e:21:e0:7d:a5:a1:68:
3c:c2:f3:28:ce:78:9a:2f:a3:53:e4:e5:55:f7:15:
51:78:46:60:ae:ff:82:6e:fc:98:d1:67:58:f3:a7:
45:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:47:33:1B:97:46:61:14:1F:EE:CD:30:CB:D4:B3:C5:BC:86:37:57
X509v3 Authority Key Identifier:
keyid:13:C9:FD:37:C7:43:1C:E6:AA:3C:93:A6:95:2C:67:F0:F0:C9:84:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/YUczG5dGYRQf7s0wy9SzxbyGN1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.136.0/21
46.226.200.0/21
77.72.192.0/21
109.205.104.0/21
185.38.252.0/22
194.105.48.0/21
IPv6:
2a00:10c8::/32
Signature Algorithm: sha256WithRSAEncryption
50:0e:56:fb:cf:4d:b9:36:de:ee:d7:f7:36:f5:d3:a8:87:88:
3d:cf:9f:6e:0f:e7:f0:c2:f7:68:53:cb:be:98:fd:57:5e:3a:
04:e5:c1:c9:f2:77:dc:1d:38:11:01:58:22:44:04:e1:31:7a:
be:ac:21:dc:28:75:6a:9a:61:1f:bb:0e:14:20:65:8d:4a:1b:
1b:9f:8e:35:81:ec:b2:25:c2:5e:81:f7:14:ea:f5:d9:2b:d3:
81:f2:3b:be:11:cf:33:95:54:fa:b5:bf:91:c6:84:1a:d3:24:
6d:b0:96:aa:77:19:3d:b0:5d:b6:2d:31:5e:5d:35:68:ca:66:
26:e0:ea:31:c4:3e:14:05:5c:aa:38:b0:a0:6b:18:07:e4:e6:
af:34:81:58:e6:50:db:af:9d:df:9f:fe:e9:14:0e:be:d0:2e:
6f:41:9a:32:73:0d:bc:0d:88:c6:2c:f2:64:bc:9c:38:7a:97:
e3:34:f8:89:2a:1d:de:bb:96:2f:31:e5:1b:95:ad:9d:99:38:
cd:22:34:a3:f6:b7:4c:fc:74:55:85:d7:b0:31:77:51:7d:6d:
38:cf:29:3b:95:a0:31:8f:e0:49:b3:c0:3d:77:6a:6c:ea:b5:
3c:ce:fb:28:97:e9:63:6e:3b:8b:df:41:13:a8:42:76:f0:ab:
24:12:f2:99
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAZQfjGkm2ICMEWyZxQfgNgsLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzYzlmZDM3Yzc0MzFjZTZhYTNjOTNhNjk1MmM2N2YwZjBj
OTg0NmUwHhcNMjUwMTAxMDE0ODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTQ3MzMxYjk3NDY2MTE0MWZlZWNkMzBjYmQ0YjNjNWJjODYzNzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mEkWxtuIqFALwj0xigu6ZG/f4FI
CmF/SNLLDs/Usu2eNbpbjs+ogFQ9xon5HUYMXsAPqqAM/3SxctGg9RZ2uPosp+xd
bFPAC81izlWQOMTmI6NZG54gDm0DbfN2kJRCg0/6UgJI7AnYzy28IgyDmXidL2yJ
s4xBhOaqjRHDsiXd9Upb51cSgEQOiNhfO57/e03CTeZE595zhuZElH4LBwAh00b9
NX5rvkyu/NTddyibV71N9ndZQ+l0kw8g0MPlo3rfvQ6sz/LbXCpQTYrIE6c9Yx1V
7OsXHo4h4H2loWg8wvMozniaL6NT5OVV9xVReEZgrv+CbvyY0WdY86dFlwIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFGFHMxuXRmEUH+7NMMvUs8W8hjdXMB8GA1UdIwQY
MBaAFBPJ/TfHQxzmqjyTppUsZ/DwyYRuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRThuOU44ZERIT2FxUEpPbWxTeG44UERKaEc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC84ZTgyMjctY2QyMC00ZGI4LWE0MGUt
NmEzZGZiNDdmOGM0LzEvWVVjekc1ZEdZUlFmN3Mwd3k5U3p4YnlHTjFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC84ZTgyMjctY2QyMC00ZGI4LWE0MGUtNmEzZGZiNDdmOGM0
LzEvRThuOU44ZERIT2FxUEpPbWxTeG44UERKaEc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDJYCIAwQD
LuLIAwQDTUjAAwQDbc1oAwQCuSb8AwQDwmkwMA0EAgACMAcDBQAqABDIMA0GCSqG
SIb3DQEBCwUAA4IBAQBQDlb7z025Nt7u1/c29dOoh4g9z59uD+fwwvdoU8u+mP1X
XjoE5cHJ8nfcHTgRAVgiRAThMXq+rCHcKHVqmmEfuw4UIGWNShsbn441geyyJcJe
gfcU6vXZK9OB8ju+Ec8zlVT6tb+RxoQa0yRtsJaqdxk9sF22LTFeXTVoymYm4Oox
xD4UBVyqOLCgaxgH5OavNIFY5lDbr53fn/7pFA6+0C5vQZoycw28DYjGLPJkvJw4
epfjNPiJKh3eu5YvMeUbla2dmTjNIjSj9rdM/HRVhdewMXdRfW04zyk7laAxj+BJ
s8A9d2ps6rU8zvsol+ljbjuL30ETqEJ28KskEvKZ
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:33 2025 by rpki-client on console.sobornost.net