Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/P8r0bc3cljmCfBx136KPQShS3O8.roa
File: P8r0bc3cljmCfBx136KPQShS3O8.roa (raw, json)
Hash identifier: zmPirJcGZiuowifL5CV0/efp4MLtVscwhTPAYNjTuUI=
Subject key identifier: 3F:CA:F4:6D:CD:DC:96:39:82:7C:1C:75:DF:A2:8F:41:28:52:DC:EF
Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial: 0196102914ED42C87A3631AF5161B4D3C34B
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/P8r0bc3cljmCfBx136KPQShS3O8.roa
Signing time: Mon 07 Apr 2025 12:10:49 +0000
ROA not before: Mon 07 Apr 2025 12:10:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44043
IP address blocks: 31.14.12.0/24 maxlen: 24
31.14.13.0/24 maxlen: 24
31.14.14.0/24 maxlen: 24
31.14.15.0/24 maxlen: 24
31.14.22.0/24 maxlen: 24
31.14.23.0/24 maxlen: 24
46.102.249.0/24 maxlen: 24
89.36.131.0/24 maxlen: 24
89.44.47.0/24 maxlen: 24
89.44.120.0/24 maxlen: 24
89.44.138.0/24 maxlen: 24
89.44.139.0/24 maxlen: 24
89.46.7.0/24 maxlen: 24
91.195.28.0/24 maxlen: 24
91.195.29.0/24 maxlen: 24
91.200.120.0/22 maxlen: 22
92.114.94.0/24 maxlen: 24
92.114.95.0/24 maxlen: 24
94.176.104.0/24 maxlen: 24
94.176.105.0/24 maxlen: 24
176.126.200.0/24 maxlen: 24
176.126.201.0/24 maxlen: 24
176.126.202.0/24 maxlen: 24
176.126.203.0/24 maxlen: 24
176.223.120.0/23 maxlen: 23
176.223.122.0/23 maxlen: 23
176.223.124.0/23 maxlen: 23
176.223.126.0/23 maxlen: 23
185.92.192.0/24 maxlen: 24
185.92.193.0/24 maxlen: 24
185.92.194.0/24 maxlen: 24
185.92.195.0/24 maxlen: 24
188.212.156.0/24 maxlen: 24
188.213.20.0/23 maxlen: 23
188.215.244.0/23 maxlen: 23
188.215.250.0/23 maxlen: 23
188.240.2.0/23 maxlen: 23
188.240.235.0/24 maxlen: 24
188.241.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:29:14:ed:42:c8:7a:36:31:af:51:61:b4:d3:c3:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Validity
Not Before: Apr 7 12:10:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fcaf46dcddc9639827c1c75dfa28f412852dcef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:40:00:42:e4:62:d1:e8:bd:12:92:72:53:e0:
93:84:77:7f:79:79:3a:08:4d:f5:4f:88:39:0f:8c:
e2:df:ec:7c:51:78:50:16:23:ef:27:f5:3c:30:3b:
5d:31:b2:ba:8b:9d:5b:1c:02:ea:c6:20:52:24:54:
55:14:dc:e8:7d:2c:af:2b:ea:37:0a:e6:6a:a9:79:
c9:d2:41:7c:d9:0d:43:df:07:1a:22:b4:cf:32:88:
e9:85:07:f7:87:9d:77:ea:ad:d0:71:4a:d6:48:e1:
c5:a4:4e:30:a6:81:65:fa:b9:98:aa:10:5b:8a:05:
4d:c4:35:ed:7f:6f:5c:00:1e:5c:ea:3f:01:52:a2:
e5:7e:5d:75:20:14:7b:10:5e:b8:68:19:3b:06:cf:
fa:68:36:f0:fb:c5:ba:e4:b3:fa:2b:25:34:45:f7:
58:77:b4:6a:09:52:bb:9b:7e:b0:bd:34:9d:57:41:
4b:e3:b3:ea:ea:e3:01:3b:f6:ae:35:4c:7f:f5:b0:
3f:4a:79:c1:e4:bf:b9:23:9c:2d:b9:70:f6:85:c0:
77:9c:7e:a4:e0:a8:e6:6d:b7:41:4c:dc:f6:a0:2d:
8e:49:82:c8:34:ac:f1:06:94:16:a0:2d:76:4d:5b:
1a:8d:6c:fd:4d:c9:10:28:a7:25:a6:19:c4:e4:3d:
ea:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CA:F4:6D:CD:DC:96:39:82:7C:1C:75:DF:A2:8F:41:28:52:DC:EF
X509v3 Authority Key Identifier:
keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/P8r0bc3cljmCfBx136KPQShS3O8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.12.0/22
31.14.22.0/23
46.102.249.0/24
89.36.131.0/24
89.44.47.0/24
89.44.120.0/24
89.44.138.0/23
89.46.7.0/24
91.195.28.0/23
91.200.120.0/22
92.114.94.0/23
94.176.104.0/23
176.126.200.0/22
176.223.120.0/21
185.92.192.0/22
188.212.156.0/24
188.213.20.0/23
188.215.244.0/23
188.215.250.0/23
188.240.2.0/23
188.240.235.0/24
188.241.183.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:47:40:9c:c9:21:2b:73:4c:54:d9:52:cf:f9:fb:78:78:81:
01:48:a7:19:21:fe:c5:e4:0d:93:3c:82:5f:00:c2:89:9d:3c:
1a:45:92:91:29:5e:21:e9:24:96:7e:0b:1a:cd:18:a1:fa:fc:
f4:3c:67:7e:6e:8d:09:10:44:bf:6d:c5:16:b9:ad:57:d2:25:
4b:21:f1:48:56:06:03:2a:76:a6:17:73:c3:fb:ff:40:09:a6:
12:5f:56:41:16:c7:01:a5:49:fe:62:38:d1:40:b3:7e:38:34:
d0:53:5b:c3:ec:9f:e1:64:c8:3d:3f:cd:2d:4a:68:eb:71:d8:
ab:5a:66:55:ad:65:5a:d7:1c:32:65:a8:32:81:00:f3:75:b5:
47:47:56:c9:a7:67:1c:df:16:c2:66:c3:e3:0a:8b:ab:00:cf:
ac:3b:bb:15:62:7f:9e:1e:a8:36:9e:44:51:e5:5c:a9:ba:91:
96:e0:41:5b:ff:5f:37:54:15:b9:ad:aa:37:c9:0e:61:44:fd:
c8:d9:d8:b7:33:ca:95:02:4b:cb:c7:e2:72:15:9a:43:58:cc:
1b:35:96:b3:67:f2:f7:ed:5b:d5:01:f3:2e:1f:89:e5:6d:30:
7c:c0:b8:14:33:5c:bb:e9:40:3c:06:38:b4:b5:58:0a:ad:07:
c6:a0:63:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:39 2025 by rpki-client on console.sobornost.net