Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/vx37pmJyLlye-9dl2uWrRUf7xJU.roa
File: vx37pmJyLlye-9dl2uWrRUf7xJU.roa (raw, json)
Hash identifier: 4JRoa9ZFR/6K1f135/WkX1+rr9SDaGJYSOppqdKq2H0=
Subject key identifier: BF:1D:FB:A6:62:72:2E:5C:9E:FB:D7:65:DA:E5:AB:45:47:FB:C4:95
Certificate issuer: /CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f
Certificate serial: 019424B4002BB77FCCEFD160A15B974E929F
Authority key identifier: CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/vx37pmJyLlye-9dl2uWrRUf7xJU.roa
Signing time: Thu 02 Jan 2025 01:49:23 +0000
ROA not before: Thu 02 Jan 2025 01:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47564
IP address blocks: 91.204.200.0/22 maxlen: 22
176.107.226.0/23 maxlen: 23
176.107.228.0/23 maxlen: 23
176.107.232.0/23 maxlen: 23
176.107.234.0/24 maxlen: 24
176.107.236.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b4:00:2b:b7:7f:cc:ef:d1:60:a1:5b:97:4e:92:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f
Validity
Not Before: Jan 2 01:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf1dfba662722e5c9efbd765dae5ab4547fbc495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:86:33:fd:88:32:ef:78:8f:51:be:2f:5a:7d:
f1:fd:2e:66:5d:5f:bf:40:4c:d3:e4:e6:88:64:72:
1f:29:f9:1f:f2:7a:33:ac:17:27:e9:20:0e:e3:2a:
5e:74:d2:3c:90:ec:23:59:3c:6c:7a:fa:16:d0:77:
a6:d1:9a:5c:f5:9e:24:8c:ca:a1:ea:1e:f6:15:72:
4e:ce:b8:99:eb:8f:42:9d:96:ce:38:51:43:36:45:
ea:50:37:b1:4f:06:49:96:78:c1:51:5b:45:67:a0:
e2:f1:c1:3f:13:1f:98:2c:be:71:06:6f:4a:dc:52:
95:77:dd:a4:09:bf:6d:45:3f:ca:c1:d4:44:2a:df:
96:d1:1f:d8:86:c9:92:82:07:a8:86:cc:18:a9:44:
83:d2:c7:96:2c:89:7e:74:0a:cd:a0:15:d6:0c:0e:
e2:cd:ee:a7:bd:be:14:50:35:3c:46:74:b1:cf:81:
43:92:4c:fc:90:dc:13:b6:56:07:2c:c4:45:cf:58:
8e:15:52:5d:eb:46:b2:d8:3d:4f:50:e9:6d:28:5e:
ba:33:34:1d:ae:6e:c4:7f:13:d6:55:f2:77:52:67:
6c:ef:54:08:07:c6:db:e5:09:86:ca:01:75:28:81:
a6:bf:1b:c5:d6:e1:2e:5e:7f:77:77:32:94:7c:25:
75:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1D:FB:A6:62:72:2E:5C:9E:FB:D7:65:DA:E5:AB:45:47:FB:C4:95
X509v3 Authority Key Identifier:
keyid:CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/vx37pmJyLlye-9dl2uWrRUf7xJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.200.0/22
176.107.226.0-176.107.229.255
176.107.232.0-176.107.234.255
176.107.236.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:e6:e6:78:ef:21:a0:c3:ae:ec:8e:cf:fd:21:f7:75:54:2e:
e6:a5:96:53:29:3a:a5:ab:23:88:12:b7:d0:b3:26:70:d2:96:
33:32:bb:19:6f:69:44:9b:80:67:9d:2d:98:bb:3f:21:22:fa:
a1:9d:c8:41:29:0a:26:db:45:0c:24:95:94:90:21:80:00:cf:
ef:4a:23:b1:db:5c:70:a4:a2:8e:4d:34:dc:c2:b7:3d:44:06:
06:e3:7b:c4:dc:de:70:c6:76:fb:1a:26:c3:a0:5f:21:a7:5c:
ce:68:b1:91:09:a8:0e:6a:5f:01:e6:56:3c:d9:1c:c6:aa:ae:
84:79:a2:b0:cb:7e:2f:ce:a4:e3:1b:d7:7e:fb:86:8c:79:6b:
2f:20:15:2a:75:95:90:09:ab:b2:36:1e:ef:96:ae:21:8d:fe:
9d:7b:f6:cc:5f:02:32:f8:6a:c0:13:be:f4:91:a0:dd:c0:ee:
42:7e:78:d5:e8:67:7b:37:a0:03:27:1b:6f:a0:88:d9:c3:b2:
cc:fb:62:eb:79:b9:19:f8:6a:73:66:e8:ed:d1:1d:3d:f4:3f:
18:a2:38:85:bc:b0:e8:ec:87:60:65:27:f7:89:00:4c:1c:03:
0a:d6:8a:a2:56:7e:70:db:f1:d1:c2:b3:9a:d9:c8:07:25:61:
15:e8:80:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:57 2025 by rpki-client on console.sobornost.net