Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/B3Mc37hnLyE7yxbqifjQDt3x3z0.roa
File: B3Mc37hnLyE7yxbqifjQDt3x3z0.roa (raw, json)
Hash identifier: 7cdJodbT8PziDdOTyC2fhuS6lRivMK1yhJT/nojRkQw=
Subject key identifier: 07:73:1C:DF:B8:67:2F:21:3B:CB:16:EA:89:F8:D0:0E:DD:F1:DF:3D
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01952FBA71996EE6E41E408677821D306D24
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/B3Mc37hnLyE7yxbqifjQDt3x3z0.roa
Signing time: Sat 22 Feb 2025 22:15:02 +0000
ROA not before: Sat 22 Feb 2025 22:15:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42216
IP address blocks: 31.210.47.0/24 maxlen: 24
77.92.142.0/24 maxlen: 24
77.92.143.0/24 maxlen: 24
77.92.152.0/24 maxlen: 24
78.135.78.0/24 maxlen: 24
78.135.86.0/24 maxlen: 24
188.132.188.0/24 maxlen: 24
2a10:9440:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:2f:ba:71:99:6e:e6:e4:1e:40:86:77:82:1d:30:6d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Feb 22 22:15:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07731cdfb8672f213bcb16ea89f8d00eddf1df3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d0:9c:b0:4f:93:5c:45:14:d7:5b:0b:8f:29:
b5:36:9a:14:8d:56:07:59:8b:8b:4e:2f:55:81:92:
a8:c7:aa:8a:c2:91:c2:fc:b3:53:73:3f:25:87:76:
5a:27:9a:7d:ed:6f:61:62:94:da:ae:bb:4e:dd:91:
d1:84:04:ca:1f:73:41:7a:3d:9c:1b:2f:3f:6f:d7:
aa:9e:db:b8:70:8c:11:5a:64:66:d0:bc:57:0a:a0:
38:8d:8c:2e:6f:e6:c7:fa:f2:f1:7e:f5:0e:cd:35:
e0:0e:e0:a2:da:e2:10:b5:18:0d:aa:fe:46:f3:45:
2e:8f:8d:ba:63:86:86:c2:0b:e9:98:c4:94:ca:40:
be:bb:bc:bc:cc:0e:a1:23:dd:bc:63:cb:10:3f:e7:
93:83:a6:86:40:69:bf:8f:66:93:8f:d2:6e:46:c4:
94:92:1c:8b:ea:84:5b:aa:53:7f:1f:a1:9b:7b:0a:
8f:d7:60:c0:7e:09:bf:96:1e:45:52:7a:11:53:64:
a8:c1:9f:e6:07:2e:11:c5:3a:f9:c4:ff:bd:fd:70:
20:f4:23:70:4c:22:4d:f5:d3:57:cb:40:3b:33:6a:
64:aa:88:07:13:8f:7f:ec:7e:88:49:be:ea:d8:c8:
83:b7:8e:8f:34:a2:1e:19:fc:ae:1b:f3:36:2e:24:
eb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:73:1C:DF:B8:67:2F:21:3B:CB:16:EA:89:F8:D0:0E:DD:F1:DF:3D
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/B3Mc37hnLyE7yxbqifjQDt3x3z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.47.0/24
77.92.142.0/23
77.92.152.0/24
78.135.78.0/24
78.135.86.0/24
188.132.188.0/24
IPv6:
2a10:9440:1::/48
Signature Algorithm: sha256WithRSAEncryption
36:8c:ca:fa:33:4d:ca:b8:1c:3c:e0:3a:38:a4:94:e7:61:8d:
8b:df:95:3e:81:c5:72:7f:e4:b5:fe:c2:78:30:af:6b:93:29:
10:15:a5:31:f1:ab:07:9c:c7:d4:16:70:3c:b4:9c:94:55:3c:
f1:bf:e8:25:71:36:ae:1b:7d:1f:f3:ef:a8:17:48:77:7c:63:
fe:c5:63:65:f4:41:14:b7:db:d7:cb:bf:4d:ed:2d:0b:f3:e6:
3e:c4:59:b4:91:4a:d7:5c:85:63:ee:ad:db:c3:e8:c5:77:4f:
ff:3b:e3:c5:fc:e8:2e:c4:16:f8:84:bf:bd:cb:b9:3f:b2:47:
c0:e4:0b:d5:b2:65:f2:dc:82:8d:47:54:08:35:46:85:29:ea:
c1:5e:0f:02:19:87:93:03:88:d6:e1:44:06:5f:03:1f:a4:f5:
6c:e3:5a:b3:7f:05:53:c5:be:68:4b:30:02:7b:8a:55:87:68:
90:2e:be:a3:aa:09:31:06:40:0e:cd:5c:21:b1:50:65:1d:a0:
d5:20:1c:25:59:00:1e:5c:68:36:d2:d0:56:a4:8a:b2:ff:57:
3c:1a:5b:18:5b:81:bf:8c:6e:f3:af:ac:7e:65:05:7c:9e:39:
7a:1e:2f:d7:10:b1:4d:9e:5a:02:c4:48:4f:77:a4:fa:4d:b2:
0f:53:c1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:48:57 2025 by rpki-client on console.sobornost.net