Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/MSS8bajhBaU5VhOzrfA52HmDj84.roa
File: MSS8bajhBaU5VhOzrfA52HmDj84.roa (raw, json)
Hash identifier: YEJDRIIvwqwjWO6NfGeQmsZ7v3rXxoUkegHU1CblIHc=
Subject key identifier: 31:24:BC:6D:A8:E1:05:A5:39:56:13:B3:AD:F0:39:D8:79:83:8F:CE
Certificate issuer: /CN=c3df2ef37007d54f86bba27573d33ad695c9ee5c
Certificate serial: 019421B1EDA15A9FD0A681CFDDD5A1EEC3AA
Authority key identifier: C3:DF:2E:F3:70:07:D5:4F:86:BB:A2:75:73:D3:3A:D6:95:C9:EE:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/MSS8bajhBaU5VhOzrfA52HmDj84.roa
Signing time: Wed 01 Jan 2025 11:48:16 +0000
ROA not before: Wed 01 Jan 2025 11:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198187
IP address blocks: 91.231.23.0/24 maxlen: 24
91.232.62.0/23 maxlen: 23
91.232.62.0/24 maxlen: 24
91.232.63.0/24 maxlen: 24
176.100.192.0/21 maxlen: 21
176.100.192.0/22 maxlen: 22
176.100.192.0/23 maxlen: 23
176.100.194.0/23 maxlen: 23
176.100.196.0/22 maxlen: 22
176.100.196.0/23 maxlen: 23
176.100.198.0/23 maxlen: 23
185.174.112.0/22 maxlen: 22
185.174.112.0/23 maxlen: 23
185.174.112.0/24 maxlen: 24
185.174.113.0/24 maxlen: 24
185.174.114.0/23 maxlen: 23
185.174.114.0/24 maxlen: 24
185.174.115.0/24 maxlen: 24
193.42.240.0/22 maxlen: 22
193.42.240.0/23 maxlen: 23
193.42.240.0/24 maxlen: 24
193.42.241.0/24 maxlen: 24
193.42.242.0/23 maxlen: 23
193.42.242.0/24 maxlen: 24
193.42.243.0/24 maxlen: 24
195.170.190.0/24 maxlen: 24
195.182.10.0/24 maxlen: 24
195.182.15.0/24 maxlen: 24
195.182.19.0/24 maxlen: 24
2a0b:9d00::/32 maxlen: 32
2a0b:9d00::/33 maxlen: 33
2a0b:9d00::/34 maxlen: 34
2a0b:9d00:4000::/34 maxlen: 34
2a0b:9d00:8000::/33 maxlen: 33
2a0b:9d00:8000::/34 maxlen: 34
2a0b:9d00:c000::/34 maxlen: 34
2a0b:9d01::/32 maxlen: 32
2a0b:9d01::/33 maxlen: 33
2a0b:9d01::/34 maxlen: 34
2a0b:9d01:4000::/34 maxlen: 34
2a0b:9d01:8000::/33 maxlen: 33
2a0b:9d01:8000::/34 maxlen: 34
2a0b:9d01:c000::/34 maxlen: 34
2a0b:9d02::/32 maxlen: 32
2a0b:9d02::/33 maxlen: 33
2a0b:9d02::/34 maxlen: 34
2a0b:9d02:4000::/34 maxlen: 34
2a0b:9d02:8000::/33 maxlen: 33
2a0b:9d02:8000::/34 maxlen: 34
2a0b:9d02:c000::/34 maxlen: 34
2a0b:9d03::/32 maxlen: 32
2a0b:9d03::/33 maxlen: 33
2a0b:9d03::/34 maxlen: 34
2a0b:9d03:4000::/34 maxlen: 34
2a0b:9d03:8000::/33 maxlen: 33
2a0b:9d03:8000::/34 maxlen: 34
2a0b:9d03:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ed:a1:5a:9f:d0:a6:81:cf:dd:d5:a1:ee:c3:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3df2ef37007d54f86bba27573d33ad695c9ee5c
Validity
Not Before: Jan 1 11:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3124bc6da8e105a5395613b3adf039d879838fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0a:5a:f8:c1:44:5e:c5:11:86:96:25:6d:e4:
33:bc:d7:e7:ba:ce:a3:0b:09:c3:66:9d:d9:94:c6:
ce:da:d3:92:ff:82:b1:44:bd:b6:a5:62:4e:5c:64:
32:4a:03:0e:d6:a8:9f:4c:d8:f7:92:97:28:e8:20:
97:bc:94:d5:d7:47:7f:be:ad:8e:d8:06:dd:74:c2:
2a:1b:33:94:06:5d:30:14:8a:bc:ad:67:48:47:47:
a3:1a:68:38:f0:31:ea:d5:3b:37:54:da:1e:6f:56:
31:5f:ee:2a:f6:af:31:8d:b1:b4:87:f8:cf:47:b8:
53:9b:ec:f5:ca:b9:70:21:0a:23:57:a8:4a:7f:fc:
72:1b:cd:42:cf:a5:9c:7a:6e:d4:c7:89:fb:7a:a5:
00:9d:93:cb:43:bf:bb:bd:34:a9:9b:61:4a:30:f5:
c4:ec:73:b0:f7:e8:8c:0e:db:d1:f2:83:b3:9b:05:
3f:6d:35:3c:d2:67:79:3a:d0:79:c2:4f:1f:c3:47:
57:38:53:35:a3:23:ef:e9:d6:d0:6e:fd:28:6f:2e:
5d:51:2b:00:6c:31:1d:31:ce:66:96:44:b2:05:8f:
3a:bb:77:1f:ff:56:11:ff:a3:2e:af:b1:76:db:c1:
b5:6e:ca:d7:c9:00:d5:84:92:1d:d2:37:dc:fd:df:
04:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:24:BC:6D:A8:E1:05:A5:39:56:13:B3:AD:F0:39:D8:79:83:8F:CE
X509v3 Authority Key Identifier:
keyid:C3:DF:2E:F3:70:07:D5:4F:86:BB:A2:75:73:D3:3A:D6:95:C9:EE:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/MSS8bajhBaU5VhOzrfA52HmDj84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.23.0/24
91.232.62.0/23
176.100.192.0/21
185.174.112.0/22
193.42.240.0/22
195.170.190.0/24
195.182.10.0/24
195.182.15.0/24
195.182.19.0/24
IPv6:
2a0b:9d00::/30
Signature Algorithm: sha256WithRSAEncryption
4b:d9:1a:49:ee:40:62:47:6b:2d:39:45:6a:20:f1:5f:6b:4a:
3c:09:80:41:75:bd:fc:99:f7:7b:ba:e5:14:df:44:28:80:43:
3f:0e:a7:6f:3e:78:a4:c8:50:51:f9:79:a0:3b:81:a3:ba:7f:
6f:9c:2f:ba:89:4c:56:08:f7:ea:53:5e:e8:71:18:7a:4d:7a:
92:ce:d2:7d:d7:29:73:e5:ac:01:9a:ea:1c:e6:97:aa:5c:31:
18:12:fd:7f:9d:0c:57:20:7f:f1:bf:ab:cc:fc:5a:0f:85:53:
92:6d:54:da:23:fd:de:a0:ed:1e:ff:30:3a:bf:b1:fe:c4:d1:
8f:66:f5:5a:dc:fa:1d:f0:25:75:4d:a3:f9:7e:1d:4a:11:a2:
fc:f7:2f:a8:c3:bd:dd:3c:3e:3f:57:ae:eb:e6:0c:91:8a:d6:
34:cb:e0:e9:a9:47:0b:74:7e:04:1c:ae:89:00:f2:d5:5f:c8:
da:00:77:4c:5b:06:df:9a:a4:38:ae:21:45:50:59:4b:d7:a1:
53:99:2e:41:cf:70:45:ad:ef:d2:f0:a2:63:9e:1b:ef:e1:81:
5e:f7:d5:ef:e5:ad:c7:71:a8:91:98:b6:f2:18:4f:c9:9f:b1:
81:86:1d:e2:69:5e:3d:f4:93:96:6a:d9:60:0f:2f:03:d8:63:
43:15:c8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:11 2025 by rpki-client on console.sobornost.net