Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/NwaNp5L0RusVDFFM4pIExblfTEU.roa
File: NwaNp5L0RusVDFFM4pIExblfTEU.roa (raw, json)
Hash identifier: B2/PCGdwG+WPaQH+f8v2+xUGdjLlo6CPicFBvC+Ii04=
Subject key identifier: 37:06:8D:A7:92:F4:46:EB:15:0C:51:4C:E2:92:04:C5:B9:5F:4C:45
Certificate issuer: /CN=4f617d6b03e2fe5f8911cbeb5fae2dca3bd6677f
Certificate serial: 019425FC5D1893183B6D673C7963D3996E2F
Authority key identifier: 4F:61:7D:6B:03:E2:FE:5F:89:11:CB:EB:5F:AE:2D:CA:3B:D6:67:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/NwaNp5L0RusVDFFM4pIExblfTEU.roa
Signing time: Thu 02 Jan 2025 07:48:03 +0000
ROA not before: Thu 02 Jan 2025 07:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44034
IP address blocks: 2.64.0.0/13 maxlen: 13
37.250.0.0/16 maxlen: 16
77.241.128.0/20 maxlen: 20
77.241.128.0/21 maxlen: 21
78.156.192.0/19 maxlen: 19
79.138.128.0/17 maxlen: 17
80.251.192.0/20 maxlen: 20
80.251.202.128/25 maxlen: 25
94.191.128.0/17 maxlen: 17
95.209.0.0/16 maxlen: 16
109.56.0.0/14 maxlen: 14
212.27.0.0/19 maxlen: 19
2a02:aa0::/29 maxlen: 32
2a02:aa0::/30 maxlen: 30
2a02:aa4::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:5d:18:93:18:3b:6d:67:3c:79:63:d3:99:6e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f617d6b03e2fe5f8911cbeb5fae2dca3bd6677f
Validity
Not Before: Jan 2 07:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37068da792f446eb150c514ce29204c5b95f4c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8e:03:5b:8a:92:8e:12:d3:3e:42:66:97:0e:
ed:c6:38:46:1f:af:25:37:1c:55:a4:79:4e:ae:d3:
b9:e2:7a:23:51:79:f3:b9:e4:5a:b2:94:63:34:bf:
73:bd:a2:02:f4:35:a2:fc:02:a7:e5:1b:b2:81:92:
b6:dd:01:fc:26:32:37:d5:86:3f:e3:09:df:7f:e1:
2d:47:f8:c7:1c:1b:48:1e:ad:2e:85:03:27:05:cd:
69:c0:3c:28:25:49:5f:59:0a:e9:c0:0c:c5:60:d7:
92:72:a9:27:30:b9:70:b2:1f:4f:82:68:37:fa:4a:
dd:17:c9:c1:15:6d:ab:dd:b1:b8:3a:44:70:44:18:
84:d8:43:e7:04:47:ad:6b:57:e1:86:c0:97:e6:7e:
1b:d5:ea:54:9a:03:cd:6c:8f:3d:e5:f5:40:c9:f8:
0a:3c:49:e1:e0:ea:b1:1a:1c:bb:2b:32:d2:fa:cf:
31:2b:88:ef:a0:22:d3:ee:eb:d5:ee:ff:61:f7:8e:
d9:cb:e7:b0:6a:30:fb:a6:17:57:1c:f2:f5:bb:eb:
a5:20:69:16:05:1d:86:77:71:31:3e:2e:a4:5d:b6:
9a:01:65:7e:76:18:b0:04:82:0d:cc:ef:77:0c:97:
1c:05:c3:14:8e:9c:ac:c3:da:a6:00:ba:68:3f:5d:
ef:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:06:8D:A7:92:F4:46:EB:15:0C:51:4C:E2:92:04:C5:B9:5F:4C:45
X509v3 Authority Key Identifier:
keyid:4F:61:7D:6B:03:E2:FE:5F:89:11:CB:EB:5F:AE:2D:CA:3B:D6:67:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/NwaNp5L0RusVDFFM4pIExblfTEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.64.0.0/13
37.250.0.0/16
77.241.128.0/20
78.156.192.0/19
79.138.128.0/17
80.251.192.0/20
94.191.128.0/17
95.209.0.0/16
109.56.0.0/14
212.27.0.0/19
IPv6:
2a02:aa0::/29
Signature Algorithm: sha256WithRSAEncryption
80:f5:f5:dd:06:63:ad:cc:33:a5:15:94:ad:41:e6:71:a2:02:
4c:5b:e5:6c:3b:cb:72:13:1c:5b:fd:a3:e1:c9:34:42:1d:94:
51:d3:f9:74:1b:ce:65:5a:82:a7:de:86:20:79:b6:c6:58:96:
12:77:35:b4:f4:85:df:f6:fe:82:e9:c3:c9:21:b2:21:30:2b:
e7:72:85:da:34:7d:be:0f:26:75:61:ee:e6:d1:91:20:47:da:
95:2b:68:a2:9b:ad:41:b7:b2:94:80:73:9e:53:d1:0b:36:82:
80:27:35:ab:7e:59:e8:37:eb:40:da:e1:6c:cd:28:40:1e:b7:
5d:b9:62:ae:1f:62:1a:cb:0b:35:6d:54:14:4c:84:87:65:05:
b2:81:bc:be:29:13:c8:d2:4d:1c:15:84:23:d8:a9:b4:81:7e:
f8:7c:bb:f4:11:60:82:02:5d:de:ea:4d:3d:d9:a7:83:07:d6:
be:af:1a:ff:52:7b:ca:0e:3e:5a:9f:85:d6:4c:01:07:6d:d1:
e8:c9:ee:21:cc:60:ad:82:70:03:b3:d4:d6:df:9b:83:ed:62:
13:28:5e:92:5d:7d:91:aa:72:cd:e8:4f:6e:21:f1:3e:b5:a4:
b8:9e:71:f5:76:8e:79:2b:66:9e:e3:0c:d8:af:70:bf:cb:71:
49:76:36:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:27 2025 by rpki-client on console.sobornost.net