Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/xe1Xtte-l4mWDxVWnZUVoJfv978.roa
File: xe1Xtte-l4mWDxVWnZUVoJfv978.roa (raw, json)
Hash identifier: eTv/lTHlf1G7tnxCPkM7+fpZ+Fnfpfp4hidvIU4UnJU=
Subject key identifier: C5:ED:57:B6:D7:BE:97:89:96:0F:15:56:9D:95:15:A0:97:EF:F7:BF
Certificate issuer: /CN=cf4a717f8fa1bb0359274223acdae22b70e66bec
Certificate serial: 01942068652A7A7CD66AD2BBBEA0F9232201
Authority key identifier: CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/xe1Xtte-l4mWDxVWnZUVoJfv978.roa
Signing time: Wed 01 Jan 2025 05:48:20 +0000
ROA not before: Wed 01 Jan 2025 05:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21127
IP address blocks: 37.49.192.0/19 maxlen: 32
37.205.48.0/21 maxlen: 32
37.205.64.0/19 maxlen: 32
46.50.128.0/17 maxlen: 32
46.241.0.0/17 maxlen: 32
91.105.128.0/18 maxlen: 32
109.171.0.0/17 maxlen: 32
188.44.96.0/19 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:65:2a:7a:7c:d6:6a:d2:bb:be:a0:f9:23:22:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf4a717f8fa1bb0359274223acdae22b70e66bec
Validity
Not Before: Jan 1 05:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5ed57b6d7be9789960f15569d9515a097eff7bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:51:7f:0d:07:eb:bf:0c:c2:a7:db:34:72:6c:
db:42:8a:70:63:e6:15:e0:a2:41:99:fb:30:73:30:
00:27:77:38:d1:cd:6e:75:a0:f5:42:ba:9c:83:ee:
45:22:b2:f5:cd:3a:a5:cd:cb:3e:1a:3b:d2:a1:8f:
2a:1f:8c:aa:9d:4c:e8:ec:e6:f5:e7:07:bd:1a:d6:
d5:fd:5f:af:6d:d7:99:64:6b:41:84:29:50:36:a8:
08:ff:6a:dd:86:bb:84:f4:02:9f:56:b6:6a:b8:59:
d6:62:bb:f7:57:6c:d4:71:83:8b:b4:65:e6:ef:b3:
0a:1a:9f:c6:6b:75:15:4a:13:8f:14:e3:2a:ed:f1:
4f:2e:49:75:b8:7c:61:d0:e3:7c:bd:f3:d7:ac:8c:
ad:fe:bf:ca:17:87:71:27:7a:8a:a6:d9:84:0b:78:
fe:4a:ec:9d:fb:a4:62:a6:79:7a:fd:b0:8d:a6:35:
e3:73:7f:65:12:af:a7:0d:23:c1:e1:f6:06:fa:dd:
79:1b:67:18:81:7a:56:05:0e:4b:3f:dd:8f:f4:e5:
ac:52:cc:0f:50:1d:43:7a:c8:6d:2b:16:75:80:1c:
79:89:1a:ae:2b:3b:f5:27:a8:2b:69:14:fd:4d:a4:
ec:9b:ae:a6:f7:dc:14:97:63:57:76:69:00:08:d5:
16:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:ED:57:B6:D7:BE:97:89:96:0F:15:56:9D:95:15:A0:97:EF:F7:BF
X509v3 Authority Key Identifier:
keyid:CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/xe1Xtte-l4mWDxVWnZUVoJfv978.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.192.0/19
37.205.48.0/21
37.205.64.0/19
46.50.128.0/17
46.241.0.0/17
91.105.128.0/18
109.171.0.0/17
188.44.96.0/19
Signature Algorithm: sha256WithRSAEncryption
26:c6:e5:75:33:ea:6b:93:e1:64:ea:c2:2c:84:61:5f:5e:17:
95:37:94:6f:4c:bd:fb:10:03:13:2d:e2:6f:2f:29:a2:3c:04:
e3:65:15:7d:3d:2d:61:73:5e:78:b5:75:14:cf:19:8a:8f:ae:
cb:50:15:7d:bd:63:56:0d:31:1e:2d:0a:1b:a0:94:3d:9f:91:
d0:5e:1d:a5:5d:21:46:d9:41:2f:1e:8c:32:d2:a6:5f:71:d6:
b0:db:fa:95:23:e1:a2:ba:8f:0a:ef:b7:b6:7c:0e:c5:2e:ac:
28:2a:72:cb:cc:c4:78:44:d0:f6:73:e5:a6:04:f9:2e:e4:cb:
f5:6b:3a:19:37:cf:95:43:2f:a6:ed:87:99:35:b3:d5:ad:2c:
ba:77:1c:5b:04:92:c5:f1:98:30:c4:d3:9a:f1:ca:db:9c:c0:
0a:ec:9e:92:ed:f1:fc:fb:1a:4c:c7:c3:55:16:87:cc:d1:19:
ec:9e:67:f1:c7:11:02:87:be:f1:f6:39:bd:60:74:d5:39:a4:
e4:86:31:10:f1:98:79:e3:c0:ef:42:2e:bb:77:6a:70:85:ff:
a8:de:5d:b2:6d:a9:74:53:51:7f:6f:4c:4f:09:21:97:df:3c:
1f:81:2a:1f:c9:8f:c0:57:c4:09:c5:65:5c:ea:4b:83:be:bb:
6b:d0:6b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:31 2025 by rpki-client on console.sobornost.net