Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/pmR97WRHoYHuQQmfDP67AXcCoe0.roa
File: pmR97WRHoYHuQQmfDP67AXcCoe0.roa (raw, json)
Hash identifier: NYI2YQy1G06h822uHP8hKMJsjk9aZUsYU6fWvZXkM8U=
Subject key identifier: A6:64:7D:ED:64:47:A1:81:EE:41:09:9F:0C:FE:BB:01:77:02:A1:ED
Certificate issuer: /CN=3a6e2e7ff2c702c8ab5149feea7175991c73409c
Certificate serial: 018E5BFD37CFBE98214592002AF2C70B9B76
Authority key identifier: 3A:6E:2E:7F:F2:C7:02:C8:AB:51:49:FE:EA:71:75:99:1C:73:40:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/pmR97WRHoYHuQQmfDP67AXcCoe0.roa
Signing time: Wed 20 Mar 2024 13:11:45 +0000
ROA not before: Wed 20 Mar 2024 13:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203877
IP address blocks: 37.35.8.0/21 maxlen: 21
62.240.0.0/24 maxlen: 24
62.240.1.0/24 maxlen: 24
62.240.2.0/24 maxlen: 24
62.240.3.0/24 maxlen: 24
62.240.5.0/24 maxlen: 24
62.240.6.0/24 maxlen: 24
62.240.7.0/24 maxlen: 24
62.240.8.0/22 maxlen: 22
62.240.12.0/24 maxlen: 24
62.240.13.0/24 maxlen: 24
62.240.14.0/24 maxlen: 24
62.240.15.0/24 maxlen: 24
62.240.16.0/24 maxlen: 24
62.240.17.0/24 maxlen: 24
62.240.18.0/24 maxlen: 24
62.240.19.0/24 maxlen: 24
62.240.20.0/24 maxlen: 24
85.202.112.0/24 maxlen: 24
85.202.113.0/24 maxlen: 24
85.202.114.0/24 maxlen: 24
85.202.115.0/24 maxlen: 24
85.202.116.0/24 maxlen: 24
85.202.118.0/24 maxlen: 24
85.202.120.0/24 maxlen: 24
85.202.121.0/24 maxlen: 24
85.202.122.0/24 maxlen: 24
85.202.126.0/24 maxlen: 24
85.202.127.0/24 maxlen: 24
91.226.240.0/24 maxlen: 24
91.226.241.0/24 maxlen: 24
91.226.242.0/24 maxlen: 24
91.226.243.0/24 maxlen: 24
93.92.248.0/21 maxlen: 21
109.94.119.0/24 maxlen: 24
109.94.120.0/22 maxlen: 22
109.94.224.0/22 maxlen: 22
178.22.216.0/24 maxlen: 24
178.22.217.0/24 maxlen: 24
178.22.218.0/24 maxlen: 24
178.22.219.0/24 maxlen: 24
178.22.220.0/24 maxlen: 24
178.22.221.0/24 maxlen: 24
178.22.222.0/24 maxlen: 24
178.22.223.0/24 maxlen: 24
185.102.236.0/22 maxlen: 22
185.118.168.0/24 maxlen: 24
185.118.169.0/24 maxlen: 24
185.118.170.0/24 maxlen: 24
185.118.171.0/24 maxlen: 24
212.57.40.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5b:fd:37:cf:be:98:21:45:92:00:2a:f2:c7:0b:9b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a6e2e7ff2c702c8ab5149feea7175991c73409c
Validity
Not Before: Mar 20 13:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6647ded6447a181ee41099f0cfebb017702a1ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:96:e2:7e:87:b6:84:fd:0e:4b:92:78:02:aa:
80:5c:8f:a2:d5:ea:57:12:c2:1d:bf:37:66:d2:4f:
81:a6:67:dc:41:50:3f:b4:81:15:35:23:9c:43:bb:
47:3a:ed:8b:29:f6:d2:58:42:6f:cf:b2:13:c5:aa:
33:04:e7:3f:d2:9e:b5:71:ad:07:07:4f:3f:f9:6b:
d1:cb:c9:fb:1e:45:61:d5:40:df:ad:25:f4:1d:5f:
13:4d:62:f9:a9:d5:b8:bb:5b:7f:4f:9a:19:5e:d1:
e1:e2:31:fe:8b:a9:b8:f9:15:93:e1:22:19:09:59:
c9:97:3f:a5:e1:1a:48:69:0f:88:ab:f0:d6:6b:fe:
ca:05:47:56:67:7e:2d:eb:4f:68:b0:74:82:b8:3e:
3c:fc:8c:fe:49:8b:b2:ef:35:f8:e1:8a:07:7b:ce:
90:7b:06:7f:95:60:9f:4e:95:5e:ce:e1:e3:e1:bb:
6a:30:4f:af:81:e8:0b:be:d9:ce:8f:3d:0a:e1:89:
22:d8:5d:62:af:c3:55:fb:cb:c6:24:ad:2e:9c:ef:
14:df:6b:04:9e:f5:97:c0:6c:cf:1b:a7:bf:31:69:
1b:11:bc:fa:87:90:61:f6:1b:09:bc:b0:8c:3c:d4:
92:63:22:7b:d5:4c:cd:7a:b6:7b:d3:d7:ec:69:c5:
02:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:64:7D:ED:64:47:A1:81:EE:41:09:9F:0C:FE:BB:01:77:02:A1:ED
X509v3 Authority Key Identifier:
keyid:3A:6E:2E:7F:F2:C7:02:C8:AB:51:49:FE:EA:71:75:99:1C:73:40:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/pmR97WRHoYHuQQmfDP67AXcCoe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.35.8.0/21
62.240.0.0/22
62.240.5.0-62.240.20.255
85.202.112.0-85.202.116.255
85.202.118.0/24
85.202.120.0-85.202.122.255
85.202.126.0/23
91.226.240.0/22
93.92.248.0/21
109.94.119.0-109.94.123.255
109.94.224.0/22
178.22.216.0/21
185.102.236.0/22
185.118.168.0/22
212.57.40.0/21
Signature Algorithm: sha256WithRSAEncryption
3a:83:f7:d3:a1:d0:c0:88:df:49:dc:bb:c9:ff:4a:85:8d:d6:
d2:b1:7a:89:80:4c:a1:de:1d:2c:37:d7:ff:22:b2:d3:2a:68:
ce:3f:90:dc:df:76:6e:ea:9a:21:29:15:4b:b1:23:8a:0a:9e:
32:13:c3:b6:9b:5a:a7:d0:9b:6e:22:9e:51:b0:b3:90:cb:4c:
80:ed:65:3d:e6:61:6b:5f:50:3d:d0:38:55:56:6a:9e:87:57:
14:27:24:03:ed:e3:a8:14:b1:b4:af:5e:04:78:70:10:93:1b:
e9:d2:21:93:87:12:a2:7a:c2:0a:1f:c4:d4:ce:e9:3e:37:94:
88:63:de:2d:bd:0e:90:26:cb:b5:32:b3:3b:95:b5:69:a8:61:
2a:18:60:27:5c:8c:58:19:c2:77:77:9c:51:6a:12:9e:b5:99:
73:db:03:bd:f7:c9:65:99:25:6e:a3:fa:c1:9e:6b:ee:49:05:
fb:f3:e7:c2:70:4d:08:45:db:00:68:f2:67:65:2e:1a:12:86:
bd:07:06:3e:73:d7:ad:d9:35:b0:17:07:bf:b5:17:e3:ca:33:
48:c8:0a:2f:c6:e6:08:e9:92:55:7b:05:0e:a6:b2:8b:de:62:
c2:e8:50:92:cb:38:cf:37:28:bf:23:8d:ac:d1:c9:57:91:e4:
58:82:54:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:49 2024 by rpki-client on console.sobornost.net