Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/KbwQBsAYQORWx7Y_FShphGNRyLo.roa
File: KbwQBsAYQORWx7Y_FShphGNRyLo.roa (raw, json)
Hash identifier: RzEqTMBjUlVmk4NBbUY8EOKmW3+zfmtaDUK21QbwlLg=
Subject key identifier: 29:BC:10:06:C0:18:40:E4:56:C7:B6:3F:15:28:69:84:63:51:C8:BA
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 019427B6189E973D855FD2B1F0145D7A561B
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/KbwQBsAYQORWx7Y_FShphGNRyLo.roa
Signing time: Thu 02 Jan 2025 15:50:32 +0000
ROA not before: Thu 02 Jan 2025 15:50:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198484
IP address blocks: 37.26.144.0/21 maxlen: 21
37.26.144.0/24 maxlen: 24
37.26.145.0/24 maxlen: 24
37.26.147.0/24 maxlen: 24
37.26.149.0/24 maxlen: 24
141.226.132.0/24 maxlen: 24
2a03:c5c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:18:9e:97:3d:85:5f:d2:b1:f0:14:5d:7a:56:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Jan 2 15:50:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29bc1006c01840e456c7b63f152869846351c8ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:65:c6:de:63:82:e9:86:40:ac:07:9f:e9:03:
da:18:37:5f:cf:3a:62:a1:5f:58:6f:bb:89:e1:2e:
87:85:be:67:b4:91:70:45:cb:0a:a4:e5:76:38:91:
8d:95:49:da:b9:6b:28:fb:27:5f:46:77:ac:66:d7:
19:c1:c8:df:38:97:22:24:fe:63:dc:b2:2a:23:bf:
dd:9d:88:a7:65:f4:58:a1:f8:55:6a:14:4f:26:62:
35:8e:81:e9:00:79:2c:45:b4:92:b9:f0:b8:bf:3c:
0e:8f:fb:bb:5b:41:eb:cb:e6:3e:f1:0b:41:fd:ca:
af:98:a8:47:4d:27:ae:8f:e1:18:6a:92:9f:21:86:
5a:a6:9b:dd:dd:ba:bc:bc:4a:43:c2:66:e3:ce:6b:
bb:ce:a7:b0:6a:92:1b:02:41:81:fb:f0:11:f1:38:
f7:8c:fd:09:c3:31:99:1b:32:4d:ec:5e:45:f9:a1:
15:b7:27:cb:f0:d9:26:85:62:0c:f0:d0:04:c6:29:
d1:2d:c3:98:ab:c9:3a:e6:6b:f5:32:70:d3:44:4e:
dc:30:7e:e2:aa:a0:ae:a0:d0:03:df:01:80:8c:4a:
27:7c:aa:cd:8d:d0:dc:66:fd:ca:49:ab:3f:a4:d9:
d3:05:e0:df:0a:3e:c2:e5:54:5f:50:1e:8d:3f:cb:
bc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BC:10:06:C0:18:40:E4:56:C7:B6:3F:15:28:69:84:63:51:C8:BA
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/KbwQBsAYQORWx7Y_FShphGNRyLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.26.144.0/21
141.226.132.0/24
IPv6:
2a03:c5c0::/32
Signature Algorithm: sha256WithRSAEncryption
14:b2:4f:47:b8:f8:e7:b1:71:ab:ec:e2:b1:23:1b:a6:da:0c:
4e:4c:79:25:00:49:01:fe:21:ae:76:22:64:16:c5:77:b8:4b:
d7:c2:43:08:9a:fe:bd:8e:44:4e:c7:9b:bb:3b:fd:31:89:9f:
16:79:1f:70:88:75:d9:43:f3:d6:67:04:bf:de:05:95:18:c4:
3a:d5:39:eb:68:2e:43:90:4c:a8:0c:57:7a:8d:01:d8:07:67:
1b:21:87:b1:0c:71:25:ab:71:d8:97:c7:b1:21:23:d2:74:6f:
ec:0f:ab:40:4b:86:a5:ca:c0:71:ad:62:af:c0:22:fb:bc:39:
df:58:97:91:e9:a0:e6:b9:ff:57:98:8a:03:ae:b4:c6:ae:6a:
0c:9a:68:15:bc:04:50:c7:a1:c6:23:85:0c:9b:96:f5:3d:39:
b7:f8:c3:02:5d:96:4e:a4:c2:4b:20:e6:09:f0:f8:ee:c2:37:
6f:34:c2:77:a5:c5:e1:b2:b7:0c:9d:63:1e:ea:47:39:62:a5:
0f:1f:e9:92:a0:0a:38:38:a9:d7:73:0a:ac:1d:c2:11:6a:f1:
e9:48:a6:4c:6a:05:43:d8:7d:16:01:a1:90:bd:33:09:16:91:
cd:5f:f8:8b:40:a3:8e:ae:1f:42:29:72:86:3b:2f:1d:fc:14:
61:ac:57:39
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQnthielz2FX9Kx8BRdelYbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi
NDUwZTYwHhcNMjUwMTAyMTU1MDMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOWJjMTAwNmMwMTg0MGU0NTZjN2I2M2YxNTI4Njk4NDYzNTFjOGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2XG3mOC6YZArAef6QPaGDdfzzpi
oV9Yb7uJ4S6Hhb5ntJFwRcsKpOV2OJGNlUnauWso+ydfRnesZtcZwcjfOJciJP5j
3LIqI7/dnYinZfRYofhVahRPJmI1joHpAHksRbSSufC4vzwOj/u7W0Hry+Y+8QtB
/cqvmKhHTSeuj+EYapKfIYZappvd3bq8vEpDwmbjzmu7zqewapIbAkGB+/AR8Tj3
jP0JwzGZGzJN7F5F+aEVtyfL8NkmhWIM8NAExinRLcOYq8k65mv1MnDTRE7cMH7i
qqCuoNAD3wGAjEonfKrNjdDcZv3KSas/pNnTBeDfCj7C5VRfUB6NP8u8nQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFCm8EAbAGEDkVse2PxUoaYRjUci6MB8GA1UdIwQY
MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt
NDQzMzIyOWE4NDczLzEvS2J3UUJzQVlRT1JXeDdZX0ZTaHBoR05SeUxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz
LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDJRqQAwQA
jeKEMA0EAgACMAcDBQAqA8XAMA0GCSqGSIb3DQEBCwUAA4IBAQAUsk9HuPjnsXGr
7OKxIxum2gxOTHklAEkB/iGudiJkFsV3uEvXwkMImv69jkROx5u7O/0xiZ8WeR9w
iHXZQ/PWZwS/3gWVGMQ61TnraC5DkEyoDFd6jQHYB2cbIYexDHElq3HYl8exISPS
dG/sD6tAS4alysBxrWKvwCL7vDnfWJeR6aDmuf9XmIoDrrTGrmoMmmgVvARQx6HG
I4UMm5b1PTm3+MMCXZZOpMJLIOYJ8PjuwjdvNMJ3pcXhsrcMnWMe6kc5YqUPH+mS
oAo4OKnXcwqsHcIRavHpSKZMagVD2H0WAaGQvTMJFpHNX/iLQKOOrh9CKXKGOy8d
/BRhrFc5
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:33 2025 by rpki-client on console.sobornost.net