Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/buG6SoB8WcvMJVkAM0M1bD-X7DY.roa
File: buG6SoB8WcvMJVkAM0M1bD-X7DY.roa (raw, json)
Hash identifier: 4+Zsq3JV6DU94isVPAz6RpxYAcC5faMNhVluTUisCrI=
Subject key identifier: 6E:E1:BA:4A:80:7C:59:CB:CC:25:59:00:33:43:35:6C:3F:97:EC:36
Certificate issuer: /CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Certificate serial: 019427B5AC9F22655710D1C2D680BF37BA2B
Authority key identifier: 0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/buG6SoB8WcvMJVkAM0M1bD-X7DY.roa
Signing time: Thu 02 Jan 2025 15:50:05 +0000
ROA not before: Thu 02 Jan 2025 15:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8680
IP address blocks: 37.72.152.0/21 maxlen: 24
37.72.156.0/23 maxlen: 23
37.72.158.0/24 maxlen: 24
46.102.107.0/24 maxlen: 24
62.68.160.0/19 maxlen: 24
62.68.160.0/21 maxlen: 21
62.68.168.0/23 maxlen: 23
62.68.170.0/24 maxlen: 24
62.68.172.0/22 maxlen: 22
62.68.176.0/20 maxlen: 20
62.68.176.0/23 maxlen: 23
62.68.178.0/23 maxlen: 23
62.68.180.0/24 maxlen: 24
62.68.181.0/24 maxlen: 24
62.68.182.0/24 maxlen: 24
62.68.183.0/24 maxlen: 24
62.68.184.0/24 maxlen: 24
62.68.185.0/24 maxlen: 24
62.68.188.0/22 maxlen: 22
77.81.75.0/24 maxlen: 24
78.111.192.0/20 maxlen: 24
84.247.1.0/24 maxlen: 24
85.204.71.0/24 maxlen: 24
85.204.135.0/24 maxlen: 24
85.204.144.0/24 maxlen: 24
85.204.192.0/24 maxlen: 24
86.104.12.0/24 maxlen: 24
86.104.64.0/24 maxlen: 24
86.105.10.0/23 maxlen: 24
88.81.128.0/19 maxlen: 24
88.81.157.0/24 maxlen: 24
89.32.207.0/24 maxlen: 24
89.33.15.0/24 maxlen: 24
89.35.82.0/23 maxlen: 24
89.37.59.0/24 maxlen: 24
89.40.64.0/24 maxlen: 24
89.42.115.0/24 maxlen: 24
89.42.174.0/23 maxlen: 24
89.42.179.0/24 maxlen: 24
89.43.49.0/24 maxlen: 24
89.43.172.0/23 maxlen: 24
89.44.107.0/24 maxlen: 24
89.47.248.0/24 maxlen: 24
89.47.253.0/24 maxlen: 24
91.190.160.0/21 maxlen: 24
92.114.55.0/24 maxlen: 24
93.114.188.0/23 maxlen: 24
93.187.144.0/21 maxlen: 24
185.3.100.0/22 maxlen: 24
188.214.59.0/24 maxlen: 24
188.241.17.0/24 maxlen: 24
212.30.0.0/19 maxlen: 24
212.30.4.0/24 maxlen: 24
212.30.8.0/24 maxlen: 24
212.30.9.0/24 maxlen: 24
212.30.16.0/24 maxlen: 24
217.19.128.0/20 maxlen: 24
2a02:7380::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:ac:9f:22:65:57:10:d1:c2:d6:80:bf:37:ba:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Validity
Not Before: Jan 2 15:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ee1ba4a807c59cbcc2559003343356c3f97ec36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8b:7e:22:19:9a:a6:3a:72:dd:03:88:b7:c5:
72:c7:3a:8f:e4:3f:f3:74:43:e3:da:e4:42:e1:79:
70:96:94:89:97:5e:c1:89:ec:f5:ec:71:da:9e:e3:
2b:c4:3b:f9:b8:ae:f5:5b:5a:6b:4a:15:9a:51:b0:
df:fe:84:ea:33:ff:e0:4c:59:19:d0:70:9d:00:da:
e1:af:43:74:59:db:3b:23:d3:fd:44:ca:9c:92:c4:
e5:4a:6e:b7:93:8d:ce:73:5a:1c:85:d2:46:1c:d2:
8a:78:cd:ed:20:46:b3:4e:8d:a1:c2:a7:a3:06:fc:
0a:b7:32:f6:26:a1:3b:9d:e3:29:4b:14:0f:aa:2e:
87:4a:d1:d0:54:b6:1a:fd:69:f8:4a:07:c2:e2:ec:
a5:3e:78:0c:63:4f:c8:ee:4e:71:82:c1:16:0f:19:
54:37:6d:bc:c6:6c:a7:1c:fe:d3:80:76:a1:7c:c2:
22:3e:03:93:fc:0b:34:5a:c1:d3:97:0f:8c:fc:c1:
2a:77:c3:b1:df:45:8d:7a:21:cb:47:c5:99:e7:f0:
3c:ae:24:2e:42:e7:93:21:f6:34:a1:b5:88:c2:23:
75:30:e3:22:1d:62:61:6d:c5:a2:9e:fe:3b:8c:cd:
b7:89:4a:a7:bc:1b:b4:6d:41:8e:ab:c2:74:76:e1:
63:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E1:BA:4A:80:7C:59:CB:CC:25:59:00:33:43:35:6C:3F:97:EC:36
X509v3 Authority Key Identifier:
keyid:0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/buG6SoB8WcvMJVkAM0M1bD-X7DY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.152.0/21
46.102.107.0/24
62.68.160.0/19
77.81.75.0/24
78.111.192.0/20
84.247.1.0/24
85.204.71.0/24
85.204.135.0/24
85.204.144.0/24
85.204.192.0/24
86.104.12.0/24
86.104.64.0/24
86.105.10.0/23
88.81.128.0/19
89.32.207.0/24
89.33.15.0/24
89.35.82.0/23
89.37.59.0/24
89.40.64.0/24
89.42.115.0/24
89.42.174.0/23
89.42.179.0/24
89.43.49.0/24
89.43.172.0/23
89.44.107.0/24
89.47.248.0/24
89.47.253.0/24
91.190.160.0/21
92.114.55.0/24
93.114.188.0/23
93.187.144.0/21
185.3.100.0/22
188.214.59.0/24
188.241.17.0/24
212.30.0.0/19
217.19.128.0/20
IPv6:
2a02:7380::/32
Signature Algorithm: sha256WithRSAEncryption
71:97:16:9d:d0:e6:12:ec:6a:16:31:4f:fa:fd:70:5e:ce:4d:
e1:63:8e:ee:70:23:7e:de:84:f7:6c:f6:2d:1a:5d:d8:50:55:
50:b0:aa:73:62:f9:c7:f7:3a:59:f9:a6:86:bb:86:02:c3:cd:
94:a5:55:e3:93:f1:6f:c4:4d:f6:ed:a0:d6:be:24:d6:ac:97:
04:14:f0:d4:8e:67:10:d5:28:c6:09:fe:b3:83:6b:cb:cf:5e:
e5:70:45:fc:18:f6:e8:69:df:92:3f:e2:0e:7f:a7:85:24:f3:
55:de:bc:e3:4b:b1:fb:79:e2:37:48:80:ad:f1:69:75:d5:ed:
f7:a7:0b:99:71:6b:96:8d:c1:6a:b4:48:b9:e5:bc:0a:6a:d5:
b7:1a:0a:22:01:c4:59:21:ed:57:d9:e2:e1:8b:3e:9a:78:91:
a2:71:3e:c9:f8:97:59:5e:8a:cd:1e:24:8f:1f:78:ff:9f:e2:
d9:93:b8:75:fc:35:7c:18:0e:94:a5:e2:ee:4d:a3:e0:e6:69:
63:e2:2e:87:29:bf:75:0e:74:27:1c:59:5a:2d:72:48:89:8e:
54:a7:d8:82:14:09:70:0f:3f:52:f6:e5:91:53:c1:61:b5:f1:
84:c2:6e:87:b2:6f:3d:7e:64:c1:70:3e:db:8e:c6:56:49:f8:
6d:f2:96:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:34 2025 by rpki-client on console.sobornost.net