Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/MvqX2PY6Jsjd9Zv__Sq5cwrnadQ.roa
File: MvqX2PY6Jsjd9Zv__Sq5cwrnadQ.roa (raw, json)
Hash identifier: Er5TN/5GROkjrwrxmem5Kdiq1hMfzSafuVopDsFfSTA=
Subject key identifier: 32:FA:97:D8:F6:3A:26:C8:DD:F5:9B:FF:FD:2A:B9:73:0A:E7:69:D4
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 0195194D2BEC0239230BCED4BCF3B693B04B
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/MvqX2PY6Jsjd9Zv__Sq5cwrnadQ.roa
Signing time: Tue 18 Feb 2025 13:44:02 +0000
ROA not before: Tue 18 Feb 2025 13:44:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 14.102.61.0/24 maxlen: 24
14.102.62.0/24 maxlen: 24
14.102.84.0/24 maxlen: 24
14.102.86.0/24 maxlen: 24
62.169.128.0/24 maxlen: 24
103.61.196.0/24 maxlen: 24
103.138.78.0/24 maxlen: 24
167.160.28.0/24 maxlen: 24
170.62.238.0/24 maxlen: 24
192.253.209.0/24 maxlen: 24
192.253.211.0/24 maxlen: 24
198.55.31.0/24 maxlen: 24
203.188.166.0/24 maxlen: 24
203.188.174.0/24 maxlen: 24
203.188.175.0/24 maxlen: 24
203.188.176.0/24 maxlen: 24
203.188.177.0/24 maxlen: 24
203.188.178.0/24 maxlen: 24
203.188.179.0/24 maxlen: 24
203.188.180.0/24 maxlen: 24
203.188.182.0/24 maxlen: 24
203.188.183.0/24 maxlen: 24
203.188.184.0/24 maxlen: 24
203.188.185.0/24 maxlen: 24
203.188.186.0/24 maxlen: 24
203.188.187.0/24 maxlen: 24
203.188.188.0/24 maxlen: 24
203.188.189.0/24 maxlen: 24
203.188.190.0/24 maxlen: 24
203.188.191.0/24 maxlen: 24
212.32.48.0/24 maxlen: 24
212.32.49.0/24 maxlen: 24
212.32.50.0/24 maxlen: 24
212.32.51.0/24 maxlen: 24
212.32.70.0/24 maxlen: 24
212.32.71.0/24 maxlen: 24
212.32.73.0/24 maxlen: 24
212.32.76.0/24 maxlen: 24
212.32.77.0/24 maxlen: 24
212.32.78.0/24 maxlen: 24
212.32.79.0/24 maxlen: 24
212.56.52.0/24 maxlen: 24
212.56.53.0/24 maxlen: 24
212.56.54.0/24 maxlen: 24
212.56.55.0/24 maxlen: 24
213.254.163.0/24 maxlen: 24
213.254.172.0/24 maxlen: 24
213.254.173.0/24 maxlen: 24
213.254.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:19:4d:2b:ec:02:39:23:0b:ce:d4:bc:f3:b6:93:b0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Feb 18 13:44:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32fa97d8f63a26c8ddf59bfffd2ab9730ae769d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e5:83:f7:c0:f2:d1:90:6d:c3:9f:86:83:29:
8b:74:0d:a2:b1:aa:ad:46:26:3c:ad:13:8c:42:a5:
50:cc:b9:bd:b6:26:34:48:51:37:93:68:ad:3e:f3:
a2:af:fb:c4:00:7e:a8:ab:29:ec:d1:a4:d3:39:a8:
14:39:27:df:a3:fd:11:6b:74:ac:48:a7:d0:5c:1d:
c9:35:9a:65:40:ad:7a:78:b5:ab:4a:e9:ea:f3:79:
5a:a8:9b:1a:33:ee:98:6d:db:54:be:d1:fe:b2:ea:
9b:60:ef:6c:9d:f7:e4:4c:94:49:57:9a:8d:98:9e:
02:83:07:b1:47:06:da:38:83:16:c5:df:a3:87:3b:
01:77:6b:c0:f8:f5:8b:37:28:99:11:64:f2:61:aa:
17:e0:84:d9:a3:93:7a:f9:b4:e5:77:8c:ec:d9:31:
31:6a:14:8f:58:bf:5b:2b:a5:ec:e2:64:a9:f7:0d:
11:bc:4e:97:98:60:96:a2:cc:4a:d9:e2:0f:0a:71:
57:79:c5:80:f7:b7:e9:45:0f:1d:98:2d:ec:4c:8e:
87:a9:b1:20:c1:98:b8:d3:28:d7:77:28:7a:69:f9:
d5:ba:42:75:fa:ed:5d:f6:5c:17:67:e5:d3:f8:e1:
05:15:a8:85:2a:11:0c:cb:cb:c1:a7:50:37:1e:ee:
63:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FA:97:D8:F6:3A:26:C8:DD:F5:9B:FF:FD:2A:B9:73:0A:E7:69:D4
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/MvqX2PY6Jsjd9Zv__Sq5cwrnadQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.61.0-14.102.62.255
14.102.84.0/24
14.102.86.0/24
62.169.128.0/24
103.61.196.0/24
103.138.78.0/24
167.160.28.0/24
170.62.238.0/24
192.253.209.0/24
192.253.211.0/24
198.55.31.0/24
203.188.166.0/24
203.188.174.0-203.188.180.255
203.188.182.0-203.188.191.255
212.32.48.0/22
212.32.70.0/23
212.32.73.0/24
212.32.76.0/22
212.56.52.0/22
213.254.163.0/24
213.254.172.0/23
213.254.175.0/24
Signature Algorithm: sha256WithRSAEncryption
e6:6e:af:08:7f:02:21:25:92:4d:fc:14:b3:14:25:25:a6:ba:
fc:a9:dc:f9:63:eb:46:f2:78:7e:da:c1:ec:c6:3d:13:7f:06:
d5:87:2b:44:5d:af:4f:af:75:2e:34:b6:9d:09:d1:fc:ab:80:
70:a7:3f:7e:44:78:db:1f:b1:74:d3:a6:a6:00:d5:bc:a0:88:
7c:25:45:04:72:5a:4a:6a:cd:f7:eb:95:e7:51:ed:43:c2:3c:
10:06:b5:99:a5:b1:cc:6c:11:ab:04:73:9c:4f:75:3c:4e:70:
6c:bf:d8:cd:4e:ef:92:11:3b:ab:33:c3:f8:b2:d1:a7:5b:0b:
e3:69:39:f7:bd:71:77:26:c8:71:60:53:70:97:9f:73:99:64:
dc:c0:4b:d7:1d:74:d3:aa:08:3e:31:69:42:0e:a2:11:52:af:
b4:fe:1b:75:8d:e9:b5:68:6c:26:af:6e:7b:5c:9c:7f:84:d7:
b7:6e:f6:9b:e5:46:14:f0:7a:1e:fe:ca:5e:de:c6:77:2d:d0:
04:f7:c0:30:e1:02:f6:e4:15:c1:8d:67:81:00:0e:d0:21:83:
6d:50:fe:48:df:02:40:8d:e0:8c:be:a9:75:e6:7b:28:0c:99:
61:b3:07:2c:2e:4a:07:8c:5c:d9:cf:b1:c6:60:20:e7:18:ff:
c8:cc:f3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:49:54 2025 by rpki-client on console.sobornost.net