Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/Lul3hUvdV6C5cSn0ykUAxQPhSaQ.roa
File: Lul3hUvdV6C5cSn0ykUAxQPhSaQ.roa (raw, json)
Hash identifier: q+jHwWcary8atsFBUa3Y/27z3nJW8U1gs5fNpNDELkU=
Subject key identifier: 2E:E9:77:85:4B:DD:57:A0:B9:71:29:F4:CA:45:00:C5:03:E1:49:A4
Certificate issuer: /CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Certificate serial: 0196206C11732CE1302A3D1E516B641E7F48
Authority key identifier: AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/Lul3hUvdV6C5cSn0ykUAxQPhSaQ.roa
Signing time: Thu 10 Apr 2025 15:57:55 +0000
ROA not before: Thu 10 Apr 2025 15:57:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198385
IP address blocks: 5.1.96.0/21 maxlen: 21
37.35.104.0/21 maxlen: 21
89.249.40.0/23 maxlen: 23
185.50.188.0/22 maxlen: 24
185.63.36.0/22 maxlen: 22
185.75.32.0/22 maxlen: 22
2a00:e6c0::/32 maxlen: 32
2a03:2040::/29 maxlen: 29
2a03:2040::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:20:6c:11:73:2c:e1:30:2a:3d:1e:51:6b:64:1e:7f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Validity
Not Before: Apr 10 15:57:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ee977854bdd57a0b97129f4ca4500c503e149a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:38:9f:61:18:41:bc:0d:3f:11:f2:55:3c:43:
18:33:ae:ff:ca:3c:15:dc:3c:7c:79:2b:14:44:0c:
5c:f3:dd:0a:cc:14:52:0f:e1:38:37:48:0a:39:62:
33:b8:53:ac:9b:55:56:6d:a5:e2:5e:91:b8:14:57:
c2:e4:29:2f:02:1e:4b:6a:d1:30:42:2a:ef:95:5f:
fc:eb:3e:e0:9e:28:d3:36:55:36:34:ad:df:1e:a8:
1d:dd:74:1c:d0:91:3e:08:b1:ea:19:84:5f:0b:36:
a9:53:23:5f:b8:4b:3e:61:2c:06:5a:ed:e8:c0:a4:
8b:19:84:d0:d0:0a:1f:52:7a:f3:32:84:82:81:ac:
1f:4e:c0:ef:01:38:d4:63:7a:d1:97:89:23:ac:86:
53:5d:51:9b:18:ba:24:60:86:dd:a8:d0:f9:27:42:
b3:a4:fb:93:2d:cc:d6:5e:4e:c3:5b:b7:9a:44:e8:
97:88:ce:cc:5b:56:27:50:7c:1e:33:16:27:af:39:
33:ae:61:ff:1d:e3:f8:8f:42:e2:2b:65:b0:f7:80:
69:8f:c5:ee:84:f3:9a:45:2f:30:6e:cd:da:bd:a8:
8b:50:e7:94:4b:9e:b2:f5:97:d6:0c:b0:76:62:6c:
2d:f2:4b:b1:7d:69:f8:1e:21:82:08:e9:a5:e2:bf:
55:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E9:77:85:4B:DD:57:A0:B9:71:29:F4:CA:45:00:C5:03:E1:49:A4
X509v3 Authority Key Identifier:
keyid:AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/Lul3hUvdV6C5cSn0ykUAxQPhSaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.96.0/21
37.35.104.0/21
89.249.40.0/23
185.50.188.0/22
185.63.36.0/22
185.75.32.0/22
IPv6:
2a00:e6c0::/32
2a03:2040::/29
Signature Algorithm: sha256WithRSAEncryption
4d:ef:c6:06:9a:2a:6b:87:76:2c:d0:2c:ed:70:72:19:42:e2:
7e:c9:d5:82:24:73:bb:e8:e0:f1:0f:41:cd:cb:b4:0b:1c:07:
43:eb:31:e6:e1:f5:bf:79:e2:29:ed:32:2b:e0:51:14:a7:af:
57:a4:fe:f4:29:81:d5:cf:e5:44:23:6f:34:28:2c:53:91:ac:
9a:63:21:db:1d:d9:eb:e5:be:1f:1f:ee:16:6a:87:d4:0d:10:
6a:c6:b0:03:4c:87:50:b6:99:94:74:ba:7a:a7:48:b7:31:9f:
b8:d6:8c:c8:a5:15:f4:c6:2a:52:6a:33:4e:53:bd:fa:a3:6b:
aa:bb:8c:f2:43:ed:a5:e7:5a:93:e9:4c:ca:a0:df:e3:3b:f3:
e3:1e:75:11:eb:93:5b:64:ce:58:68:25:de:da:f5:af:38:81:
13:e9:e6:b7:2d:d7:31:ce:d2:5f:cb:42:59:e3:b9:86:7f:79:
87:ee:67:74:31:9b:93:2f:91:98:13:66:eb:62:1b:ec:93:4d:
c8:35:1a:35:fb:f5:9a:c1:2e:63:12:2f:ce:c1:3e:e5:b5:40:
ca:b9:1f:da:81:7a:51:f3:2d:6a:fa:96:7d:2e:f2:06:c5:dc:
ec:a8:e4:9c:24:b1:e3:c2:05:4c:ab:6d:ba:30:33:27:75:1f:
a9:c7:52:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:42 2025 by rpki-client on console.sobornost.net