Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/CfByYUpLy5HR5mppU__UXlpQvd4.roa
File: CfByYUpLy5HR5mppU__UXlpQvd4.roa (raw, json)
Hash identifier: J4PogzYPOjo2AP+rxBsCwdc146VrXnAE07Lu3yHc7A8=
Subject key identifier: 09:F0:72:61:4A:4B:CB:91:D1:E6:6A:69:53:FF:D4:5E:5A:50:BD:DE
Certificate issuer: /CN=ffbcae2b290c801d57d09d025a9348e16706f182
Certificate serial: 0195F5721720D1BE3BCBEEC05A816957687F
Authority key identifier: FF:BC:AE:2B:29:0C:80:1D:57:D0:9D:02:5A:93:48:E1:67:06:F1:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/CfByYUpLy5HR5mppU__UXlpQvd4.roa
Signing time: Wed 02 Apr 2025 07:40:49 +0000
ROA not before: Wed 02 Apr 2025 07:40:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198537
IP address blocks: 37.221.100.0/22 maxlen: 24
45.159.236.0/22 maxlen: 24
77.83.40.0/22 maxlen: 24
91.209.115.0/24 maxlen: 24
91.209.149.0/24 maxlen: 24
91.209.151.0/24 maxlen: 24
91.236.32.0/22 maxlen: 24
185.146.52.0/22 maxlen: 24
194.53.1.0/24 maxlen: 24
194.53.2.0/24 maxlen: 24
194.53.61.0/24 maxlen: 24
195.14.26.0/23 maxlen: 24
195.14.112.0/23 maxlen: 24
2a07:4bc0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f5:72:17:20:d1:be:3b:cb:ee:c0:5a:81:69:57:68:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbcae2b290c801d57d09d025a9348e16706f182
Validity
Not Before: Apr 2 07:40:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09f072614a4bcb91d1e66a6953ffd45e5a50bdde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1e:c7:2b:45:11:ac:46:8e:ed:55:51:62:7a:
0f:d1:bf:22:dc:28:61:49:a3:72:5b:53:a2:01:ab:
41:e9:53:80:f9:26:26:95:41:e7:9a:c7:d9:3f:45:
bc:0a:e8:02:4b:01:fd:f0:ea:17:7b:4d:48:1a:61:
95:2e:55:77:9a:f7:73:b4:b7:73:e2:27:45:bf:0f:
21:34:7f:b0:cc:df:f3:4c:41:56:3b:5b:b9:14:0e:
40:4c:94:5c:4a:a7:7c:c8:7d:ae:6a:3f:27:b1:64:
94:24:bb:d0:f5:58:eb:c8:7b:da:de:a7:91:45:c1:
92:d4:71:da:1d:a8:10:bd:c4:7c:46:85:ef:a5:22:
b8:e5:95:fa:f0:e6:c3:42:c9:32:f5:d6:53:80:6c:
e0:2a:ba:06:16:59:56:8b:f7:e3:23:f4:b0:4a:1c:
a0:4a:3c:92:d5:61:68:c9:fa:55:37:7a:af:cc:8b:
b3:0c:77:78:21:70:6d:35:59:29:1e:e5:1b:74:2d:
e7:75:bd:d7:0b:2d:68:b5:ef:6e:02:a1:4a:1e:f2:
b3:fc:91:af:5e:55:15:98:ca:6f:aa:99:33:01:f8:
f8:55:db:98:7e:03:81:39:e3:3e:d5:34:53:75:4a:
40:c7:5b:6a:a0:4c:ec:16:1e:1c:bb:09:ed:15:e9:
4c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F0:72:61:4A:4B:CB:91:D1:E6:6A:69:53:FF:D4:5E:5A:50:BD:DE
X509v3 Authority Key Identifier:
keyid:FF:BC:AE:2B:29:0C:80:1D:57:D0:9D:02:5A:93:48:E1:67:06:F1:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/CfByYUpLy5HR5mppU__UXlpQvd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.100.0/22
45.159.236.0/22
77.83.40.0/22
91.209.115.0/24
91.209.149.0/24
91.209.151.0/24
91.236.32.0/22
185.146.52.0/22
194.53.1.0-194.53.2.255
194.53.61.0/24
195.14.26.0/23
195.14.112.0/23
IPv6:
2a07:4bc0::/29
Signature Algorithm: sha256WithRSAEncryption
12:69:e4:fd:94:46:32:54:d2:b8:43:5c:6a:ea:0e:01:4c:8a:
76:84:b9:fc:da:a9:93:c0:27:fc:ff:ab:47:f0:fc:44:b3:1a:
8b:3e:f0:31:91:c0:89:d5:25:6e:e0:88:3f:11:3a:f9:b9:a9:
48:2c:92:6d:28:f4:e3:2e:c1:71:34:87:3e:6e:75:87:cd:38:
2f:4a:5a:08:ee:97:fc:02:bc:b9:f5:1b:fb:1d:87:c0:36:43:
9d:8b:05:90:eb:39:90:5e:00:8a:07:a9:12:cc:11:d7:c6:e6:
20:c4:5f:19:6d:69:cf:82:a9:e3:cf:4e:27:7b:d1:7d:66:47:
8a:39:8a:d4:52:a8:1b:07:66:54:75:1d:79:84:68:f3:f1:ea:
c8:fc:f3:f0:7e:8e:a5:16:87:de:76:a6:ec:25:7a:dc:7e:e9:
77:1c:cc:00:3e:2c:e3:62:68:47:8d:f8:71:39:53:e1:18:6a:
25:00:17:70:0b:df:cb:de:ea:3a:8c:aa:4c:17:3f:d0:a5:b3:
2e:bc:54:2a:b1:15:97:e9:de:8e:61:b5:4f:ef:27:73:bc:c9:
aa:91:31:44:1a:16:17:b2:42:ba:a4:cf:d8:7f:ec:3e:74:c6:
f9:4f:38:3a:8a:72:56:65:a8:3b:18:b7:8e:f9:17:78:ed:94:
31:94:18:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:45 2025 by rpki-client on console.sobornost.net