Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/W6e3X_Wb6Adh8gwNmkV0Ijz_L84.roa
File: W6e3X_Wb6Adh8gwNmkV0Ijz_L84.roa (raw, json)
Hash identifier: R/xA4I3FGP5WZPYmHbhHz047Tj80k7ra916tUInLUjk=
Subject key identifier: 5B:A7:B7:5F:F5:9B:E8:07:61:F2:0C:0D:9A:45:74:22:3C:FF:2F:CE
Certificate issuer: /CN=4e15df688c3aeae3f685ed44b396c2198395861d
Certificate serial: 019102A1D0E0FB110D602C52ACF1C8C5BEC4
Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/W6e3X_Wb6Adh8gwNmkV0Ijz_L84.roa
Signing time: Tue 30 Jul 2024 07:54:04 +0000
ROA not before: Tue 30 Jul 2024 07:54:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21021
IP address blocks: 31.6.128.0/18 maxlen: 18
31.6.192.0/19 maxlen: 19
31.42.16.0/20 maxlen: 20
37.131.128.0/19 maxlen: 19
37.190.128.0/17 maxlen: 17
46.186.0.0/17 maxlen: 17
46.231.56.0/21 maxlen: 21
62.61.32.0/19 maxlen: 19
62.141.192.0/18 maxlen: 18
80.244.128.0/19 maxlen: 19
80.245.176.0/20 maxlen: 20
81.190.0.0/16 maxlen: 16
82.115.64.0/19 maxlen: 19
83.68.64.0/19 maxlen: 19
84.38.80.0/20 maxlen: 20
85.117.0.0/19 maxlen: 19
87.116.192.0/18 maxlen: 18
89.17.224.0/19 maxlen: 19
89.228.0.0/16 maxlen: 16
89.229.0.0/16 maxlen: 16
89.230.0.0/16 maxlen: 16
89.231.0.0/16 maxlen: 16
92.42.112.0/21 maxlen: 21
93.94.184.0/21 maxlen: 21
94.78.128.0/18 maxlen: 18
94.251.128.0/17 maxlen: 17
95.129.224.0/21 maxlen: 21
95.174.32.0/19 maxlen: 19
176.107.112.0/21 maxlen: 21
176.221.96.0/19 maxlen: 19
185.31.184.0/22 maxlen: 22
193.43.240.0/22 maxlen: 22
193.43.242.0/24 maxlen: 24
193.43.243.0/24 maxlen: 24
193.106.76.0/22 maxlen: 22
193.200.118.0/23 maxlen: 23
194.116.132.0/23 maxlen: 23
194.149.240.0/24 maxlen: 24
195.93.134.0/23 maxlen: 23
195.93.222.0/23 maxlen: 23
213.136.224.0/19 maxlen: 19
217.70.48.0/20 maxlen: 20
217.75.48.0/20 maxlen: 20
217.144.192.0/19 maxlen: 19
217.172.224.0/19 maxlen: 19
2a00:1c00::/32 maxlen: 32
2a02:2a40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:02:a1:d0:e0:fb:11:0d:60:2c:52:ac:f1:c8:c5:be:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d
Validity
Not Before: Jul 30 07:54:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ba7b75ff59be80761f20c0d9a4574223cff2fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1b:af:a9:89:57:f4:ed:a0:5c:77:df:50:3c:
1a:ba:8f:8f:31:90:e1:a6:9c:e6:21:4d:f8:aa:d3:
63:92:4c:ba:22:a3:fd:67:18:b5:fd:b1:e8:32:6d:
71:f4:87:32:25:8e:1f:a0:c2:a1:0f:30:51:12:72:
d3:da:64:66:82:22:63:f2:24:d1:b7:7d:a1:47:12:
29:b9:2b:10:62:b8:27:2d:4a:76:5a:3c:5e:fd:7c:
e7:e9:a0:f9:c4:1e:0d:9d:86:0a:79:c5:79:69:88:
d9:3d:76:8d:86:47:58:cb:e0:f0:c4:f7:3c:1b:1c:
21:e2:16:26:d1:11:fe:b5:93:26:b4:b2:27:bb:e8:
9a:70:35:54:de:9d:a8:14:1a:1a:c5:1a:70:6e:d9:
4a:64:59:aa:2f:33:02:41:6b:8a:35:e7:e7:0d:b9:
d8:bc:fe:ff:af:88:03:68:e6:d3:28:47:18:41:19:
56:44:05:f4:30:3b:56:f1:28:c9:31:37:e0:eb:fb:
7e:c7:8a:59:4c:91:62:83:63:28:b5:dc:0f:33:b7:
77:41:93:33:fe:f5:40:d7:fe:07:39:35:d5:ac:5b:
f9:22:4a:38:a8:5b:80:bb:f8:46:83:73:94:8f:cd:
85:ac:e3:db:eb:7d:93:1e:6a:4e:ed:31:bd:41:51:
a7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A7:B7:5F:F5:9B:E8:07:61:F2:0C:0D:9A:45:74:22:3C:FF:2F:CE
X509v3 Authority Key Identifier:
keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/W6e3X_Wb6Adh8gwNmkV0Ijz_L84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.128.0-31.6.223.255
31.42.16.0/20
37.131.128.0/19
37.190.128.0/17
46.186.0.0/17
46.231.56.0/21
62.61.32.0/19
62.141.192.0/18
80.244.128.0/19
80.245.176.0/20
81.190.0.0/16
82.115.64.0/19
83.68.64.0/19
84.38.80.0/20
85.117.0.0/19
87.116.192.0/18
89.17.224.0/19
89.228.0.0/14
92.42.112.0/21
93.94.184.0/21
94.78.128.0/18
94.251.128.0/17
95.129.224.0/21
95.174.32.0/19
176.107.112.0/21
176.221.96.0/19
185.31.184.0/22
193.43.240.0/22
193.106.76.0/22
193.200.118.0/23
194.116.132.0/23
194.149.240.0/24
195.93.134.0/23
195.93.222.0/23
213.136.224.0/19
217.70.48.0/20
217.75.48.0/20
217.144.192.0/19
217.172.224.0/19
IPv6:
2a00:1c00::/32
2a02:2a40::/32
Signature Algorithm: sha256WithRSAEncryption
9c:8b:03:5d:69:db:0b:c6:36:42:65:23:17:0d:00:44:6a:08:
93:ba:e0:e1:05:61:80:c0:57:2b:87:56:63:a4:98:07:4f:fd:
1a:08:9e:74:c1:6f:2a:58:fc:4d:2c:cd:86:02:a9:46:e1:1d:
e0:ab:93:85:c9:e4:9a:33:13:d7:94:29:6b:3b:3d:65:a6:fb:
2a:45:cf:89:95:d8:62:9e:32:ae:ef:a7:6c:3c:25:e7:b5:5a:
f2:e1:38:69:f9:8c:2b:77:4b:e0:05:af:b8:a2:07:ca:36:9a:
54:78:18:db:3f:27:1f:a5:b7:91:d0:83:91:24:51:93:32:e3:
c4:cb:c9:0c:10:b0:42:56:96:7f:66:25:f4:9d:16:d1:7d:df:
66:46:22:e5:c3:a3:e7:62:96:9d:51:4c:87:a1:dc:ed:d8:c3:
28:8e:4b:33:48:c0:11:b3:9f:80:a7:a5:ee:77:31:4a:71:de:
7b:7b:3f:f3:00:1f:80:ee:ab:1b:39:40:dd:3f:c1:88:4f:0d:
95:7a:4d:61:3f:80:78:24:f9:d4:6f:eb:c5:dd:de:5b:58:9d:
20:13:68:f9:10:ac:5f:d6:1f:df:08:66:26:f0:1b:eb:ac:12:
a0:00:b6:c7:39:6f:7e:be:b0:00:74:7d:c7:0a:34:6a:f8:bc:
ef:59:d9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:59 2024 by rpki-client on console.sobornost.net