Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/cdabc4-bae5-4d99-9e17-6815548bf33f/1/P5ZnswUpMLyVjWj9pVZS-hlIw7A.roa
File: P5ZnswUpMLyVjWj9pVZS-hlIw7A.roa (raw, json)
Hash identifier: 3hJsA3Q3EQecJR3hJHgLTYYEIcnWflx0DcKeSfNvhRM=
Subject key identifier: 3F:96:67:B3:05:29:30:BC:95:8D:68:FD:A5:56:52:FA:19:48:C3:B0
Certificate issuer: /CN=767bc02a5859623f563ea84a6bb0a2920d5b3e91
Certificate serial: 0194228D2AFB06F57A5546E19F8F43AFF656
Authority key identifier: 76:7B:C0:2A:58:59:62:3F:56:3E:A8:4A:6B:B0:A2:92:0D:5B:3E:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnvAKlhZYj9WPqhKa7Cikg1bPpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/cdabc4-bae5-4d99-9e17-6815548bf33f/1/P5ZnswUpMLyVjWj9pVZS-hlIw7A.roa
Signing time: Wed 01 Jan 2025 15:47:44 +0000
ROA not before: Wed 01 Jan 2025 15:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44702
IP address blocks: 5.199.184.0/22 maxlen: 22
5.199.184.0/24 maxlen: 24
5.199.185.0/24 maxlen: 24
5.199.186.0/24 maxlen: 24
5.199.187.0/24 maxlen: 24
45.142.196.0/22 maxlen: 22
45.142.196.0/24 maxlen: 24
45.142.197.0/24 maxlen: 24
45.142.198.0/24 maxlen: 24
45.142.199.0/24 maxlen: 24
79.134.128.0/20 maxlen: 20
79.134.128.0/22 maxlen: 22
79.134.128.0/23 maxlen: 23
79.134.128.0/24 maxlen: 24
79.134.129.0/24 maxlen: 24
79.134.130.0/24 maxlen: 24
79.134.131.0/24 maxlen: 24
79.134.132.0/22 maxlen: 22
79.134.132.0/24 maxlen: 24
79.134.133.0/24 maxlen: 24
79.134.134.0/24 maxlen: 24
79.134.135.0/24 maxlen: 24
79.134.136.0/22 maxlen: 22
79.134.136.0/24 maxlen: 24
79.134.137.0/24 maxlen: 24
79.134.138.0/24 maxlen: 24
79.134.139.0/24 maxlen: 24
79.134.140.0/22 maxlen: 22
79.134.140.0/24 maxlen: 24
79.134.141.0/24 maxlen: 24
79.134.142.0/24 maxlen: 24
79.134.143.0/24 maxlen: 24
79.134.144.0/22 maxlen: 22
79.134.144.0/24 maxlen: 24
79.134.145.0/24 maxlen: 24
79.134.146.0/24 maxlen: 24
79.134.147.0/24 maxlen: 24
79.134.148.0/22 maxlen: 22
79.134.148.0/24 maxlen: 24
79.134.149.0/24 maxlen: 24
79.134.150.0/24 maxlen: 24
79.134.151.0/24 maxlen: 24
79.134.152.0/22 maxlen: 22
79.134.152.0/24 maxlen: 24
79.134.153.0/24 maxlen: 24
79.134.154.0/24 maxlen: 24
79.134.155.0/24 maxlen: 24
79.134.156.0/22 maxlen: 22
79.134.156.0/24 maxlen: 24
79.134.157.0/24 maxlen: 24
79.134.158.0/24 maxlen: 24
79.134.159.0/24 maxlen: 24
185.139.220.0/22 maxlen: 22
185.139.220.0/24 maxlen: 24
185.139.221.0/24 maxlen: 24
185.139.222.0/24 maxlen: 24
185.139.223.0/24 maxlen: 24
2a07:140::/29 maxlen: 29
2a07:140::/32 maxlen: 32
2a07:141::/32 maxlen: 32
2a07:142::/32 maxlen: 32
2a07:143::/32 maxlen: 32
2a07:144::/32 maxlen: 32
2a07:145::/32 maxlen: 32
2a07:146::/32 maxlen: 32
2a07:147::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:2a:fb:06:f5:7a:55:46:e1:9f:8f:43:af:f6:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767bc02a5859623f563ea84a6bb0a2920d5b3e91
Validity
Not Before: Jan 1 15:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f9667b3052930bc958d68fda55652fa1948c3b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b7:d4:0b:d5:4c:cf:be:08:06:77:31:b6:a9:
f0:dc:89:7d:ff:df:4d:8f:24:9f:4b:3a:0f:d9:9f:
b9:1b:7f:dd:1d:0e:6f:6f:01:6a:99:5b:4a:00:8a:
d8:63:73:c5:fa:f1:8e:c6:6d:b0:1c:97:56:75:25:
e0:56:33:e3:11:c5:c9:e2:c7:ed:66:96:8e:ed:8c:
4d:f3:04:4a:7d:a7:37:81:20:1b:5e:56:07:ce:5e:
3f:fc:28:3b:c0:6a:89:2e:2c:3b:2c:c0:e9:c7:68:
09:fa:53:d2:9d:ee:db:bf:b9:36:b1:83:f3:44:bb:
9e:ea:f5:b4:a3:db:15:bf:f4:d1:6e:15:f0:88:db:
e1:cf:f6:94:85:d5:a1:e1:37:3c:df:18:26:b2:4e:
c3:a0:0d:b4:e2:f7:9e:3a:48:89:b4:71:bd:64:1c:
bd:94:5b:87:40:ab:6e:0c:f2:4e:27:a8:8c:80:68:
11:da:4c:4f:a5:f3:ca:77:d2:b5:6c:ce:60:a4:1d:
28:a2:a4:2b:1a:05:e7:e4:d0:29:e4:2a:ee:70:67:
5e:70:13:7b:87:7a:cb:bf:29:d8:e6:45:17:1a:16:
3d:61:53:15:c2:a5:03:70:1b:6b:cc:c9:8f:cd:1b:
75:b7:17:3d:72:02:a3:27:33:6d:88:1d:7f:2c:23:
92:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:96:67:B3:05:29:30:BC:95:8D:68:FD:A5:56:52:FA:19:48:C3:B0
X509v3 Authority Key Identifier:
keyid:76:7B:C0:2A:58:59:62:3F:56:3E:A8:4A:6B:B0:A2:92:0D:5B:3E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnvAKlhZYj9WPqhKa7Cikg1bPpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/cdabc4-bae5-4d99-9e17-6815548bf33f/1/P5ZnswUpMLyVjWj9pVZS-hlIw7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/cdabc4-bae5-4d99-9e17-6815548bf33f/1/dnvAKlhZYj9WPqhKa7Cikg1bPpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.184.0/22
45.142.196.0/22
79.134.128.0/19
185.139.220.0/22
IPv6:
2a07:140::/29
Signature Algorithm: sha256WithRSAEncryption
32:7d:59:e7:0d:21:ec:45:a9:a4:78:e5:bf:3d:3c:91:3c:d5:
a3:a9:4c:21:a3:46:c8:c1:5c:2d:25:33:cc:ab:3b:32:63:5c:
ce:59:f0:b1:4c:47:7c:43:2d:ae:1b:1f:8d:dd:87:e3:78:db:
de:62:a7:63:11:a0:cc:3c:1f:9c:61:49:54:02:53:46:67:14:
e0:36:df:f1:11:e7:d7:22:f3:ef:81:a0:13:c5:15:9c:79:8b:
f0:5e:a3:72:cd:c2:c9:96:5d:44:1f:81:4f:e2:a1:f9:6a:59:
08:bf:9b:89:a3:15:81:08:8a:13:b6:7e:55:c4:5e:d1:99:35:
ea:c3:c2:b6:8b:59:32:20:59:5f:7e:ca:24:81:8c:a0:2a:44:
2b:c8:7e:b2:7a:3d:96:bb:3f:f9:c9:87:ee:ec:51:d3:f7:cc:
d7:1b:ce:2b:a9:0c:10:30:88:2b:58:4d:6f:a9:44:74:e0:b0:
9e:02:63:87:ef:5d:25:63:01:9c:bf:ea:2b:da:af:42:0b:90:
4f:f3:77:a5:d0:96:26:be:ca:34:8a:68:72:1f:78:db:f8:ab:
b2:45:2e:4b:9d:a2:2f:52:e3:e4:79:e3:44:4a:a8:3e:7b:24:
eb:48:ff:0b:3f:25:f8:25:e1:1e:fb:d1:87:37:86:a9:4e:87:
25:93:db:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:54 2025 by rpki-client on console.sobornost.net