Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/9f63Sb9a540JPUwazld4MMVS_iE.roa
File: 9f63Sb9a540JPUwazld4MMVS_iE.roa (raw, json)
Hash identifier: DIORsJwOy+2Zy+DITLzusBKnfVOGOXxgm47fM/VbAWQ=
Subject key identifier: F5:FE:B7:49:BF:5A:E7:8D:09:3D:4C:1A:CE:57:78:30:C5:52:FE:21
Certificate issuer: /CN=7ccd0cacfafa2e0d31495dd950f76af5f98ba5d7
Certificate serial: 019424B3FCD7DE129105ABF0DA0C0D362AE7
Authority key identifier: 7C:CD:0C:AC:FA:FA:2E:0D:31:49:5D:D9:50:F7:6A:F5:F9:8B:A5:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/9f63Sb9a540JPUwazld4MMVS_iE.roa
Signing time: Thu 02 Jan 2025 01:49:22 +0000
ROA not before: Thu 02 Jan 2025 01:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42925
IP address blocks: 31.44.128.0/20 maxlen: 24
31.44.128.0/21 maxlen: 24
31.44.136.0/21 maxlen: 24
37.60.40.0/21 maxlen: 24
37.60.40.0/22 maxlen: 24
37.60.44.0/22 maxlen: 24
95.86.64.0/18 maxlen: 24
95.86.64.0/19 maxlen: 24
95.86.96.0/19 maxlen: 24
147.236.102.0/23 maxlen: 24
147.236.212.0/22 maxlen: 24
147.236.224.0/22 maxlen: 24
164.138.112.0/20 maxlen: 24
164.138.112.0/21 maxlen: 24
164.138.120.0/21 maxlen: 24
185.10.64.0/22 maxlen: 24
185.139.229.0/24 maxlen: 24
212.76.96.0/19 maxlen: 24
212.76.96.0/20 maxlen: 24
212.76.112.0/20 maxlen: 24
213.151.32.0/19 maxlen: 24
213.151.32.0/24 maxlen: 24
213.151.48.0/20 maxlen: 24
217.194.196.0/22 maxlen: 24
217.194.200.0/21 maxlen: 24
2a01:6500::/29 maxlen: 29
2a01:6500::/32 maxlen: 32
2a01:6500:3::/48 maxlen: 48
2a01:6500:a040::/46 maxlen: 46
2a01:6500:a044::/46 maxlen: 46
2a01:6500:a048::/46 maxlen: 46
2a01:6500:a050::/46 maxlen: 46
2a01:6500:a054::/46 maxlen: 46
2a01:6500:a058::/46 maxlen: 46
2a01:6501::/32 maxlen: 32
2a01:6502::/32 maxlen: 32
2a01:6502:a54::/46 maxlen: 46
2a01:6502:a58::/46 maxlen: 46
2a01:6503::/32 maxlen: 32
2a01:6504::/32 maxlen: 32
2a01:6505::/32 maxlen: 32
2a01:6506::/32 maxlen: 32
2a01:6507::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:fc:d7:de:12:91:05:ab:f0:da:0c:0d:36:2a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd0cacfafa2e0d31495dd950f76af5f98ba5d7
Validity
Not Before: Jan 2 01:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5feb749bf5ae78d093d4c1ace577830c552fe21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c9:27:db:f3:18:92:37:d2:5a:b3:94:45:04:
3e:81:66:2c:a0:01:e6:fc:cf:de:aa:e2:0c:32:e4:
ab:92:77:b9:26:e0:ce:19:e3:11:d3:40:b6:14:24:
7f:7f:3f:1d:58:4e:3f:ac:86:0b:c3:0b:78:bb:2d:
b1:17:2b:91:d4:af:48:3b:fa:29:a0:71:99:d4:bf:
46:fd:b3:1e:1f:e6:2d:9e:58:69:a2:7d:15:e0:cf:
e1:12:24:96:7d:e8:fa:cc:84:3e:08:5b:96:52:c8:
03:ee:a7:5a:94:0c:7b:1d:c1:34:0a:2b:28:d0:7b:
78:0b:76:b5:14:fb:b4:ca:ff:cb:f1:9a:52:a9:13:
0f:e4:99:e1:04:72:60:fa:b3:66:72:01:93:e4:4a:
a8:c8:17:9c:00:33:3e:88:9c:31:da:97:36:d8:ca:
4e:0e:85:00:37:ed:66:c2:64:29:82:e1:e5:3f:fd:
0a:f3:e3:0c:45:1b:46:3d:1b:b0:ae:af:83:5d:0a:
72:b9:1e:8c:e1:a0:33:c6:ad:17:79:cd:ea:73:2f:
1b:a7:a9:81:d5:15:e8:b6:6a:b2:9d:72:cf:2c:3f:
ed:eb:75:e9:10:e7:3c:a7:b5:ed:c4:90:ac:e7:12:
10:73:32:b2:73:d9:ca:c0:7d:4b:b5:e1:00:ea:18:
c6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FE:B7:49:BF:5A:E7:8D:09:3D:4C:1A:CE:57:78:30:C5:52:FE:21
X509v3 Authority Key Identifier:
keyid:7C:CD:0C:AC:FA:FA:2E:0D:31:49:5D:D9:50:F7:6A:F5:F9:8B:A5:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/9f63Sb9a540JPUwazld4MMVS_iE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.128.0/20
37.60.40.0/21
95.86.64.0/18
147.236.102.0/23
147.236.212.0/22
147.236.224.0/22
164.138.112.0/20
185.10.64.0/22
185.139.229.0/24
212.76.96.0/19
213.151.32.0/19
217.194.196.0-217.194.207.255
IPv6:
2a01:6500::/29
Signature Algorithm: sha256WithRSAEncryption
9a:31:b2:9c:43:45:2f:61:a9:83:ad:1f:df:ee:1f:4e:21:74:
e7:c4:c5:43:07:64:01:75:90:4e:50:81:59:70:c6:63:c9:5c:
a8:7f:da:93:e2:46:35:1b:1b:d4:a0:e7:fc:ad:62:d4:4d:23:
80:cb:ec:d7:b2:c1:e1:d0:b2:59:5e:bd:73:be:ec:1b:17:20:
d7:00:4d:5f:08:c0:e7:4e:98:1d:12:29:86:d0:b3:03:66:9b:
52:07:f8:4b:00:c7:81:8a:3e:c4:c6:28:74:b0:26:6f:6c:9c:
81:43:ba:cf:ed:2d:22:0f:f6:ec:b2:41:61:b3:94:9a:7b:d4:
da:08:a6:8f:0b:05:08:33:b7:80:1b:48:ee:d3:07:f1:0c:4e:
9a:a3:00:9c:01:9b:03:b3:e1:0b:a1:54:81:75:97:5e:2e:40:
92:43:aa:75:f6:ff:6d:eb:bc:b2:4a:76:91:2d:3b:d0:3e:4a:
75:94:91:dc:3c:cd:99:df:63:d1:47:27:fb:e1:35:90:e6:00:
c5:2e:37:02:b3:cf:94:8d:a7:df:ad:87:aa:c1:5b:19:e0:15:
2c:91:67:ed:0c:8c:06:7f:5f:f4:a1:bd:a9:32:56:10:7e:09:
cc:e7:78:aa:e5:b6:42:d8:42:a2:f1:0e:3a:12:55:7e:91:16:
5e:d1:be:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:56 2025 by rpki-client on console.sobornost.net