Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/axN2K4VSNTdtaaV_JxeEnJ21dd4.roa
File: axN2K4VSNTdtaaV_JxeEnJ21dd4.roa (raw, json)
Hash identifier: yN7cScR1lEGAvTwTo3GQ7KX+00uJi+qQq1bMbZX2awo=
Subject key identifier: 6B:13:76:2B:85:52:35:37:6D:69:A5:7F:27:17:84:9C:9D:B5:75:DE
Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Certificate serial: 0194D08296D18F0E6A48641AEA96B031C752
Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/axN2K4VSNTdtaaV_JxeEnJ21dd4.roa
Signing time: Tue 04 Feb 2025 10:30:06 +0000
ROA not before: Tue 04 Feb 2025 10:30:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15704
IP address blocks: 31.221.128.0/19 maxlen: 19
31.221.160.0/19 maxlen: 19
31.221.192.0/19 maxlen: 19
31.221.224.0/19 maxlen: 19
37.29.128.0/17 maxlen: 17
46.6.0.0/18 maxlen: 18
46.6.16.0/21 maxlen: 21
46.6.24.0/21 maxlen: 21
46.6.32.0/21 maxlen: 21
46.6.40.0/21 maxlen: 21
46.6.48.0/21 maxlen: 21
46.6.56.0/21 maxlen: 21
46.6.112.0/24 maxlen: 24
46.6.113.0/24 maxlen: 24
46.6.114.0/24 maxlen: 24
46.6.116.0/22 maxlen: 22
46.6.120.0/22 maxlen: 22
46.6.124.0/22 maxlen: 22
46.6.128.0/17 maxlen: 17
46.222.0.0/17 maxlen: 17
46.222.128.0/17 maxlen: 17
80.81.96.0/19 maxlen: 19
82.144.0.0/19 maxlen: 19
83.175.192.0/18 maxlen: 18
95.169.240.0/24 maxlen: 24
95.169.241.0/24 maxlen: 24
95.169.246.0/24 maxlen: 24
109.227.128.0/19 maxlen: 19
109.227.128.0/20 maxlen: 20
109.227.144.0/20 maxlen: 20
109.227.178.0/24 maxlen: 24
178.237.224.0/21 maxlen: 21
178.237.232.0/21 maxlen: 21
185.241.128.0/22 maxlen: 22
188.127.160.0/19 maxlen: 19
213.171.224.0/19 maxlen: 19
213.172.32.0/19 maxlen: 19
217.168.3.0/24 maxlen: 24
217.168.6.0/24 maxlen: 24
217.168.13.0/24 maxlen: 24
217.172.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d0:82:96:d1:8f:0e:6a:48:64:1a:ea:96:b0:31:c7:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Validity
Not Before: Feb 4 10:30:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b13762b855235376d69a57f2717849c9db575de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4b:b4:ab:20:08:87:e6:6e:5f:26:0c:ef:2b:
02:f0:4d:cd:f4:c8:57:00:86:6e:94:16:69:66:ef:
96:c3:a0:bf:a1:4b:2f:57:a0:1f:0d:65:00:76:53:
34:71:f4:e5:1b:2a:cb:60:52:2c:5c:7b:4d:98:e9:
77:69:66:4c:46:0c:e7:47:bc:5e:45:88:50:91:cc:
d7:d5:95:7a:d1:21:b5:d7:06:d9:7d:1b:3a:73:a1:
36:62:c8:4b:ec:36:c1:12:2f:b2:b5:34:be:60:5b:
64:c4:cf:55:e8:45:c9:c7:36:ad:d0:83:25:86:57:
46:83:d9:27:a7:81:19:ab:15:01:5f:f3:5b:14:a7:
28:56:b0:e0:c2:9c:f1:c4:34:d5:b4:7a:43:00:17:
2b:05:ca:ab:5f:a9:15:29:d6:48:01:7f:c9:ed:be:
2e:08:05:35:a4:08:8f:65:54:d0:59:e7:84:9b:3b:
af:61:80:fb:cf:a6:4d:79:6c:de:78:4b:68:f5:f1:
0a:e4:05:4c:39:92:27:40:16:d9:17:57:58:68:ba:
6e:db:f0:28:ed:21:42:8b:48:4e:e8:95:f1:40:f4:
55:d1:37:8e:c6:9d:91:c4:23:b6:dc:02:9e:6c:c1:
29:18:37:4f:07:49:63:6c:a5:84:24:d3:e3:82:c6:
e9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:13:76:2B:85:52:35:37:6D:69:A5:7F:27:17:84:9C:9D:B5:75:DE
X509v3 Authority Key Identifier:
keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/axN2K4VSNTdtaaV_JxeEnJ21dd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.221.128.0/17
37.29.128.0/17
46.6.0.0/18
46.6.112.0-46.6.114.255
46.6.116.0-46.6.255.255
46.222.0.0/16
80.81.96.0/19
82.144.0.0/19
83.175.192.0/18
95.169.240.0/23
95.169.246.0/24
109.227.128.0/19
109.227.178.0/24
178.237.224.0/20
185.241.128.0/22
188.127.160.0/19
213.171.224.0/19
213.172.32.0/19
217.168.3.0/24
217.168.6.0/24
217.168.13.0/24
217.172.64.0/20
Signature Algorithm: sha256WithRSAEncryption
88:98:70:ec:bb:f7:c2:32:14:af:f1:b0:94:81:6d:ea:3c:bb:
13:df:c8:df:d7:4e:02:85:88:a3:59:ca:e4:5c:91:07:af:18:
a6:5f:f7:c9:4b:27:88:16:bf:32:3d:06:a6:58:d2:63:ae:47:
b3:44:4e:71:41:57:fb:84:a2:52:af:9d:1c:d0:44:e7:93:8b:
ed:12:46:36:a0:18:41:56:fc:60:e1:d6:cf:1f:0a:32:7d:fb:
82:45:89:1d:98:4c:bf:7f:e8:20:e7:23:f5:4d:12:5e:45:20:
d2:99:ef:53:36:ed:c4:90:a7:ac:76:28:a5:57:9c:5f:cf:c7:
89:19:c8:5f:a8:f4:ed:41:8c:da:8a:85:24:57:66:3d:92:16:
97:b3:e4:d5:ff:4f:24:8e:07:9c:a0:a8:d6:0c:b1:af:58:a2:
18:a0:22:53:21:af:11:63:35:ac:f3:d1:97:7c:9f:82:9c:46:
35:41:1b:fc:0d:ed:81:71:ff:d8:22:45:2b:5e:1b:6e:55:c9:
1d:12:86:27:4c:aa:10:d2:09:5f:f9:ae:e1:2c:7f:01:74:e6:
c2:0f:ea:a9:eb:1f:94:b8:22:48:32:fe:f0:b4:58:17:12:30:
86:fa:d1:d5:09:7d:90:e6:37:07:95:77:d9:f1:59:d8:74:84:
c3:c1:0a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 1 23:54:17 2025 by rpki-client on console.sobornost.net