Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/vxIQauwrKYzhLqpR5ts19_s3Gik.roa
File: vxIQauwrKYzhLqpR5ts19_s3Gik.roa (raw, json)
Hash identifier: EKZXt/kpQu59j0wMTCR+uQUX4jQn6+dN2RIU5r3Do0s=
Subject key identifier: BF:12:10:6A:EC:2B:29:8C:E1:2E:AA:51:E6:DB:35:F7:FB:37:1A:29
Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Certificate serial: 01961B229019E7EABFA8285632C37D39A6A9
Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/vxIQauwrKYzhLqpR5ts19_s3Gik.roa
Signing time: Wed 09 Apr 2025 15:19:31 +0000
ROA not before: Wed 09 Apr 2025 15:19:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15704
IP address blocks: 31.221.128.0/17 maxlen: 20
37.29.128.0/17 maxlen: 20
46.6.0.0/16 maxlen: 24
46.222.0.0/16 maxlen: 20
80.81.96.0/19 maxlen: 19
82.144.0.0/19 maxlen: 19
83.175.192.0/18 maxlen: 18
95.169.224.0/19 maxlen: 24
109.227.128.0/18 maxlen: 24
178.237.224.0/21 maxlen: 21
178.237.232.0/21 maxlen: 21
185.241.128.0/22 maxlen: 22
188.127.160.0/19 maxlen: 19
213.171.224.0/19 maxlen: 19
213.172.32.0/19 maxlen: 19
217.168.3.0/24 maxlen: 24
217.168.6.0/24 maxlen: 24
217.168.13.0/24 maxlen: 24
217.172.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1b:22:90:19:e7:ea:bf:a8:28:56:32:c3:7d:39:a6:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Validity
Not Before: Apr 9 15:19:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf12106aec2b298ce12eaa51e6db35f7fb371a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c1:f9:e7:03:e7:aa:ef:4d:69:38:ca:b6:81:
e8:bc:fc:8a:85:87:ec:38:91:71:20:b8:78:c3:af:
6d:42:cd:17:cb:81:4f:51:c1:31:f8:93:99:8b:09:
da:1b:2a:3d:09:88:a1:bb:b1:94:fe:b0:d4:ac:4b:
e7:57:2a:a6:2f:ef:61:e6:eb:ac:81:26:0b:94:1b:
7c:0e:8e:33:df:fa:89:cf:87:11:db:e4:0c:82:2b:
4a:d1:14:61:73:d4:4e:8e:2e:f4:54:36:b2:84:a1:
0a:5a:ff:f0:db:73:21:9c:4e:74:ec:36:19:0b:e1:
4b:f1:3d:69:b1:42:30:0f:8a:e2:f8:a2:cd:97:40:
c2:7c:70:c1:66:ad:62:85:fe:f8:b2:96:76:1a:ce:
c9:5c:70:17:7b:81:1f:3a:6c:60:b0:be:5c:fb:83:
d2:0f:8c:5d:a4:44:f4:70:c2:e4:e5:61:0f:18:66:
d8:30:ae:23:f3:20:12:22:31:ad:70:0c:eb:35:13:
92:e6:71:dc:e3:76:5e:e8:c1:90:d8:66:d0:62:f1:
42:1b:1f:bc:d9:8b:5d:9b:83:46:a0:2f:a2:22:77:
e5:a2:65:ba:f9:4e:4b:cc:42:e9:8d:3d:08:18:7f:
15:30:41:3a:66:87:aa:c8:ae:0f:2a:d1:d6:e7:8e:
4d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:12:10:6A:EC:2B:29:8C:E1:2E:AA:51:E6:DB:35:F7:FB:37:1A:29
X509v3 Authority Key Identifier:
keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/vxIQauwrKYzhLqpR5ts19_s3Gik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.221.128.0/17
37.29.128.0/17
46.6.0.0/16
46.222.0.0/16
80.81.96.0/19
82.144.0.0/19
83.175.192.0/18
95.169.224.0/19
109.227.128.0/18
178.237.224.0/20
185.241.128.0/22
188.127.160.0/19
213.171.224.0/19
213.172.32.0/19
217.168.3.0/24
217.168.6.0/24
217.168.13.0/24
217.172.64.0/20
Signature Algorithm: sha256WithRSAEncryption
61:40:97:e0:bb:c1:a0:92:b6:a7:68:bd:4c:4b:54:98:44:91:
88:c4:fb:d1:72:c3:03:22:b5:43:b6:96:3d:17:5c:f4:05:ee:
e3:e4:9e:73:3b:c4:fc:ce:c0:d0:71:14:f5:00:0e:12:df:6e:
a4:f2:09:3f:57:59:62:6f:0a:5b:5c:27:31:f3:be:a4:8a:01:
fb:3b:43:e9:8f:2c:91:26:bd:4b:56:4b:3a:54:80:2a:dd:20:
eb:5b:d1:ae:dd:1b:fd:33:b6:fe:be:42:15:fe:61:71:98:8b:
c8:cf:78:a7:42:8d:e4:be:8c:ac:65:5a:5b:a3:07:62:c7:79:
e1:bb:88:67:89:42:a5:bd:c8:a7:85:db:1e:48:48:11:7f:29:
2e:53:cf:fb:95:aa:c4:d3:47:1c:78:0c:d7:6f:7c:f5:fe:05:
e4:06:c2:42:66:f1:63:58:fb:3b:56:83:2d:26:f1:05:98:f7:
1c:6c:fd:b1:85:a0:ab:dd:ac:d2:86:4a:90:04:d7:52:a2:63:
b4:b3:76:3a:6e:ad:7f:be:86:ca:91:8b:65:bf:c5:f8:11:e5:
02:96:25:6a:54:83:cf:b3:55:99:1b:fa:5c:3e:07:fb:81:c7:
7e:b1:aa:60:62:b9:10:c1:db:fd:42:43:77:c7:eb:e4:cb:23:
42:20:4f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:56 2025 by rpki-client on console.sobornost.net