Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/BhB4QRUPoERbo_tuXIOvKFT5tus.roa
File: BhB4QRUPoERbo_tuXIOvKFT5tus.roa (raw, json)
Hash identifier: asfvJzhTCTkNeMXKQv12QThiuP/0k3pLDDHOuHxC3r4=
Subject key identifier: 06:10:78:41:15:0F:A0:44:5B:A3:FB:6E:5C:83:AF:28:54:F9:B6:EB
Certificate issuer: /CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Certificate serial: 0194221F9863EF64A32DC940999EFF1EBA96
Authority key identifier: 4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/BhB4QRUPoERbo_tuXIOvKFT5tus.roa
Signing time: Wed 01 Jan 2025 13:48:03 +0000
ROA not before: Wed 01 Jan 2025 13:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31200
IP address blocks: 5.128.0.0/16 maxlen: 16
5.128.119.0/24 maxlen: 24
5.129.0.0/17 maxlen: 17
5.129.128.0/19 maxlen: 19
5.129.181.0/24 maxlen: 24
5.129.184.0/23 maxlen: 23
5.129.186.0/24 maxlen: 24
5.130.0.0/16 maxlen: 16
5.130.162.0/24 maxlen: 24
5.130.163.0/24 maxlen: 24
5.130.164.0/24 maxlen: 24
5.130.165.0/24 maxlen: 24
5.130.166.0/24 maxlen: 24
5.131.0.0/16 maxlen: 16
5.131.0.0/17 maxlen: 17
5.131.128.0/18 maxlen: 18
5.131.192.0/19 maxlen: 19
5.131.224.0/20 maxlen: 20
5.131.224.0/24 maxlen: 24
5.131.240.0/20 maxlen: 20
5.131.251.0/24 maxlen: 24
5.131.253.0/24 maxlen: 24
37.192.0.0/14 maxlen: 14
37.192.0.0/16 maxlen: 16
37.193.0.0/16 maxlen: 16
37.194.0.0/16 maxlen: 16
37.195.0.0/16 maxlen: 16
178.49.0.0/16 maxlen: 24
178.49.0.0/17 maxlen: 17
178.49.12.0/22 maxlen: 22
178.49.56.0/22 maxlen: 22
178.49.128.0/17 maxlen: 24
178.49.132.0/24 maxlen: 24
178.49.133.0/24 maxlen: 24
178.49.141.0/24 maxlen: 24
178.49.142.0/24 maxlen: 24
178.49.144.0/24 maxlen: 24
178.49.145.0/24 maxlen: 24
178.49.146.0/24 maxlen: 24
178.49.147.0/24 maxlen: 24
178.49.148.0/24 maxlen: 24
178.49.150.0/23 maxlen: 23
178.49.152.0/22 maxlen: 22
178.49.152.0/23 maxlen: 23
178.49.152.0/24 maxlen: 24
178.49.154.0/23 maxlen: 23
178.49.154.0/24 maxlen: 24
178.49.156.0/23 maxlen: 23
178.49.158.0/24 maxlen: 24
178.49.159.0/24 maxlen: 24
178.49.200.0/22 maxlen: 22
178.49.248.0/22 maxlen: 22
2a00:7700::/32 maxlen: 32
2a00:7700:8a02::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:98:63:ef:64:a3:2d:c9:40:99:9e:ff:1e:ba:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Validity
Not Before: Jan 1 13:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06107841150fa0445ba3fb6e5c83af2854f9b6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:05:83:eb:a8:52:14:de:9b:0f:03:85:a9:04:
ca:b8:93:5d:bd:7b:3e:4c:9d:c0:49:7c:37:f9:04:
9f:d5:f9:5d:c0:f1:c7:a3:66:4c:7a:ba:e9:a1:43:
95:ce:e4:fa:f5:48:a1:a9:fe:dd:77:31:87:f6:2c:
e9:7d:8f:e8:04:74:e9:d8:14:0b:a0:cd:2a:86:a9:
e4:e8:62:18:05:8b:0c:10:7d:eb:51:2d:28:d4:24:
58:4c:3c:51:3f:69:56:10:28:fe:5d:31:c7:38:43:
cb:94:26:06:45:cd:0c:14:08:cf:34:37:31:27:16:
9f:95:b7:e4:31:bc:1b:29:31:54:05:6b:a7:f8:6b:
2c:df:09:7a:71:89:bb:33:3a:dc:ab:ee:7a:7e:e3:
01:a8:57:a7:2e:bd:8b:b1:87:df:76:9b:ac:fd:f8:
e0:11:09:10:27:86:d3:22:65:43:52:07:61:a2:99:
e0:15:30:fb:90:dc:ca:38:c8:0b:ed:9b:65:a0:ce:
7e:be:d9:c1:fd:64:64:c9:9d:a3:c3:1f:ec:12:74:
45:48:01:af:6f:ee:7f:e1:d6:29:e1:3a:d7:30:2b:
5c:30:6a:13:84:fb:2c:78:f2:9e:af:ae:23:ad:14:
3c:b5:4b:58:d9:5f:13:02:16:8c:a2:22:db:90:1c:
57:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:10:78:41:15:0F:A0:44:5B:A3:FB:6E:5C:83:AF:28:54:F9:B6:EB
X509v3 Authority Key Identifier:
keyid:4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/BhB4QRUPoERbo_tuXIOvKFT5tus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.128.0.0-5.129.159.255
5.129.181.0/24
5.129.184.0-5.129.186.255
5.130.0.0/15
37.192.0.0/14
178.49.0.0/16
IPv6:
2a00:7700::/32
Signature Algorithm: sha256WithRSAEncryption
13:d0:d5:f9:ea:59:2d:b1:30:bd:c0:3e:17:31:49:7a:0d:12:
14:64:5a:5a:5e:f0:59:77:1b:15:e9:17:d1:90:9e:99:b1:22:
04:5d:10:ef:6f:cd:63:0d:22:30:dd:85:3c:45:73:91:66:e1:
66:e5:ec:db:7e:07:7b:db:80:93:24:9d:a1:25:8f:29:a9:6c:
d6:8a:29:62:32:38:42:69:db:f6:43:61:8b:21:92:ec:20:4f:
38:7b:89:0e:5c:f3:c7:60:08:af:60:6e:bd:d4:92:69:3a:a6:
6c:82:4e:04:d8:04:31:64:7b:40:ba:ba:df:b2:1a:94:32:27:
eb:b5:32:b3:a4:04:d3:e6:a3:47:4c:80:d8:dd:5b:43:ce:fa:
76:46:7e:4f:43:f6:e9:19:f6:18:09:a2:be:e7:7d:b2:39:fd:
7d:47:4b:1a:08:fa:b3:81:94:3d:de:ef:24:cf:21:44:4d:e8:
a7:26:d4:00:0a:65:32:16:53:8b:74:85:20:35:f2:25:9f:9a:
13:ba:68:24:da:ef:d9:86:e4:7d:35:07:5c:20:41:3f:aa:c8:
54:df:4d:d3:6d:90:e8:0b:9f:d3:33:1d:73:1d:11:f8:b4:6d:
d4:8b:48:b7:66:0e:fa:cf:64:52:6a:22:12:65:b5:55:29:2a:
76:fb:e7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:04 2025 by rpki-client on console.sobornost.net