Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/x2L_c-RSS740XaVwlO7VHobnubM.roa
File: x2L_c-RSS740XaVwlO7VHobnubM.roa (raw, json)
Hash identifier: Qfrg68gfwO9o79kr2HCZELwrxwBVoekGLKNYHsG1PJU=
Subject key identifier: C7:62:FF:73:E4:52:4B:BE:34:5D:A5:70:94:EE:D5:1E:86:E7:B9:B3
Certificate issuer: /CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72
Certificate serial: 01941FFAA0E3F504394F5E94870C2EEA4D44
Authority key identifier: FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/x2L_c-RSS740XaVwlO7VHobnubM.roa
Signing time: Wed 01 Jan 2025 03:48:26 +0000
ROA not before: Wed 01 Jan 2025 03:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210990
IP address blocks: 176.106.40.0/24 maxlen: 24
176.106.41.0/24 maxlen: 24
176.106.42.0/24 maxlen: 24
176.106.43.0/24 maxlen: 24
176.106.44.0/24 maxlen: 24
176.106.45.0/24 maxlen: 24
176.106.46.0/24 maxlen: 24
176.106.47.0/24 maxlen: 24
192.145.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a0:e3:f5:04:39:4f:5e:94:87:0c:2e:ea:4d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72
Validity
Not Before: Jan 1 03:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c762ff73e4524bbe345da57094eed51e86e7b9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cf:0b:6a:af:e6:3b:e0:fb:f1:58:7d:17:7f:
18:4b:ef:52:30:11:8d:79:e3:c2:0e:ba:b2:ba:25:
e9:34:13:0d:8c:e6:a9:af:63:fc:d4:21:31:53:37:
6d:3b:fb:09:54:c7:cf:ef:f5:c3:a6:6b:7b:7c:e3:
4c:f6:0e:37:ae:55:bd:cd:e8:93:c8:5a:ed:5b:6c:
8a:9a:b9:aa:71:31:b6:81:f2:29:9c:44:9d:f8:c8:
bf:76:65:44:2a:55:81:2f:b8:6a:07:eb:09:c5:6c:
3b:9e:b1:ac:aa:05:4f:63:41:e3:cd:b2:d0:ce:ef:
c5:62:5d:97:c5:07:a3:95:d1:3d:f7:18:56:17:77:
ad:79:e3:cc:ec:81:8b:fc:39:69:f9:c1:75:4e:9d:
b7:53:69:d2:49:e7:40:3a:5e:0e:b9:b7:7c:2b:ac:
b8:e0:c8:11:43:e2:5f:1c:26:82:86:1c:1d:4a:71:
09:53:9a:38:95:cb:de:76:da:43:44:70:b6:34:ad:
26:4e:8b:f6:ee:32:04:5c:78:9f:32:ea:76:a4:2a:
23:c6:70:3e:45:57:72:83:41:71:62:ad:d4:ee:09:
0b:40:6b:2a:32:84:92:3c:08:d4:16:da:09:50:4d:
3b:c9:52:d6:31:61:97:a3:1c:a2:d6:57:39:56:50:
24:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:62:FF:73:E4:52:4B:BE:34:5D:A5:70:94:EE:D5:1E:86:E7:B9:B3
X509v3 Authority Key Identifier:
keyid:FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/x2L_c-RSS740XaVwlO7VHobnubM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.106.40.0/21
192.145.120.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:21:d6:e7:db:f7:a4:c6:d2:3a:5d:f7:89:aa:b0:a3:d8:cf:
21:36:34:e8:7a:8a:92:56:a5:e5:5f:50:9c:14:56:94:9e:7a:
28:b7:a5:90:9e:04:46:3f:67:cb:2c:7d:7c:33:70:ae:d1:be:
96:50:e1:d9:e1:12:3b:4b:31:05:7b:ba:f7:64:e5:58:40:13:
56:f0:fe:21:d7:60:e8:0a:e8:17:cb:14:7d:17:a0:c7:01:1d:
26:b3:e5:76:16:e2:67:33:a8:db:5f:1c:b5:36:7b:a1:16:42:
0a:09:b4:02:b3:d3:e2:2f:b4:cd:05:19:39:50:5b:1d:8b:e3:
2b:58:02:bb:aa:ad:1f:f0:58:3f:36:57:79:e7:19:73:4f:6b:
6c:94:16:17:0c:0a:f7:c1:25:29:6f:92:50:47:c3:c7:c1:c7:
64:0e:0c:fe:b8:13:b1:c5:e9:cf:e5:39:56:89:39:a8:c3:32:
39:a7:ef:8e:ba:18:8b:c1:ae:61:e3:75:3d:b6:7b:98:ad:3d:
e4:46:9c:7b:1d:58:d6:d4:58:2e:b8:3f:d0:20:6d:71:13:9e:
4b:d8:f1:9b:96:8a:2f:28:c3:c6:08:c2:76:24:e4:72:fa:33:
9e:18:eb:53:ef:46:b6:08:c1:80:66:9f:20:fc:4a:ae:06:e5:
23:4c:f8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:10 2025 by rpki-client on console.sobornost.net