Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/Od-Up9G1FWem-yoSr_pXW5rnVIA.roa
File: Od-Up9G1FWem-yoSr_pXW5rnVIA.roa (raw, json)
Hash identifier: vWn4KDX8+1TqyTBBcDwsTTYdGzuVvyYM5vL1dIvw2nw=
Subject key identifier: 39:DF:94:A7:D1:B5:15:67:A6:FB:2A:12:AF:FA:57:5B:9A:E7:54:80
Certificate issuer: /CN=9a92d30708b9d4e8c7c28c97f8037c8027144c47
Certificate serial: 0194228E4341071FACFB06E4DCA2AA495DDB
Authority key identifier: 9A:92:D3:07:08:B9:D4:E8:C7:C2:8C:97:F8:03:7C:80:27:14:4C:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/Od-Up9G1FWem-yoSr_pXW5rnVIA.roa
Signing time: Wed 01 Jan 2025 15:48:56 +0000
ROA not before: Wed 01 Jan 2025 15:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29170
IP address blocks: 46.19.224.0/21 maxlen: 24
46.19.224.0/24 maxlen: 24
46.19.225.0/24 maxlen: 24
46.19.226.0/24 maxlen: 24
46.19.227.0/24 maxlen: 24
46.19.228.0/24 maxlen: 24
46.19.229.0/24 maxlen: 24
46.19.230.0/24 maxlen: 24
82.114.64.0/19 maxlen: 19
82.114.64.0/24 maxlen: 24
82.114.65.0/24 maxlen: 24
82.114.66.0/24 maxlen: 24
82.114.67.0/24 maxlen: 24
82.114.68.0/24 maxlen: 24
82.114.69.0/24 maxlen: 24
82.114.70.0/24 maxlen: 24
82.114.71.0/24 maxlen: 24
82.114.72.0/24 maxlen: 24
82.114.73.0/24 maxlen: 24
82.114.74.0/24 maxlen: 24
82.114.75.0/24 maxlen: 24
82.114.76.0/24 maxlen: 24
82.114.77.0/24 maxlen: 24
82.114.78.0/24 maxlen: 24
82.114.79.0/24 maxlen: 24
82.114.80.0/24 maxlen: 24
82.114.81.0/24 maxlen: 24
82.114.82.0/24 maxlen: 24
82.114.83.0/24 maxlen: 24
82.114.84.0/24 maxlen: 24
82.114.85.0/24 maxlen: 24
82.114.86.0/24 maxlen: 24
82.114.87.0/24 maxlen: 24
82.114.88.0/24 maxlen: 24
82.114.89.0/24 maxlen: 24
82.114.90.0/24 maxlen: 24
82.114.91.0/24 maxlen: 24
82.114.92.0/24 maxlen: 24
82.114.93.0/24 maxlen: 24
82.114.94.0/24 maxlen: 24
82.114.95.0/24 maxlen: 24
178.132.216.0/21 maxlen: 21
178.132.216.0/24 maxlen: 24
178.132.217.0/24 maxlen: 24
178.132.218.0/24 maxlen: 24
178.132.219.0/24 maxlen: 24
178.132.220.0/24 maxlen: 24
178.132.221.0/24 maxlen: 24
178.132.222.0/24 maxlen: 24
178.132.223.0/24 maxlen: 24
185.67.176.0/22 maxlen: 22
185.67.176.0/24 maxlen: 24
185.67.177.0/24 maxlen: 24
185.67.178.0/24 maxlen: 24
185.67.179.0/24 maxlen: 24
185.190.132.0/22 maxlen: 22
185.190.132.0/24 maxlen: 24
185.190.133.0/24 maxlen: 24
185.190.134.0/24 maxlen: 24
185.190.135.0/24 maxlen: 24
2a04:3080::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:43:41:07:1f:ac:fb:06:e4:dc:a2:aa:49:5d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a92d30708b9d4e8c7c28c97f8037c8027144c47
Validity
Not Before: Jan 1 15:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39df94a7d1b51567a6fb2a12affa575b9ae75480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:bb:39:95:0e:87:a4:4d:0a:aa:c0:65:51:a2:
99:42:e6:f9:12:21:5d:8f:7e:e4:18:42:54:65:08:
28:0c:8d:7e:70:37:1d:ef:5d:f4:f7:ed:40:73:bc:
5f:9a:45:1b:58:96:79:e1:1a:b6:e4:46:a7:5d:d3:
cf:a9:dc:62:17:03:8f:89:74:1f:e8:bc:f6:da:a7:
88:1b:30:58:69:ee:8a:0d:06:ff:12:61:65:7a:cc:
50:a2:8d:d2:bf:30:fc:c2:a7:04:4c:80:ba:cc:b8:
4d:ba:12:cd:14:bd:2e:c6:a1:29:9f:8b:f6:8a:e1:
3a:aa:96:53:10:7d:a3:10:86:0e:d6:97:09:0d:99:
a0:5a:cf:0c:01:f0:52:a7:60:b7:3a:d9:ba:11:65:
f9:2a:c5:48:d4:2f:29:39:5d:43:da:53:05:7f:2a:
db:59:0c:e6:1e:ca:d5:54:0f:d3:b8:80:b0:c0:de:
35:31:c5:c1:de:dc:23:cb:cf:0a:e3:34:9b:4c:7d:
75:70:a1:67:1c:ce:89:c9:d5:8f:83:85:e1:f7:f4:
ee:8e:25:cf:d9:4f:dd:2b:e4:43:fc:08:62:f1:af:
e5:29:94:f3:c4:24:5f:d4:1d:8a:d1:f9:8f:b5:86:
a1:a1:a0:9c:6d:41:95:a5:56:b6:9c:fe:67:95:ea:
a0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DF:94:A7:D1:B5:15:67:A6:FB:2A:12:AF:FA:57:5B:9A:E7:54:80
X509v3 Authority Key Identifier:
keyid:9A:92:D3:07:08:B9:D4:E8:C7:C2:8C:97:F8:03:7C:80:27:14:4C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/Od-Up9G1FWem-yoSr_pXW5rnVIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.224.0/21
82.114.64.0/19
178.132.216.0/21
185.67.176.0/22
185.190.132.0/22
IPv6:
2a04:3080::/29
Signature Algorithm: sha256WithRSAEncryption
86:53:9f:6f:42:de:a0:46:b8:f2:dd:d5:f0:3f:74:76:2f:92:
e1:51:30:16:9c:7b:e9:84:0a:7e:72:e9:81:f3:20:0b:d5:00:
d7:ce:0d:ec:77:07:d9:69:48:4a:88:a1:fb:93:f9:43:a0:9a:
be:27:17:e1:ae:45:bc:72:83:ee:2a:8b:05:f4:8f:df:98:34:
c1:12:f8:ad:81:b9:a0:ec:0b:9b:d0:eb:e4:c4:22:25:8a:75:
5a:99:ad:24:5b:3f:51:4b:e9:c9:5e:8b:81:56:1a:5e:f0:57:
2f:3b:08:52:47:5f:fc:b2:1b:45:09:bb:fb:de:af:5c:1c:75:
3c:ca:0d:35:a5:a7:7a:44:a7:52:1b:f9:d6:55:c1:31:a3:a1:
30:ed:e7:ee:84:f4:b1:bb:2a:33:2d:2a:3a:ac:8d:fb:f2:a6:
b9:b9:6f:bd:65:40:8b:df:43:74:a1:04:3d:c6:20:c2:a1:64:
5a:8d:2e:6d:5d:a8:d2:30:50:fd:59:21:02:e0:8f:7e:34:f0:
1c:70:fc:36:67:0b:51:92:c8:46:47:f8:7a:98:38:58:05:f6:
de:c2:f9:15:b9:2a:b3:39:af:c1:89:ac:c0:c7:23:c8:7e:5a:
16:5b:0f:c3:ca:de:1c:7c:9c:34:f9:1c:40:24:79:36:6f:25:
5d:ec:e4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:11 2025 by rpki-client on console.sobornost.net