Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/X0NMFv3xuHRSXYMGKUXV8IKykec.roa
File: X0NMFv3xuHRSXYMGKUXV8IKykec.roa (raw, json)
Hash identifier: OjOw3rcSA/T5JCD0NPBFtVQyCjbWRUE+EyaG3m+jzio=
Subject key identifier: 5F:43:4C:16:FD:F1:B8:74:52:5D:83:06:29:45:D5:F0:82:B2:91:E7
Certificate issuer: /CN=0d814a5f08fb47711d7160b027f996dfb612f045
Certificate serial: 019424449DE39B9E7B22F9D3AEFE7D745C08
Authority key identifier: 0D:81:4A:5F:08:FB:47:71:1D:71:60:B0:27:F9:96:DF:B6:12:F0:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/X0NMFv3xuHRSXYMGKUXV8IKykec.roa
Signing time: Wed 01 Jan 2025 23:47:44 +0000
ROA not before: Wed 01 Jan 2025 23:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35132
IP address blocks: 37.32.48.0/21 maxlen: 21
62.50.160.0/19 maxlen: 19
89.20.224.0/19 maxlen: 19
93.89.32.0/20 maxlen: 20
95.111.160.0/19 maxlen: 19
109.122.48.0/21 maxlen: 21
109.235.100.0/22 maxlen: 22
178.249.120.0/21 maxlen: 21
185.141.156.0/22 maxlen: 22
185.186.132.0/22 maxlen: 22
185.197.220.0/22 maxlen: 22
185.214.16.0/22 maxlen: 22
185.243.176.0/22 maxlen: 22
188.119.80.0/22 maxlen: 22
217.149.112.0/20 maxlen: 20
2a02:1660::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:9d:e3:9b:9e:7b:22:f9:d3:ae:fe:7d:74:5c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d814a5f08fb47711d7160b027f996dfb612f045
Validity
Not Before: Jan 1 23:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f434c16fdf1b874525d83062945d5f082b291e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:72:b4:57:ec:1b:25:fe:b0:8d:65:aa:bb:b6:
cf:b1:cc:25:df:c3:ab:eb:fe:98:57:f1:f5:44:c8:
67:e6:13:8d:f5:82:c1:f0:c5:c1:d5:63:69:9d:45:
fa:b5:73:9d:e8:ee:d8:7a:9b:ad:92:8a:c2:9b:54:
6f:b9:e4:46:a8:01:1f:f4:cb:f6:c9:45:b9:06:b9:
4c:87:1e:fa:92:46:f9:48:63:f8:43:88:df:6d:41:
0e:c6:04:5f:7d:95:7a:a8:7f:84:e5:02:cf:c9:34:
32:94:9b:f4:6c:6b:0a:8f:e3:96:60:5f:af:07:81:
cc:a2:de:98:91:d2:c2:a3:46:c6:c4:07:bf:22:ed:
67:d2:49:49:43:2e:1c:f8:a0:16:72:d4:b0:75:3f:
5b:f6:84:bc:40:b6:f2:a0:11:8a:b0:af:5d:ef:3b:
75:98:a2:c1:a1:99:c0:c0:9b:04:14:49:64:80:4d:
c1:3a:78:df:58:a1:f6:a3:54:fe:ac:ac:0e:83:9d:
b3:b6:38:34:98:35:25:82:28:01:19:89:bc:2e:6c:
2a:51:1e:46:c5:bd:eb:66:75:78:43:f5:66:74:21:
20:5e:9b:0c:55:9f:2e:97:a6:da:86:e6:1a:09:31:
35:4a:d5:8e:61:f9:0e:36:ec:38:d5:94:e1:c4:5a:
aa:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:43:4C:16:FD:F1:B8:74:52:5D:83:06:29:45:D5:F0:82:B2:91:E7
X509v3 Authority Key Identifier:
keyid:0D:81:4A:5F:08:FB:47:71:1D:71:60:B0:27:F9:96:DF:B6:12:F0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/X0NMFv3xuHRSXYMGKUXV8IKykec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.48.0/21
62.50.160.0/19
89.20.224.0/19
93.89.32.0/20
95.111.160.0/19
109.122.48.0/21
109.235.100.0/22
178.249.120.0/21
185.141.156.0/22
185.186.132.0/22
185.197.220.0/22
185.214.16.0/22
185.243.176.0/22
188.119.80.0/22
217.149.112.0/20
IPv6:
2a02:1660::/32
Signature Algorithm: sha256WithRSAEncryption
4e:a1:fc:05:ed:93:7a:2d:ae:72:b6:f8:bb:68:de:ad:e1:53:
1d:e8:a6:af:5a:43:56:37:d9:30:49:4d:4f:f8:bc:ec:a5:58:
a3:95:63:53:66:1b:ad:ac:7b:7b:d1:03:e0:6e:7f:36:e2:e5:
1b:af:e9:54:b3:af:c7:ec:22:48:80:6d:bd:f9:57:6a:fb:15:
d2:34:48:72:a7:78:3d:18:f6:41:61:e9:a8:fb:f5:8d:3b:b0:
73:51:a8:2a:a7:bc:63:4d:a2:04:c5:02:5f:6e:e7:c9:1f:18:
37:a1:4f:98:1b:a4:95:d1:0c:00:25:7b:e9:67:8d:a3:e6:8b:
3c:40:63:c3:3d:50:a2:ae:af:03:99:5c:8d:51:84:29:4d:da:
8a:8d:b6:8d:ad:ba:f7:7d:8f:6c:57:49:dc:30:39:b1:75:df:
6f:75:f6:88:f3:01:d8:1d:b6:22:68:62:f2:7c:2a:40:64:a1:
17:95:71:8a:fd:00:cd:d1:a0:d2:3e:9d:c4:8a:e3:9c:51:c4:
c9:13:ac:7a:ec:eb:85:40:57:8d:82:85:4c:c6:77:99:a7:42:
1c:3e:b9:b5:cf:f8:49:1f:92:76:ef:8a:1a:55:c7:09:06:d7:
ad:9b:4a:57:96:ec:0c:2d:9e:8f:49:d2:18:32:01:93:36:b6:
ee:82:8e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:25 2025 by rpki-client on console.sobornost.net