Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/ASbo_wwJIfPfGlI0c5GFJEJBaMk.roa
File: ASbo_wwJIfPfGlI0c5GFJEJBaMk.roa (raw, json)
Hash identifier: sIqxYJoxASVjS7XtjikrV4su2qNO3VCLlElvC6VKQJY=
Subject key identifier: 01:26:E8:FF:0C:09:21:F3:DF:1A:52:34:73:91:85:24:42:41:68:C9
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 0195A35B157330DF072AFCC54128D8C9813C
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/ASbo_wwJIfPfGlI0c5GFJEJBaMk.roa
Signing time: Mon 17 Mar 2025 09:06:50 +0000
ROA not before: Mon 17 Mar 2025 09:06:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204650
IP address blocks: 5.57.36.0/24 maxlen: 24
37.32.42.0/24 maxlen: 24
37.32.44.0/24 maxlen: 24
37.32.45.0/24 maxlen: 24
178.239.156.0/24 maxlen: 24
178.239.159.0/24 maxlen: 24
185.26.34.0/23 maxlen: 24
185.243.49.0/24 maxlen: 24
185.243.50.0/24 maxlen: 24
2a00:7040::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a3:5b:15:73:30:df:07:2a:fc:c5:41:28:d8:c9:81:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Mar 17 09:06:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0126e8ff0c0921f3df1a523473918524424168c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:15:a5:a6:ea:cc:5f:f3:02:b0:95:3a:ed:9b:
29:9c:1e:6d:ea:db:a2:a8:01:93:5a:e3:fd:4e:a1:
d0:d8:3f:5e:6b:d4:c9:91:0a:6b:ce:09:50:92:3a:
36:ee:f0:d6:93:57:97:1e:1a:38:c0:24:48:e6:b5:
0d:0d:f3:a1:07:d5:99:ad:35:23:e2:27:b0:78:fe:
76:45:27:67:fd:0d:1f:21:24:75:1e:9d:c5:84:21:
88:da:68:c4:a3:39:28:60:63:d2:b4:28:9c:48:23:
2e:a7:0d:5b:d0:4b:46:10:12:48:c8:40:1d:2c:72:
66:77:96:5b:7b:02:25:10:fb:2c:5d:57:f4:ff:f7:
2c:1b:0a:2e:0a:3a:c6:67:5f:a3:21:07:c2:95:03:
20:cc:65:56:44:7c:92:2c:1d:d5:17:dd:55:22:17:
1b:15:dd:d9:ec:c4:7e:27:35:a7:60:b3:02:ff:93:
8f:dd:7e:f1:81:b4:cf:e1:93:0b:07:a7:f5:82:15:
4d:74:01:81:00:56:48:50:b1:c8:27:ab:dd:65:ba:
02:cb:14:85:7a:0a:99:65:28:b1:ff:bf:67:72:81:
ad:27:5d:78:b0:a0:1a:e1:e7:b0:c6:25:cd:55:41:
96:a5:07:bd:d4:37:9e:6c:4d:4d:ad:79:b7:32:0b:
5f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:26:E8:FF:0C:09:21:F3:DF:1A:52:34:73:91:85:24:42:41:68:C9
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/ASbo_wwJIfPfGlI0c5GFJEJBaMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.36.0/24
37.32.42.0/24
37.32.44.0/23
178.239.156.0/24
178.239.159.0/24
185.26.34.0/23
185.243.49.0-185.243.50.255
IPv6:
2a00:7040::/32
Signature Algorithm: sha256WithRSAEncryption
98:1c:1c:1a:aa:b4:fd:99:fa:9d:b8:77:54:c7:80:99:4d:42:
03:04:9b:d1:0f:2c:2f:30:a0:15:9d:af:3e:af:76:6a:48:2d:
52:7d:ab:aa:6e:31:14:d0:f2:75:5a:57:cd:2e:66:74:88:c4:
41:d9:f1:f7:e8:1b:d1:9d:4b:73:31:8e:c7:50:ad:1b:18:22:
f7:13:65:69:04:33:56:07:3e:1a:29:f5:5e:a9:d4:26:cd:72:
02:ce:a7:b9:7e:59:ef:73:46:39:36:3e:60:67:06:b9:b3:c7:
1d:8f:e6:84:d6:f0:d8:30:3a:85:e4:cc:a0:b1:3e:4c:46:94:
80:4a:d1:c5:53:d3:b7:98:67:6f:8b:c3:0a:a8:d1:e6:28:a8:
41:cc:89:9e:ba:ba:84:5f:7f:bd:0c:22:19:49:6e:b4:97:41:
9f:e2:2e:74:a8:b2:4e:04:03:f8:35:30:d4:4e:b7:76:79:24:
ae:05:d8:90:bc:35:71:d1:ad:01:85:78:b7:64:88:5f:d6:70:
7a:bb:14:7a:5c:ad:90:3a:ba:0d:1d:e7:27:ec:d0:af:9c:3e:
38:5d:39:fa:7e:0b:ba:ae:45:15:33:64:d7:9a:c4:3a:6a:d9:
24:cf:b5:17:0c:6d:5d:cc:91:87:61:5f:44:7b:73:b3:6a:86:
f1:2d:ea:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:26 2025 by rpki-client on console.sobornost.net