Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/muLWmt6ZMacxUDBOEpDcdZVybqE.roa
File: muLWmt6ZMacxUDBOEpDcdZVybqE.roa (raw, json)
Hash identifier: iIOnhccJGVHF6XublOYDVi+aYn8G2xGe4M5LSF1btvo=
Subject key identifier: 9A:E2:D6:9A:DE:99:31:A7:31:50:30:4E:12:90:DC:75:95:72:6E:A1
Certificate issuer: /CN=579ade9feaedc406df5e11bcef0393cd5e9fd0dd
Certificate serial: 0195AF6867956F7ADE6EFB5E32D11725172C
Authority key identifier: 57:9A:DE:9F:EA:ED:C4:06:DF:5E:11:BC:EF:03:93:CD:5E:9F:D0:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/muLWmt6ZMacxUDBOEpDcdZVybqE.roa
Signing time: Wed 19 Mar 2025 17:16:49 +0000
ROA not before: Wed 19 Mar 2025 17:16:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49121
IP address blocks: 5.57.209.0/24 maxlen: 24
37.221.68.0/24 maxlen: 24
37.221.69.0/24 maxlen: 24
37.221.70.0/24 maxlen: 24
37.221.71.0/24 maxlen: 24
45.87.117.0/24 maxlen: 24
45.87.118.0/24 maxlen: 24
45.87.119.0/24 maxlen: 24
185.186.0.0/24 maxlen: 24
185.186.1.0/24 maxlen: 24
185.232.166.0/24 maxlen: 24
194.61.10.0/23 maxlen: 23
194.147.74.0/23 maxlen: 23
194.147.74.0/24 maxlen: 24
2a09:e200::/48 maxlen: 48
2a09:e200:e200::/48 maxlen: 48
2a09:e206:c1::/48 maxlen: 48
2a09:e207:810::/48 maxlen: 48
2a09:e207:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:af:68:67:95:6f:7a:de:6e:fb:5e:32:d1:17:25:17:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=579ade9feaedc406df5e11bcef0393cd5e9fd0dd
Validity
Not Before: Mar 19 17:16:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ae2d69ade9931a73150304e1290dc7595726ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b5:ce:9f:37:a6:ad:1d:40:8a:34:a2:20:6b:
99:08:40:7c:ec:fd:01:ab:bf:9b:73:c8:56:e7:c7:
3f:50:65:ad:a3:90:b4:72:a2:bd:b5:6e:16:ca:7a:
cc:f0:61:e6:08:ed:bb:3d:ad:a6:76:be:45:6f:47:
e1:da:cf:e0:70:40:91:22:43:6b:05:0b:1f:17:55:
4a:c6:79:3a:d5:be:b6:6b:07:e6:a5:57:a8:56:c3:
34:4b:0d:36:0d:5e:cc:c9:f9:30:0f:08:18:2a:3f:
cd:bb:bf:ce:ee:67:8e:4d:04:4a:c5:98:63:23:18:
37:c3:4e:47:d0:29:23:2c:9a:45:33:8d:0f:3c:b1:
36:48:aa:28:b6:5a:0d:a7:76:af:ce:e4:22:2a:64:
ba:dd:77:61:3f:e0:a0:11:de:a8:97:b0:52:4f:10:
68:a0:c8:46:be:d0:d1:96:6b:4b:4e:0b:df:dc:0b:
91:d4:26:65:97:54:97:9e:ce:05:2d:25:55:d0:7d:
c6:fc:35:35:f2:d5:37:bc:ae:0f:73:0a:cb:ba:5a:
2a:03:40:88:13:48:57:fc:79:51:32:37:e6:fa:8a:
8a:7e:3d:cf:84:f1:6b:ab:50:95:56:8d:39:96:36:
a7:f4:3a:8a:ea:dc:aa:54:bc:57:da:6e:da:9c:54:
27:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E2:D6:9A:DE:99:31:A7:31:50:30:4E:12:90:DC:75:95:72:6E:A1
X509v3 Authority Key Identifier:
keyid:57:9A:DE:9F:EA:ED:C4:06:DF:5E:11:BC:EF:03:93:CD:5E:9F:D0:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/muLWmt6ZMacxUDBOEpDcdZVybqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.209.0/24
37.221.68.0/22
45.87.117.0-45.87.119.255
185.186.0.0/23
185.232.166.0/24
194.61.10.0/23
194.147.74.0/23
IPv6:
2a09:e200::/48
2a09:e200:e200::/48
2a09:e206:c1::/48
2a09:e207:810::/48
2a09:e207:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
70:bb:05:55:b0:d5:70:1d:c5:55:0e:ae:9b:3b:dd:61:46:f8:
18:c7:9d:ef:e3:b5:9c:60:d3:29:d6:85:ea:77:d3:1d:bc:04:
01:75:19:48:b1:b2:e1:fb:0c:7f:15:72:0f:73:3b:f3:1b:04:
1c:4b:20:c9:35:2b:68:45:a5:e5:4c:d6:e1:56:7f:44:5f:93:
1a:ed:c4:e2:be:25:0d:70:aa:e7:ac:52:36:e7:46:2d:db:c9:
82:0c:bf:25:11:f6:6e:b7:39:da:c8:38:07:ec:75:05:71:f8:
18:b9:f7:13:f2:21:b4:8b:dd:4e:44:bc:49:64:9b:de:cc:f9:
51:aa:2c:3a:58:6f:4f:18:37:b1:a4:1a:d9:e9:84:47:12:b9:
32:bf:3d:ad:8f:e3:e5:41:30:e7:40:cc:32:21:08:7f:2f:96:
0a:c3:d6:45:e4:cc:be:de:b8:24:74:5e:d1:cb:99:7a:be:c7:
fe:13:78:f0:05:4e:68:c8:60:21:f5:59:05:bc:10:11:12:f8:
bb:47:bf:d2:ee:95:fe:b1:95:5d:4b:38:8c:4a:39:1c:64:c8:
47:65:aa:bb:7b:e4:c7:3d:c8:1d:09:1c:a7:e7:a1:af:dd:d2:
66:15:2f:c1:ed:6d:96:42:17:2e:85:ae:9b:15:fd:cd:e0:a0:
c2:26:bc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:29 2025 by rpki-client on console.sobornost.net