Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/Aw8VCCK2oT1v-RRBTzm1Icy2wl0.roa
File: Aw8VCCK2oT1v-RRBTzm1Icy2wl0.roa (raw, json)
Hash identifier: XRXIYDE3PMP8HGRW9qlh0nIOPSOFPTF1lsWNuSlfpmY=
Subject key identifier: 03:0F:15:08:22:B6:A1:3D:6F:F9:14:41:4F:39:B5:21:CC:B6:C2:5D
Certificate issuer: /CN=942f565ed16d8c337a8c8ab3cdc572ef1150f5a9
Certificate serial: 019421B21E44DEAC849902CEC1CCB0651D2B
Authority key identifier: 94:2F:56:5E:D1:6D:8C:33:7A:8C:8A:B3:CD:C5:72:EF:11:50:F5:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/Aw8VCCK2oT1v-RRBTzm1Icy2wl0.roa
Signing time: Wed 01 Jan 2025 11:48:28 +0000
ROA not before: Wed 01 Jan 2025 11:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47332
IP address blocks: 37.148.240.0/24 maxlen: 24
37.148.241.0/24 maxlen: 24
93.191.40.0/24 maxlen: 24
93.191.41.0/24 maxlen: 24
93.191.42.0/24 maxlen: 24
93.191.43.0/24 maxlen: 24
93.191.44.0/24 maxlen: 24
93.191.45.0/24 maxlen: 24
93.191.46.0/24 maxlen: 24
93.191.47.0/24 maxlen: 24
185.153.244.0/24 maxlen: 24
195.13.32.0/24 maxlen: 24
195.13.33.0/24 maxlen: 24
195.13.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:1e:44:de:ac:84:99:02:ce:c1:cc:b0:65:1d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942f565ed16d8c337a8c8ab3cdc572ef1150f5a9
Validity
Not Before: Jan 1 11:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=030f150822b6a13d6ff914414f39b521ccb6c25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3b:a3:23:1f:3f:67:9c:7f:f0:74:e7:ac:24:
00:d1:58:52:a9:28:a9:78:28:e2:52:79:5f:0b:4d:
ea:98:7e:e4:cf:94:90:e0:cf:c2:89:90:81:7a:71:
2a:da:51:bd:c2:ba:6a:67:9b:a9:ac:51:c7:70:f9:
0c:21:fe:ba:bb:e1:ff:3b:55:05:17:46:b7:79:a8:
9f:15:53:9e:3c:49:b9:02:31:b4:d6:e0:73:6b:a3:
91:24:12:8c:b9:c7:b6:d5:ef:31:c0:4d:d7:07:59:
af:2b:60:90:54:e7:91:de:88:da:35:6f:33:52:61:
26:b1:52:d7:e2:2a:52:fe:b8:57:70:36:1f:3c:00:
1c:9c:0e:11:59:4d:c9:a3:04:41:9b:c3:08:f7:94:
54:93:b2:7a:a5:72:a1:ad:cc:56:67:90:e0:44:15:
c7:5d:d8:cd:8b:9d:3d:fd:82:fb:3d:f2:36:83:83:
76:c7:1a:8b:a6:8a:d1:86:6f:95:4f:e1:f8:04:51:
e8:60:15:30:6c:ef:2b:ad:56:79:19:d6:59:6b:fa:
28:43:ce:6b:ba:5b:0f:a6:af:9a:e3:2c:4b:6c:e3:
63:af:e9:31:61:44:4a:7c:c7:b6:2d:49:30:2f:a5:
5d:46:ff:47:94:d5:5d:ab:20:b6:4f:bc:99:8f:d4:
1d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0F:15:08:22:B6:A1:3D:6F:F9:14:41:4F:39:B5:21:CC:B6:C2:5D
X509v3 Authority Key Identifier:
keyid:94:2F:56:5E:D1:6D:8C:33:7A:8C:8A:B3:CD:C5:72:EF:11:50:F5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/Aw8VCCK2oT1v-RRBTzm1Icy2wl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.240.0/23
93.191.40.0/21
185.153.244.0/24
195.13.32.0-195.13.34.255
Signature Algorithm: sha256WithRSAEncryption
47:8a:0b:45:2a:2c:d6:6d:99:62:0c:c5:f3:a2:34:51:55:db:
05:34:b6:b9:e2:43:96:97:59:8b:82:ee:fa:1e:ba:47:59:ae:
d8:f0:7a:58:83:1f:b3:d8:3c:c1:26:e7:2f:30:65:75:bd:e8:
e2:db:18:0a:e1:3d:f1:6d:84:ca:ed:97:19:4c:00:b1:17:dc:
3b:f1:e8:22:dd:d9:89:c3:2b:55:2d:c9:6e:34:95:24:a8:0e:
9e:9f:1a:18:a3:bf:d2:eb:ce:c3:82:1e:a3:74:85:d0:55:88:
e3:a2:6f:ca:51:0d:a0:18:fa:e7:90:05:13:b8:24:9b:5f:07:
11:22:24:b5:7a:58:05:22:ae:c3:35:ea:9e:29:42:0d:7d:b6:
0d:e8:25:83:22:29:13:2c:7d:fc:b7:96:f3:02:af:70:24:6c:
b7:c2:a2:bb:e0:15:56:86:ff:37:83:9d:9d:8a:df:12:7c:ce:
34:70:a6:06:aa:75:f3:25:5c:48:28:6f:09:93:a8:10:5f:f0:
4b:0e:de:06:81:1b:36:a4:b8:41:30:cf:35:24:6a:23:94:56:
44:18:f2:6d:8e:4e:c9:24:a3:72:86:e5:b1:b1:a6:56:d8:00:
89:c4:6b:2c:db:b5:15:cf:3c:5d:a7:9d:b3:3a:61:59:a7:2c:
a5:35:46:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:32 2025 by rpki-client on console.sobornost.net