Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/19CW3KILFYPXEhHk2Ol76tPUYYc.roa
File: 19CW3KILFYPXEhHk2Ol76tPUYYc.roa (raw, json)
Hash identifier: vdEeJmbxLIeIAD2w3zH+n6I7kJJZC/K9fF2eOSXSZV8=
Subject key identifier: D7:D0:96:DC:A2:0B:15:83:D7:12:11:E4:D8:E9:7B:EA:D3:D4:61:87
Certificate issuer: /CN=587ed7e9f98a1f1975ee9fbcb095c3adfa28aec0
Certificate serial: 01942445A0AF08F3E0EEFF6615589D92B2B3
Authority key identifier: 58:7E:D7:E9:F9:8A:1F:19:75:EE:9F:BC:B0:95:C3:AD:FA:28:AE:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WH7X6fmKHxl17p-8sJXDrfoorsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/19CW3KILFYPXEhHk2Ol76tPUYYc.roa
Signing time: Wed 01 Jan 2025 23:48:50 +0000
ROA not before: Wed 01 Jan 2025 23:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198144
IP address blocks: 93.113.102.0/24 maxlen: 24
93.117.65.0/24 maxlen: 24
103.97.206.0/23 maxlen: 23
128.65.152.0/21 maxlen: 21
128.65.152.0/23 maxlen: 23
128.65.154.0/24 maxlen: 24
128.65.155.0/24 maxlen: 24
128.65.156.0/24 maxlen: 24
128.65.157.0/24 maxlen: 24
128.65.158.0/24 maxlen: 24
128.65.159.0/24 maxlen: 24
176.97.228.0/22 maxlen: 22
176.97.228.0/23 maxlen: 23
176.97.230.0/23 maxlen: 23
185.78.212.0/22 maxlen: 22
185.78.212.0/23 maxlen: 23
185.78.214.0/23 maxlen: 23
188.208.111.0/24 maxlen: 24
188.211.239.0/24 maxlen: 24
212.85.236.0/22 maxlen: 22
212.85.236.0/23 maxlen: 23
212.85.238.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:a0:af:08:f3:e0:ee:ff:66:15:58:9d:92:b2:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=587ed7e9f98a1f1975ee9fbcb095c3adfa28aec0
Validity
Not Before: Jan 1 23:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7d096dca20b1583d71211e4d8e97bead3d46187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:14:66:7a:cf:8d:b4:99:af:0c:93:4b:0f:f5:
e3:11:04:ad:0e:de:2e:e0:f4:89:bd:b6:0c:80:41:
11:f1:62:d1:bb:be:f0:16:35:97:cf:94:c9:4b:21:
7f:70:9c:7c:ba:4e:cd:65:53:a4:7d:ec:10:22:28:
1f:5f:dd:45:a7:1d:1d:57:5b:5a:17:62:41:01:9f:
59:e8:13:29:d1:8a:5a:c9:2a:64:01:a7:89:ae:ad:
c6:b7:8c:9e:33:2f:a8:e6:c2:0c:47:be:23:e9:b6:
93:ea:35:71:98:2f:e9:d6:c2:4a:0d:63:75:88:4d:
df:ec:dd:2a:6e:45:e0:db:4a:91:e9:d1:b0:b1:0e:
82:00:4d:5d:37:04:3e:51:6b:e7:75:30:8c:de:5d:
60:35:26:24:08:36:e9:67:4a:88:62:38:8a:38:6e:
e1:d3:ee:0b:94:16:94:04:86:fe:39:ff:b2:3c:a1:
07:d9:c7:31:79:e6:16:fd:2f:12:a0:bf:ff:ef:2e:
43:46:3e:6f:42:3c:27:4f:95:14:03:01:ed:ab:0d:
37:5c:a6:d9:63:e5:df:3d:98:a5:9b:a8:03:45:04:
ce:d9:e2:b1:25:6c:69:d2:9b:39:90:4d:61:a0:5d:
43:ac:41:87:fe:81:1e:c0:2e:0e:23:2d:03:f0:e8:
c0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D0:96:DC:A2:0B:15:83:D7:12:11:E4:D8:E9:7B:EA:D3:D4:61:87
X509v3 Authority Key Identifier:
keyid:58:7E:D7:E9:F9:8A:1F:19:75:EE:9F:BC:B0:95:C3:AD:FA:28:AE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH7X6fmKHxl17p-8sJXDrfoorsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/19CW3KILFYPXEhHk2Ol76tPUYYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.102.0/24
93.117.65.0/24
103.97.206.0/23
128.65.152.0/21
176.97.228.0/22
185.78.212.0/22
188.208.111.0/24
188.211.239.0/24
212.85.236.0/22
Signature Algorithm: sha256WithRSAEncryption
e3:a1:71:3e:b7:7a:86:5e:af:b5:ee:64:c7:1d:fe:d2:1a:d9:
c4:eb:17:21:ba:7b:9d:e0:15:92:cd:ff:78:87:0d:e0:6c:21:
d1:97:2f:31:f3:a4:83:94:1d:0c:94:96:17:bc:13:d0:2a:b8:
9f:23:37:91:5a:1e:b0:15:e4:d8:c0:6b:12:bf:35:d9:61:5d:
af:fd:27:c7:db:66:d1:98:74:3e:56:97:40:e8:08:d5:18:2c:
40:38:c8:72:9a:ee:d0:74:d3:3f:4a:e2:24:b0:6b:69:60:d2:
0b:5a:d9:7a:c6:24:ed:99:34:7e:5d:b3:86:cf:cd:27:50:41:
40:28:72:c9:c2:46:cd:c5:f8:63:f4:f0:53:bd:19:4d:13:ff:
94:cb:35:ec:77:0e:96:03:87:78:9b:5d:ab:1e:d5:c8:4b:ec:
f5:28:97:a7:f3:ff:a0:90:9c:16:a5:f4:e3:e8:97:3b:56:9f:
da:92:2b:32:3c:9e:ba:25:2e:30:c3:8b:7e:84:fe:3c:d6:d8:
6e:c8:ae:f2:c8:bb:03:8c:8c:79:f8:9d:41:06:84:17:54:cf:
de:87:c2:ae:aa:8b:9f:f4:69:bf:06:cc:6c:62:1c:5a:64:1a:
cf:e5:b7:e0:a4:a6:ed:01:c9:41:72:45:58:84:52:96:a4:c2:
36:ab:0b:69
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZQkRaCvCPPg7v9mFVidkrKzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4N2VkN2U5Zjk4YTFmMTk3NWVlOWZiY2IwOTVjM2FkZmEy
OGFlYzAwHhcNMjUwMTAxMjM0ODUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkN2QwOTZkY2EyMGIxNTgzZDcxMjExZTRkOGU5N2JlYWQzZDQ2MTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxRmes+NtJmvDJNLD/XjEQStDt4u
4PSJvbYMgEER8WLRu77wFjWXz5TJSyF/cJx8uk7NZVOkfewQIigfX91Fpx0dV1ta
F2JBAZ9Z6BMp0YpaySpkAaeJrq3Gt4yeMy+o5sIMR74j6baT6jVxmC/p1sJKDWN1
iE3f7N0qbkXg20qR6dGwsQ6CAE1dNwQ+UWvndTCM3l1gNSYkCDbpZ0qIYjiKOG7h
0+4LlBaUBIb+Of+yPKEH2ccxeeYW/S8SoL//7y5DRj5vQjwnT5UUAwHtqw03XKbZ
Y+XfPZilm6gDRQTO2eKxJWxp0ps5kE1hoF1DrEGH/oEewC4OIy0D8OjAfwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFNfQltyiCxWD1xIR5Njpe+rT1GGHMB8GA1UdIwQY
MBaAFFh+1+n5ih8Zde6fvLCVw636KK7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0g3WDZmbUtIeGwxN3AtOHNKWERyZm9vcnNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hMDY0MDctYTFmMi00YjQ3LTk2Yzct
MGE5ZTNjYjRkYzEzLzEvMTlDVzNLSUxGWVBYRWhIazJPbDc2dFBVWVljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9hMDY0MDctYTFmMi00YjQ3LTk2YzctMGE5ZTNjYjRkYzEz
LzEvV0g3WDZmbUtIeGwxN3AtOHNKWERyZm9vcnNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAXXFmAwQA
XXVBAwQBZ2HOAwQDgEGYAwQCsGHkAwQCuU7UAwQAvNBvAwQAvNPvAwQC1FXsMA0G
CSqGSIb3DQEBCwUAA4IBAQDjoXE+t3qGXq+17mTHHf7SGtnE6xchunud4BWSzf94
hw3gbCHRly8x86SDlB0MlJYXvBPQKrifIzeRWh6wFeTYwGsSvzXZYV2v/SfH22bR
mHQ+VpdA6AjVGCxAOMhymu7QdNM/SuIksGtpYNILWtl6xiTtmTR+XbOGz80nUEFA
KHLJwkbNxfhj9PBTvRlNE/+UyzXsdw6WA4d4m12rHtXIS+z1KJen8/+gkJwWpfTj
6Jc7Vp/akisyPJ66JS4ww4t+hP481thuyK7yyLsDjIx5+J1BBoQXVM/eh8Kuqouf
9Gm/BsxsYhxaZBrP5bfgpKbtAclBckVYhFKWpMI2qwtp
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:56 2025 by rpki-client on console.sobornost.net