Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/bd7a93-c9e4-42b6-a5c6-d35c54f14dbe/1/AyUVfrIdIkhFNr0JyANib7d_EC8.roa
File: AyUVfrIdIkhFNr0JyANib7d_EC8.roa (raw, json)
Hash identifier: Sbf5LjfNbbHwGZqo0cjAdmFrlERiyLfV5CtoeZFIk1E=
Subject key identifier: 03:25:15:7E:B2:1D:22:48:45:36:BD:09:C8:03:62:6F:B7:7F:10:2F
Certificate issuer: /CN=26bbed788e29f8406b2bdc8dddeeb7d4ec4b833e
Certificate serial: 019097FFFCB22F3218651E7CAD91526672D8
Authority key identifier: 26:BB:ED:78:8E:29:F8:40:6B:2B:DC:8D:DD:EE:B7:D4:EC:4B:83:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JrvteI4p-EBrK9yN3e631OxLgz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/bd7a93-c9e4-42b6-a5c6-d35c54f14dbe/1/AyUVfrIdIkhFNr0JyANib7d_EC8.roa
Signing time: Tue 09 Jul 2024 14:57:34 +0000
ROA not before: Tue 09 Jul 2024 14:57:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43205
IP address blocks: 37.143.192.0/18 maxlen: 18
46.40.64.0/18 maxlen: 18
46.40.75.0/24 maxlen: 24
46.47.64.0/18 maxlen: 18
46.237.64.0/18 maxlen: 18
78.128.2.0/23 maxlen: 23
78.128.10.0/23 maxlen: 23
78.128.12.0/22 maxlen: 22
78.128.16.0/20 maxlen: 20
78.128.36.0/22 maxlen: 22
78.128.40.0/23 maxlen: 23
78.128.52.0/22 maxlen: 22
78.128.56.0/22 maxlen: 22
78.128.74.0/23 maxlen: 23
78.128.82.0/23 maxlen: 23
78.128.84.0/22 maxlen: 22
78.128.88.0/22 maxlen: 22
78.128.90.0/23 maxlen: 24
78.128.96.0/23 maxlen: 23
78.128.100.0/22 maxlen: 22
78.128.104.0/22 maxlen: 22
78.128.115.0/24 maxlen: 24
78.128.116.0/23 maxlen: 23
78.128.120.0/22 maxlen: 22
78.142.9.0/24 maxlen: 24
78.142.10.0/23 maxlen: 23
78.142.12.0/22 maxlen: 22
78.142.30.0/23 maxlen: 23
91.139.128.0/17 maxlen: 17
91.148.149.0/24 maxlen: 24
91.148.150.0/23 maxlen: 23
91.148.152.0/21 maxlen: 21
91.148.162.0/23 maxlen: 23
91.148.164.0/23 maxlen: 23
91.148.166.0/24 maxlen: 24
91.148.169.0/24 maxlen: 24
91.148.170.0/23 maxlen: 23
91.148.172.0/22 maxlen: 22
91.148.176.0/21 maxlen: 21
91.148.186.0/23 maxlen: 23
93.155.128.0/17 maxlen: 17
109.121.192.0/18 maxlen: 18
158.58.192.0/18 maxlen: 18
178.169.128.0/17 maxlen: 17
185.4.80.0/22 maxlen: 22
188.254.128.0/17 maxlen: 17
193.24.240.0/22 maxlen: 22
193.200.14.0/23 maxlen: 23
194.145.160.0/22 maxlen: 22
212.43.32.0/19 maxlen: 19
212.75.0.0/19 maxlen: 19
213.214.64.0/19 maxlen: 19
2a02:6800::/32 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:97:ff:fc:b2:2f:32:18:65:1e:7c:ad:91:52:66:72:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bbed788e29f8406b2bdc8dddeeb7d4ec4b833e
Validity
Not Before: Jul 9 14:57:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0325157eb21d22484536bd09c803626fb77f102f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c4:bc:69:2d:16:e5:b1:55:13:5e:64:c6:12:
ad:e6:3d:08:be:ed:d8:b8:3c:fa:4e:a0:54:79:f5:
cd:18:63:b3:2f:02:4f:e0:30:b9:1c:5a:16:fd:16:
53:fc:f6:fc:23:f9:03:b0:8a:d9:a7:3e:08:25:66:
4c:2b:53:6c:b6:49:9c:09:b9:fa:fd:e2:fb:0d:f3:
19:5f:42:e3:46:32:0c:60:70:07:96:92:c6:a0:c7:
cb:4b:af:27:9d:96:23:dc:ba:bf:db:8b:2f:74:3c:
64:13:41:cc:f9:b7:cf:60:88:b0:3f:ee:e3:ce:5d:
38:c9:26:29:9d:1e:28:ea:7c:4c:36:e0:67:0c:18:
5b:31:b3:ce:ec:51:14:3a:88:49:a5:95:59:3b:4d:
57:0b:fd:b4:74:a9:26:b4:eb:6b:b1:98:5d:93:ea:
9b:9b:27:04:59:1d:32:df:ee:5f:17:ae:82:6b:7a:
53:f8:5c:f4:eb:a8:03:41:c6:6e:67:f5:1d:74:ef:
bb:75:ee:9d:e4:04:9f:78:0e:d0:b2:94:a1:ce:31:
69:4f:40:6f:70:8b:bf:56:c6:0a:ec:0c:d2:84:05:
55:08:ab:f3:8b:eb:53:98:b6:4e:07:0b:49:c1:40:
1c:f0:28:2a:93:c6:14:27:4c:12:2f:8e:0c:71:3c:
fb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:25:15:7E:B2:1D:22:48:45:36:BD:09:C8:03:62:6F:B7:7F:10:2F
X509v3 Authority Key Identifier:
keyid:26:BB:ED:78:8E:29:F8:40:6B:2B:DC:8D:DD:EE:B7:D4:EC:4B:83:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JrvteI4p-EBrK9yN3e631OxLgz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bd7a93-c9e4-42b6-a5c6-d35c54f14dbe/1/AyUVfrIdIkhFNr0JyANib7d_EC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bd7a93-c9e4-42b6-a5c6-d35c54f14dbe/1/JrvteI4p-EBrK9yN3e631OxLgz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.192.0/18
46.40.64.0/18
46.47.64.0/18
46.237.64.0/18
78.128.2.0/23
78.128.10.0-78.128.31.255
78.128.36.0-78.128.41.255
78.128.52.0-78.128.59.255
78.128.74.0/23
78.128.82.0-78.128.91.255
78.128.96.0/23
78.128.100.0-78.128.107.255
78.128.115.0-78.128.117.255
78.128.120.0/22
78.142.9.0-78.142.15.255
78.142.30.0/23
91.139.128.0/17
91.148.149.0-91.148.159.255
91.148.162.0-91.148.166.255
91.148.169.0-91.148.183.255
91.148.186.0/23
93.155.128.0/17
109.121.192.0/18
158.58.192.0/18
178.169.128.0/17
185.4.80.0/22
188.254.128.0/17
193.24.240.0/22
193.200.14.0/23
194.145.160.0/22
212.43.32.0/19
212.75.0.0/19
213.214.64.0/19
IPv6:
2a02:6800::/32
Signature Algorithm: sha256WithRSAEncryption
a4:c1:31:24:a5:8e:47:13:2c:0b:03:13:8b:0d:b2:d6:ea:c2:
5d:2d:20:da:03:80:8b:81:60:7f:9c:2a:1c:2b:f9:83:81:2c:
5c:9b:a9:5f:3a:11:35:c0:83:61:a3:47:cd:7a:37:90:d8:6d:
8a:03:0f:dc:56:bf:e4:ee:44:bb:f6:95:6b:06:2c:80:9f:94:
21:d8:e5:8c:50:d5:c0:8f:f5:a4:53:c0:6a:cd:ea:d6:f4:c4:
fb:0d:65:2a:77:12:cf:8d:f2:6e:c2:28:0b:82:58:2c:eb:0e:
d1:1c:7a:82:49:b7:07:57:57:2f:d2:47:fe:1f:f6:de:4c:8d:
f6:bc:c7:ac:c0:c3:26:b7:7b:38:4f:be:e9:62:e5:c4:40:da:
56:14:85:e8:54:02:b9:15:33:6a:d7:be:97:33:a5:2e:f8:65:
3d:58:7a:0e:2e:b4:3e:d1:07:18:b5:11:01:61:46:04:9e:10:
ae:83:2b:b4:66:c5:4e:36:1a:af:c4:72:4b:42:e7:ca:0d:59:
dd:a3:63:b3:1f:2e:5f:d0:a2:d7:69:c1:7b:16:fc:a1:b0:af:
29:18:a3:f4:76:9e:c7:fa:b8:2e:98:fa:01:f5:5c:04:54:ba:
53:ab:dc:72:e1:87:e9:d3:1e:16:68:d4:bf:c4:cd:f7:05:a2:
50:23:9b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 19:11:15 2024 by rpki-client on console.sobornost.net