Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/OrkpU5LXbswPLcMQ-jdTVeQggeo.roa
File: OrkpU5LXbswPLcMQ-jdTVeQggeo.roa (raw, json)
Hash identifier: utFHWwrMfYX1wYeHbjq+sWQDA/Qeqiengif6dz1gjKU=
Subject key identifier: 3A:B9:29:53:92:D7:6E:CC:0F:2D:C3:10:FA:37:53:55:E4:20:81:EA
Certificate issuer: /CN=a41d4e978810e9789a76e687a7ddd97526b0d9bc
Certificate serial: 0194236A06B43A8F2FD4D129D722AA8A195B
Authority key identifier: A4:1D:4E:97:88:10:E9:78:9A:76:E6:87:A7:DD:D9:75:26:B0:D9:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/OrkpU5LXbswPLcMQ-jdTVeQggeo.roa
Signing time: Wed 01 Jan 2025 19:48:58 +0000
ROA not before: Wed 01 Jan 2025 19:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44327
IP address blocks: 37.131.224.0/21 maxlen: 21
37.131.224.0/22 maxlen: 22
37.131.226.0/24 maxlen: 24
37.131.227.0/24 maxlen: 24
37.131.228.0/22 maxlen: 22
37.131.231.0/24 maxlen: 24
92.51.64.0/18 maxlen: 18
92.51.64.0/20 maxlen: 20
92.51.64.0/21 maxlen: 21
92.51.64.0/24 maxlen: 24
92.51.65.0/24 maxlen: 24
92.51.66.0/24 maxlen: 24
92.51.69.0/24 maxlen: 24
92.51.72.0/21 maxlen: 21
92.51.75.0/24 maxlen: 24
92.51.80.0/20 maxlen: 20
92.51.80.0/21 maxlen: 21
92.51.80.0/24 maxlen: 24
92.51.82.0/24 maxlen: 24
92.51.86.0/24 maxlen: 24
92.51.87.0/24 maxlen: 24
92.51.88.0/21 maxlen: 21
92.51.92.0/24 maxlen: 24
92.51.96.0/20 maxlen: 20
92.51.96.0/21 maxlen: 21
92.51.99.0/24 maxlen: 24
92.51.104.0/21 maxlen: 21
92.51.112.0/20 maxlen: 20
92.51.112.0/21 maxlen: 21
92.51.112.0/22 maxlen: 22
92.51.112.0/24 maxlen: 24
92.51.113.0/24 maxlen: 24
92.51.116.0/22 maxlen: 22
92.51.120.0/21 maxlen: 21
92.51.120.0/22 maxlen: 22
92.51.121.0/24 maxlen: 24
92.51.124.0/22 maxlen: 22
92.51.126.0/24 maxlen: 24
93.188.8.0/21 maxlen: 21
93.188.8.0/22 maxlen: 22
93.188.8.0/24 maxlen: 24
93.188.11.0/24 maxlen: 24
93.188.12.0/22 maxlen: 22
93.188.14.0/24 maxlen: 24
109.234.112.0/21 maxlen: 21
109.234.112.0/22 maxlen: 22
109.234.112.0/24 maxlen: 24
109.234.116.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:06:b4:3a:8f:2f:d4:d1:29:d7:22:aa:8a:19:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41d4e978810e9789a76e687a7ddd97526b0d9bc
Validity
Not Before: Jan 1 19:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ab9295392d76ecc0f2dc310fa375355e42081ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5a:3f:c3:bb:4c:7d:f5:ed:9a:4a:ff:c7:a1:
8f:e5:e9:4c:f5:05:30:5b:0e:cd:3b:44:c4:18:72:
07:8b:a4:33:cc:26:9c:38:29:ee:3e:97:78:43:d5:
52:6c:b4:ec:f4:5f:89:5e:8f:74:07:b2:6b:93:6d:
c0:71:e4:05:61:78:4d:5a:1e:77:f6:1e:b3:73:9b:
db:4b:b2:6c:66:65:04:53:b6:e4:54:b8:aa:94:de:
61:1f:59:72:2b:48:01:5b:b7:27:06:50:2f:5a:3e:
b8:c5:c4:5a:29:0b:b9:d5:aa:71:7b:19:d1:cf:33:
74:fc:46:17:b5:10:0c:5e:a1:83:a6:9d:84:11:0c:
ef:0e:1f:d7:4f:01:51:e0:95:7a:e3:89:d1:de:7c:
86:5e:27:c9:01:e6:87:2a:6e:1a:9e:51:c8:de:df:
cb:17:c0:42:d6:1c:7f:e0:70:c4:cf:43:42:0b:1d:
0a:1d:0e:58:fc:b7:27:b5:9f:19:03:b3:3e:3b:f7:
86:fe:50:37:93:41:c0:66:1a:83:5c:b0:ba:64:7b:
67:7c:27:24:03:6b:4a:45:c8:e4:73:bd:ce:e3:3e:
5f:47:35:27:72:3c:a8:e2:84:53:92:f8:86:aa:b1:
da:c2:de:e3:43:d3:83:dd:1b:56:89:47:d5:c3:1d:
11:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B9:29:53:92:D7:6E:CC:0F:2D:C3:10:FA:37:53:55:E4:20:81:EA
X509v3 Authority Key Identifier:
keyid:A4:1D:4E:97:88:10:E9:78:9A:76:E6:87:A7:DD:D9:75:26:B0:D9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/OrkpU5LXbswPLcMQ-jdTVeQggeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.131.224.0/21
92.51.64.0/18
93.188.8.0/21
109.234.112.0/21
Signature Algorithm: sha256WithRSAEncryption
75:aa:85:cc:8f:b8:c4:80:36:9e:97:b9:6c:a6:4a:ef:ca:2d:
b8:17:fa:3b:bc:3e:f8:52:be:1a:45:e8:3f:bb:a2:00:a4:9c:
ee:0d:0b:46:1e:a6:8b:f2:a0:78:f3:52:0f:fa:7a:04:35:f8:
2c:c4:82:0d:e6:46:af:aa:3c:08:8b:46:d1:0c:17:c1:b8:b6:
69:70:83:31:ef:5d:53:9e:b5:bd:05:8e:75:6c:c4:f6:f2:0d:
2e:d5:b3:41:ed:26:de:dc:c5:ed:86:5c:5d:2e:c1:c2:4f:bc:
43:d4:61:8b:48:10:57:d9:23:bb:b5:7c:07:92:4c:95:a1:48:
33:cf:9c:ed:83:a8:57:84:76:f4:e8:fb:00:ad:6e:fc:4c:72:
14:2d:ed:b3:8b:3f:e3:30:79:96:9d:7d:c0:30:c5:31:11:ad:
4f:ee:d3:44:fa:f3:88:b2:bb:aa:6a:b2:30:4f:4c:80:76:64:
d3:38:dd:e8:7a:5e:36:81:07:a7:02:9c:85:5a:0c:d0:0d:b3:
96:22:af:e2:da:b6:31:56:d2:51:75:a0:f1:fb:62:d0:9c:b0:
72:bb:c9:b0:9b:b6:79:07:97:e3:2e:fc:ab:b2:eb:e8:ef:01:
ef:4d:37:ec:e1:55:84:c5:13:4c:51:ae:ef:78:e2:02:cc:75:
b5:c1:e6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:16:11 2025 by rpki-client on console.sobornost.net