Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/nLB2qYSBJ1YFwwH2Uq3CWH-Xycw.roa
File: nLB2qYSBJ1YFwwH2Uq3CWH-Xycw.roa (raw, json)
Hash identifier: DDaDM0x5+8q+LGF59JGSBz5quMqPXuHhZb7HpNUm6U8=
Subject key identifier: 9C:B0:76:A9:84:81:27:56:05:C3:01:F6:52:AD:C2:58:7F:97:C9:CC
Certificate issuer: /CN=a41d4e978810e9789a76e687a7ddd97526b0d9bc
Certificate serial: 019541434703127CA8D7EB2D76EF95ACAC26
Authority key identifier: A4:1D:4E:97:88:10:E9:78:9A:76:E6:87:A7:DD:D9:75:26:B0:D9:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/nLB2qYSBJ1YFwwH2Uq3CWH-Xycw.roa
Signing time: Wed 26 Feb 2025 07:58:02 +0000
ROA not before: Wed 26 Feb 2025 07:58:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44327
IP address blocks: 37.131.224.0/21 maxlen: 21
37.131.224.0/22 maxlen: 22
37.131.226.0/24 maxlen: 24
37.131.227.0/24 maxlen: 24
37.131.228.0/22 maxlen: 22
37.131.231.0/24 maxlen: 24
92.51.64.0/18 maxlen: 18
92.51.64.0/20 maxlen: 20
92.51.64.0/21 maxlen: 21
92.51.64.0/24 maxlen: 24
92.51.65.0/24 maxlen: 24
92.51.66.0/24 maxlen: 24
92.51.69.0/24 maxlen: 24
92.51.72.0/21 maxlen: 21
92.51.75.0/24 maxlen: 24
92.51.80.0/20 maxlen: 20
92.51.80.0/21 maxlen: 21
92.51.80.0/24 maxlen: 24
92.51.82.0/24 maxlen: 24
92.51.86.0/24 maxlen: 24
92.51.87.0/24 maxlen: 24
92.51.88.0/21 maxlen: 21
92.51.91.0/24 maxlen: 24
92.51.92.0/24 maxlen: 24
92.51.96.0/20 maxlen: 20
92.51.96.0/21 maxlen: 21
92.51.99.0/24 maxlen: 24
92.51.104.0/21 maxlen: 21
92.51.105.0/24 maxlen: 24
92.51.107.0/24 maxlen: 24
92.51.110.0/24 maxlen: 24
92.51.111.0/24 maxlen: 24
92.51.112.0/20 maxlen: 20
92.51.112.0/21 maxlen: 21
92.51.112.0/22 maxlen: 22
92.51.112.0/24 maxlen: 24
92.51.113.0/24 maxlen: 24
92.51.116.0/22 maxlen: 22
92.51.116.0/24 maxlen: 24
92.51.120.0/21 maxlen: 21
92.51.120.0/22 maxlen: 22
92.51.121.0/24 maxlen: 24
92.51.123.0/24 maxlen: 24
92.51.124.0/22 maxlen: 22
92.51.124.0/24 maxlen: 24
92.51.125.0/24 maxlen: 24
92.51.126.0/24 maxlen: 24
93.188.8.0/21 maxlen: 21
93.188.8.0/22 maxlen: 22
93.188.8.0/24 maxlen: 24
93.188.11.0/24 maxlen: 24
93.188.12.0/22 maxlen: 22
93.188.14.0/24 maxlen: 24
109.234.112.0/21 maxlen: 21
109.234.112.0/22 maxlen: 22
109.234.112.0/24 maxlen: 24
109.234.116.0/22 maxlen: 22
109.234.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:41:43:47:03:12:7c:a8:d7:eb:2d:76:ef:95:ac:ac:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41d4e978810e9789a76e687a7ddd97526b0d9bc
Validity
Not Before: Feb 26 07:58:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9cb076a98481275605c301f652adc2587f97c9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5f:09:0a:2f:9e:43:4c:b6:b4:6e:e0:fa:36:
f1:6b:c0:e9:8b:a8:75:fb:1b:05:8f:05:a9:8b:d9:
5d:69:24:fb:a0:c2:69:d7:16:c3:02:20:c0:40:7f:
7e:45:ce:a1:64:ad:db:45:73:c3:4f:f9:95:a4:5f:
c7:b3:56:07:19:09:cd:c3:30:e9:b2:70:53:8f:fc:
f8:98:6b:28:df:af:66:b2:f9:bf:b7:03:71:98:8d:
e5:20:03:28:b9:98:4d:f8:6d:d7:9a:c2:d6:89:2a:
1c:48:af:38:0b:ec:69:dd:4e:88:47:62:8e:ba:37:
90:5c:f0:2c:bf:d3:42:e7:30:0b:11:bb:cd:8c:90:
61:c1:84:7a:96:f9:b4:85:d4:ba:65:af:18:05:5b:
d4:41:6c:4d:cf:37:37:f2:8b:ec:d7:2d:ce:f1:a8:
ad:8b:4c:71:59:75:14:f7:f2:f5:e0:f0:95:19:20:
5f:8c:7c:03:bb:4e:87:b4:e3:88:8e:ff:12:e7:72:
1b:0c:3b:80:db:98:5d:aa:a4:a9:0a:dd:9e:1a:d8:
27:69:f3:dc:7f:f7:85:06:c1:c1:c4:1a:7d:e2:97:
b7:d7:6e:07:f9:88:e3:52:d7:db:37:a5:c7:8c:41:
12:de:41:4d:88:d9:22:8f:c4:da:a6:85:bf:96:e6:
6e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B0:76:A9:84:81:27:56:05:C3:01:F6:52:AD:C2:58:7F:97:C9:CC
X509v3 Authority Key Identifier:
keyid:A4:1D:4E:97:88:10:E9:78:9A:76:E6:87:A7:DD:D9:75:26:B0:D9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/nLB2qYSBJ1YFwwH2Uq3CWH-Xycw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.131.224.0/21
92.51.64.0/18
93.188.8.0/21
109.234.112.0/21
Signature Algorithm: sha256WithRSAEncryption
77:76:5a:86:e6:04:20:e3:62:02:bb:79:21:79:d8:45:46:42:
9e:94:4d:83:41:90:5d:02:5a:2c:5b:e3:a3:e4:d9:aa:55:75:
51:52:90:a7:f7:20:00:70:c3:67:45:c4:a7:16:40:6c:aa:77:
06:1a:c6:37:53:ca:d3:47:46:05:c3:96:aa:07:29:06:01:ff:
64:ee:98:73:a9:4d:cc:3a:dc:7b:6e:2b:b4:06:a7:2a:05:9f:
56:15:03:aa:49:ff:16:c6:42:02:89:0f:5a:08:d6:86:97:40:
8b:66:c3:9f:ec:a2:8b:f5:dc:fc:37:87:25:b0:83:de:c0:ee:
61:56:15:09:0d:06:3c:df:19:92:87:96:2c:8b:c5:11:d8:8c:
f4:dd:80:c7:0d:e8:de:30:56:97:c5:42:66:0f:9c:e7:6e:1c:
26:fc:ed:c6:d7:10:36:ec:1a:1d:87:d5:f6:d8:5f:d0:9b:77:
ea:c0:ef:24:da:c1:60:d0:31:0d:65:ff:8b:05:54:77:c0:38:
67:25:e5:d3:4b:9c:6e:16:52:7e:71:dc:81:1b:90:25:a4:ec:
a6:c1:29:30:8e:22:b6:44:37:75:21:56:47:47:0e:f5:bb:45:
f8:94:d3:2f:10:31:99:81:79:33:d8:77:0f:b2:07:54:50:db:
cc:ba:7a:0c
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZVBQ0cDEnyo1+stdu+VrKwmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MWQ0ZTk3ODgxMGU5Nzg5YTc2ZTY4N2E3ZGRkOTc1MjZi
MGQ5YmMwHhcNMjUwMjI2MDc1ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Y2IwNzZhOTg0ODEyNzU2MDVjMzAxZjY1MmFkYzI1ODdmOTdjOWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs18JCi+eQ0y2tG7g+jbxa8Dpi6h1
+xsFjwWpi9ldaST7oMJp1xbDAiDAQH9+Rc6hZK3bRXPDT/mVpF/Hs1YHGQnNwzDp
snBTj/z4mGso369msvm/twNxmI3lIAMouZhN+G3XmsLWiSocSK84C+xp3U6IR2KO
ujeQXPAsv9NC5zALEbvNjJBhwYR6lvm0hdS6Za8YBVvUQWxNzzc38ovs1y3O8ait
i0xxWXUU9/L14PCVGSBfjHwDu06HtOOIjv8S53IbDDuA25hdqqSpCt2eGtgnafPc
f/eFBsHBxBp94pe3124H+YjjUtfbN6XHjEES3kFNiNkij8TapoW/luZujQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFJywdqmEgSdWBcMB9lKtwlh/l8nMMB8GA1UdIwQY
MBaAFKQdTpeIEOl4mnbmh6fd2XUmsNm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEIxT2w0Z1E2WGlhZHVhSHA5M1pkU2F3MmJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8xNTg0NTAtZGQ0My00YjgyLWFiMmIt
MDk1ZTcxODhkMGEwLzEvbkxCMnFZU0JKMVlGd3dIMlVxM0NXSC1YeWN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8xNTg0NTAtZGQ0My00YjgyLWFiMmItMDk1ZTcxODhkMGEw
LzEvcEIxT2w0Z1E2WGlhZHVhSHA5M1pkU2F3MmJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDJYPgAwQG
XDNAAwQDXbwIAwQDbepwMA0GCSqGSIb3DQEBCwUAA4IBAQB3dlqG5gQg42ICu3kh
edhFRkKelE2DQZBdAlosW+Oj5NmqVXVRUpCn9yAAcMNnRcSnFkBsqncGGsY3U8rT
R0YFw5aqBykGAf9k7phzqU3MOtx7biu0BqcqBZ9WFQOqSf8WxkICiQ9aCNaGl0CL
ZsOf7KKL9dz8N4clsIPewO5hVhUJDQY83xmSh5Ysi8UR2Iz03YDHDejeMFaXxUJm
D5znbhwm/O3G1xA27Bodh9X22F/Qm3fqwO8k2sFg0DENZf+LBVR3wDhnJeXTS5xu
FlJ+cdyBG5AlpOymwSkwjiK2RDd1IVZHRw71u0X4lNMvEDGZgXkz2HcPsgdUUNvM
unoM
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:41 2025 by rpki-client on console.sobornost.net