Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/dSPSiCsTYhXsW_jX3TuykBtzdO4.roa
File: dSPSiCsTYhXsW_jX3TuykBtzdO4.roa (raw, json)
Hash identifier: klCwvnBfHBw5TnEZfcMs7y7gHR78uSZFOhCp0BCY+ns=
Subject key identifier: 75:23:D2:88:2B:13:62:15:EC:5B:F8:D7:DD:3B:B2:90:1B:73:74:EE
Certificate issuer: /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial: 01931B18B613F7AD78907F58B3F9D36966A1
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/dSPSiCsTYhXsW_jX3TuykBtzdO4.roa
Signing time: Mon 11 Nov 2024 12:00:24 +0000
ROA not before: Mon 11 Nov 2024 12:00:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48728
IP address blocks: 31.11.48.0/21 maxlen: 21
37.186.32.0/19 maxlen: 19
37.186.32.0/24 maxlen: 24
37.186.33.0/24 maxlen: 24
37.186.34.0/24 maxlen: 24
37.186.35.0/24 maxlen: 24
37.186.36.0/24 maxlen: 24
37.186.37.0/24 maxlen: 24
37.186.38.0/24 maxlen: 24
37.186.39.0/24 maxlen: 24
37.186.40.0/24 maxlen: 24
37.186.41.0/24 maxlen: 24
37.186.42.0/24 maxlen: 24
37.186.43.0/24 maxlen: 24
37.186.44.0/24 maxlen: 24
37.186.45.0/24 maxlen: 24
37.186.46.0/24 maxlen: 24
37.186.47.0/24 maxlen: 24
37.186.48.0/24 maxlen: 24
37.186.49.0/24 maxlen: 24
37.186.50.0/24 maxlen: 24
37.186.51.0/24 maxlen: 24
37.186.52.0/24 maxlen: 24
37.186.53.0/24 maxlen: 24
37.186.54.0/24 maxlen: 24
37.186.55.0/24 maxlen: 24
37.186.56.0/24 maxlen: 24
37.186.57.0/24 maxlen: 24
37.186.58.0/24 maxlen: 24
37.186.59.0/24 maxlen: 24
37.186.60.0/24 maxlen: 24
37.186.61.0/24 maxlen: 24
37.186.62.0/24 maxlen: 24
37.186.63.0/24 maxlen: 24
80.76.160.0/20 maxlen: 20
80.76.160.0/21 maxlen: 21
80.76.160.0/24 maxlen: 24
80.76.161.0/24 maxlen: 24
80.76.162.0/24 maxlen: 24
80.76.163.0/24 maxlen: 24
80.76.164.0/24 maxlen: 24
80.76.165.0/24 maxlen: 24
80.76.168.0/21 maxlen: 21
80.76.170.0/24 maxlen: 24
80.76.171.0/24 maxlen: 24
80.76.172.0/24 maxlen: 24
80.76.173.0/24 maxlen: 24
80.76.174.0/24 maxlen: 24
80.76.175.0/24 maxlen: 24
103.17.0.0/22 maxlen: 22
103.17.0.0/24 maxlen: 24
103.17.1.0/24 maxlen: 24
103.17.2.0/24 maxlen: 24
103.17.3.0/24 maxlen: 24
103.23.124.0/24 maxlen: 24
103.23.125.0/24 maxlen: 24
103.199.88.0/22 maxlen: 22
103.199.88.0/24 maxlen: 24
103.199.89.0/24 maxlen: 24
103.199.90.0/24 maxlen: 24
103.199.91.0/24 maxlen: 24
103.225.72.0/22 maxlen: 22
103.225.72.0/24 maxlen: 24
103.225.73.0/24 maxlen: 24
103.225.74.0/24 maxlen: 24
103.225.75.0/24 maxlen: 24
212.70.96.0/19 maxlen: 19
212.70.96.0/24 maxlen: 24
212.70.97.0/24 maxlen: 24
212.70.98.0/24 maxlen: 24
212.70.99.0/24 maxlen: 24
212.70.102.0/24 maxlen: 24
212.70.104.0/24 maxlen: 24
212.70.106.0/24 maxlen: 24
212.70.107.0/24 maxlen: 24
212.70.108.0/24 maxlen: 24
212.70.109.0/24 maxlen: 24
212.70.110.0/24 maxlen: 24
212.70.111.0/24 maxlen: 24
212.70.112.0/24 maxlen: 24
212.70.113.0/24 maxlen: 24
212.70.114.0/24 maxlen: 24
212.70.115.0/24 maxlen: 24
212.70.116.0/24 maxlen: 24
212.70.117.0/24 maxlen: 24
212.70.118.0/24 maxlen: 24
212.70.119.0/24 maxlen: 24
212.70.122.0/24 maxlen: 24
212.70.125.0/24 maxlen: 24
212.70.126.0/24 maxlen: 24
212.70.127.0/24 maxlen: 24
2a04:7f80::/29 maxlen: 29
2a04:7f80::/48 maxlen: 48
2a04:7f80:0:a::/64 maxlen: 64
2a04:7f80:2::/48 maxlen: 48
2a04:7f80:3::/48 maxlen: 48
2a04:7f80:4::/48 maxlen: 48
2a04:7f80:5::/48 maxlen: 48
2a04:7f80:10::/48 maxlen: 48
2a04:7f80:11::/48 maxlen: 48
2a04:7f80:12::/48 maxlen: 48
2a04:7f80:13::/48 maxlen: 48
2a04:7f80:14::/48 maxlen: 48
2a04:7f80:15::/48 maxlen: 48
2a04:7f80:16::/48 maxlen: 48
2a04:7f80:17::/48 maxlen: 48
2a04:7f80:19::/48 maxlen: 48
2a04:7f80:1a::/48 maxlen: 48
2a04:7f80:1b::/48 maxlen: 48
2a04:7f80:1c::/48 maxlen: 48
2a04:7f80:1d::/48 maxlen: 48
2a04:7f80:1e::/48 maxlen: 48
2a04:7f80:1f::/48 maxlen: 48
2a04:7f80:20::/44 maxlen: 44
2a04:7f80:40::/45 maxlen: 45
2a04:7f80:48::/45 maxlen: 45
2a04:7f80:50::/48 maxlen: 48
2a04:7f80:51::/48 maxlen: 48
2a04:7f80:52::/48 maxlen: 48
2a04:7f80:53::/48 maxlen: 48
2a04:7f80:54::/48 maxlen: 48
2a04:7f80:55::/48 maxlen: 48
2a04:7f80:56::/48 maxlen: 48
2a04:7f80:57::/48 maxlen: 48
2a04:7f80:58::/48 maxlen: 48
2a04:7f80:5a::/48 maxlen: 48
2a04:7f80:5b::/48 maxlen: 48
2a04:7f80:5c::/48 maxlen: 48
2a04:7f80:5d::/48 maxlen: 48
2a04:7f80:5e::/48 maxlen: 48
2a04:7f80:5f::/48 maxlen: 48
2a04:7f80:90::/45 maxlen: 45
2a04:7f80:2000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1b:18:b6:13:f7:ad:78:90:7f:58:b3:f9:d3:69:66:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
Validity
Not Before: Nov 11 12:00:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7523d2882b136215ec5bf8d7dd3bb2901b7374ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:58:cc:1c:96:4e:5f:9e:43:da:24:be:86:e0:
99:e7:b3:6d:da:d2:73:c5:b4:bc:6c:a7:d7:1e:0a:
19:ca:5d:81:db:cf:9b:c4:b2:1a:9e:0a:db:33:f6:
d2:03:d9:45:13:2d:da:cb:87:e7:0f:a5:4d:19:3d:
d3:1c:fb:43:a8:ee:89:40:90:f8:a6:96:58:20:2a:
e8:ae:18:27:fd:6d:11:53:9d:2f:e1:22:5c:21:3a:
b9:d6:bb:5f:2c:35:ea:ad:0f:de:0d:6b:14:37:ff:
f0:f2:b8:a8:ef:2c:90:5c:e3:5b:85:ff:49:6b:4e:
a3:c8:2e:36:72:6a:1b:ce:ad:81:a6:b5:31:c2:aa:
09:74:3a:56:e6:07:1a:07:4a:53:12:6b:c3:27:37:
e3:7b:60:b2:8d:cc:1a:70:54:ad:c2:2b:ec:9c:01:
9c:01:38:d7:e7:c6:bf:be:d6:7d:11:0b:a9:9d:1d:
ef:c4:f6:2a:fc:2a:bf:7a:0f:3b:c3:a4:32:68:ce:
f6:fd:fc:24:be:0a:f3:61:38:16:8c:b7:db:02:40:
31:48:3d:2e:ed:dd:d6:6b:d4:1c:4e:40:a5:b5:48:
84:54:dd:0c:e9:73:0e:f0:e7:59:56:7a:0c:b5:59:
ce:cb:3c:e3:e0:c4:a2:d8:60:9f:1d:1a:41:cd:8b:
e1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:23:D2:88:2B:13:62:15:EC:5B:F8:D7:DD:3B:B2:90:1B:73:74:EE
X509v3 Authority Key Identifier:
keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/dSPSiCsTYhXsW_jX3TuykBtzdO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.48.0/21
37.186.32.0/19
80.76.160.0/20
103.17.0.0/22
103.23.124.0/23
103.199.88.0/22
103.225.72.0/22
212.70.96.0/19
IPv6:
2a04:7f80::/29
Signature Algorithm: sha256WithRSAEncryption
64:57:37:98:c6:69:9c:5b:ba:d0:f9:c5:11:02:bf:c8:3c:78:
22:d1:81:82:0d:c5:3f:a6:f6:ed:cc:f7:af:85:31:11:b6:8c:
73:ce:0c:05:5f:6b:b1:4d:2e:f1:48:88:55:4a:4d:77:32:6c:
34:66:e1:7a:7d:4d:5c:c4:00:37:81:1e:28:8d:d9:dc:c5:1f:
2a:e9:20:e7:09:55:1e:39:b2:5e:34:3e:0a:10:0e:2d:9d:05:
a6:90:d9:3d:04:7b:ee:8c:d7:3b:84:d1:27:f0:7c:3d:f9:33:
b7:be:8c:e5:6d:b2:cb:b4:57:8a:bf:01:b9:10:1d:bc:d6:bc:
06:d1:51:9f:ca:49:f9:ec:f2:00:d8:07:3f:e0:7b:54:92:74:
67:8b:2b:7d:f1:85:cc:cc:fa:e8:e4:7d:40:bb:44:98:13:02:
98:bb:d0:4d:92:42:9f:23:66:cc:d1:ba:af:ea:12:cd:0c:b8:
9c:a8:37:db:e4:d3:9b:13:da:1a:51:0c:77:5e:6a:71:72:9f:
ce:27:42:e4:e6:9b:0f:99:cd:14:20:12:79:9d:79:e6:c2:18:
c5:75:3b:5d:99:56:b9:62:b4:1e:d2:dd:dd:1d:d9:c1:1d:81:
16:96:5f:94:1c:49:0e:a9:5a:85:73:b8:06:77:38:8a:f7:aa:
98:8d:38:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 17:42:57 2024 by rpki-client on console.sobornost.net