Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/Sl3rfOJQgGeoDh7qWVaOpWCVQK0.roa
File: Sl3rfOJQgGeoDh7qWVaOpWCVQK0.roa (raw, json)
Hash identifier: 72TNI/so/3OBFMFfxfO7UTaQUiPfe9aZZStTUL4m1WM=
Subject key identifier: 4A:5D:EB:7C:E2:50:80:67:A8:0E:1E:EA:59:56:8E:A5:60:95:40:AD
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 0194258F1A7369FA0F47D2ED5D4B44B0371B
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/Sl3rfOJQgGeoDh7qWVaOpWCVQK0.roa
Signing time: Thu 02 Jan 2025 05:48:42 +0000
ROA not before: Thu 02 Jan 2025 05:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31689
IP address blocks: 193.140.40.0/21 maxlen: 21
193.140.40.0/24 maxlen: 24
193.140.41.0/24 maxlen: 24
193.140.42.0/24 maxlen: 24
193.140.43.0/24 maxlen: 24
193.140.44.0/24 maxlen: 24
193.140.45.0/24 maxlen: 24
193.140.46.0/24 maxlen: 24
193.140.47.0/24 maxlen: 24
193.140.172.0/22 maxlen: 22
193.140.172.0/24 maxlen: 24
193.140.173.0/24 maxlen: 24
193.140.174.0/24 maxlen: 24
193.140.175.0/24 maxlen: 24
194.27.73.0/24 maxlen: 24
194.27.76.0/22 maxlen: 22
194.27.76.0/24 maxlen: 24
194.27.77.0/24 maxlen: 24
194.27.78.0/24 maxlen: 24
194.27.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:1a:73:69:fa:0f:47:d2:ed:5d:4b:44:b0:37:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 2 05:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a5deb7ce2508067a80e1eea59568ea5609540ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:17:65:ca:2a:71:99:bb:03:11:77:42:1a:78:
06:9d:fd:f5:f8:8d:2c:4f:88:8e:4e:7e:9a:f8:8e:
4c:bc:72:27:7e:d0:3c:59:8e:e9:53:b7:38:2b:52:
9d:8c:8b:8d:51:d8:22:46:3d:f4:27:cb:3e:a8:f4:
7d:ae:6e:5f:d6:a3:66:db:9f:a6:12:6c:ab:f3:8d:
9d:c5:c2:ed:03:73:0e:05:8e:7c:2f:d1:f6:11:50:
e6:63:19:0b:a5:88:d3:29:88:95:b3:49:56:b2:b3:
37:08:27:6d:68:1a:5f:25:af:5a:ff:d5:b6:a0:3b:
1a:d9:97:89:82:77:01:20:3c:8c:93:a5:87:eb:38:
fa:dd:87:f5:2d:ec:fd:b5:27:9f:00:db:41:fd:90:
25:f2:30:8e:7a:be:14:3c:f4:92:50:99:a9:85:54:
07:56:16:80:76:50:45:67:a2:5b:f8:00:12:fe:4e:
dc:77:02:54:e6:62:b5:06:99:9d:1b:81:d0:83:0a:
20:76:2f:e2:52:35:42:dc:4a:13:62:97:64:6b:3f:
1c:aa:03:df:c3:14:a6:7d:36:be:0a:c7:ec:be:06:
1c:c3:7c:dd:13:cf:cf:1d:04:61:de:e1:45:65:c7:
16:3c:64:e2:b4:02:06:bb:1e:16:15:25:90:a3:27:
b0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5D:EB:7C:E2:50:80:67:A8:0E:1E:EA:59:56:8E:A5:60:95:40:AD
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/Sl3rfOJQgGeoDh7qWVaOpWCVQK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.140.40.0/21
193.140.172.0/22
194.27.73.0/24
194.27.76.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:80:9e:50:6e:54:39:99:95:de:76:99:3d:8f:d3:50:79:5b:
bb:02:3e:ac:a9:d8:55:54:3c:26:34:a0:2f:89:d1:12:e1:61:
89:bb:55:41:3b:be:75:6a:be:ed:04:23:d9:79:eb:c7:0e:6b:
39:f0:e1:44:fa:4a:30:50:13:e1:6f:b4:2f:9a:15:85:85:4f:
4e:d6:e6:5e:a1:72:48:ca:2f:d3:b4:37:f7:c9:d0:0a:a2:25:
dc:e0:08:d6:d9:54:f1:df:aa:5c:c9:8c:4b:01:56:2c:1c:ac:
61:3e:7c:3f:57:f6:af:c7:2a:47:ba:5d:61:e2:1b:dd:9b:ef:
ab:65:29:b5:d5:7a:e2:97:b8:06:bd:46:fa:86:6f:02:ae:17:
ac:f8:1d:34:84:6d:26:5e:e5:32:6f:de:93:96:a3:01:33:b9:
c4:a8:5f:55:f2:bb:6e:85:f4:29:b2:3d:da:07:a4:80:6e:b8:
a5:24:f0:b0:3a:2a:6f:58:d1:3a:a3:61:21:2b:90:f9:a1:fb:
2f:16:c8:40:3f:e6:ec:21:46:0b:69:86:d8:ae:ca:96:4d:59:
9e:e2:e8:d5:83:f2:a3:62:6a:f0:cf:0e:5e:65:59:07:85:c6:
d5:74:af:0e:a8:4b:10:e2:77:e5:dc:c4:fe:3b:58:bc:2d:dc:
79:41:0c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:47 2025 by rpki-client on console.sobornost.net