Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/j6btVEkYHnL9gWowTqe50VXUUIk.roa
File: j6btVEkYHnL9gWowTqe50VXUUIk.roa (raw, json)
Hash identifier: eFOZX5z3pNhRrEXFNmogu9OUe+ItbR9kd5gawg90+UY=
Subject key identifier: 8F:A6:ED:54:49:18:1E:72:FD:81:6A:30:4E:A7:B9:D1:55:D4:50:89
Certificate issuer: /CN=4419e02f046e1bfb5927fe731ff725e469599171
Certificate serial: 01941F8C3A078B5D80D96FBBAD848E5E0A84
Authority key identifier: 44:19:E0:2F:04:6E:1B:FB:59:27:FE:73:1F:F7:25:E4:69:59:91:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/j6btVEkYHnL9gWowTqe50VXUUIk.roa
Signing time: Wed 01 Jan 2025 01:47:51 +0000
ROA not before: Wed 01 Jan 2025 01:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51013
IP address blocks: 37.9.168.0/21 maxlen: 24
45.13.137.0/24 maxlen: 24
45.81.41.0/24 maxlen: 24
45.138.184.0/24 maxlen: 24
45.138.185.0/24 maxlen: 24
185.87.12.0/22 maxlen: 24
195.210.28.0/23 maxlen: 24
2a00:4b40::/32 maxlen: 64
2a0e:bb40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3a:07:8b:5d:80:d9:6f:bb:ad:84:8e:5e:0a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4419e02f046e1bfb5927fe731ff725e469599171
Validity
Not Before: Jan 1 01:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fa6ed5449181e72fd816a304ea7b9d155d45089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ca:e6:50:46:a2:e2:e5:02:e8:f9:59:32:fd:
90:bb:59:90:36:ab:94:8a:ac:4f:40:2a:c7:33:46:
1e:b1:9e:66:5e:16:84:93:96:87:00:e1:c6:34:a6:
c5:2d:e2:e0:a5:fc:12:1d:d6:16:3a:c6:d4:e3:bd:
c9:03:c8:97:0b:72:77:a7:cf:a4:ef:75:10:56:d1:
50:6a:85:ac:88:67:48:bc:93:ad:d0:3a:36:51:75:
67:a5:39:6a:23:94:e2:23:57:91:2e:4d:26:7f:d1:
59:44:5c:c4:5e:df:3b:ba:6d:f2:5d:98:55:36:b2:
36:25:2b:d7:1a:e6:a2:7a:97:25:8e:d4:a2:b4:9b:
79:19:53:7a:b9:9d:22:15:8c:93:18:f9:74:80:22:
3a:59:4a:ff:42:fe:3a:9d:09:e7:b9:ac:46:d8:4b:
07:17:24:fc:37:93:54:f2:df:91:98:65:33:0e:44:
0c:af:ba:3a:11:64:73:38:bb:8b:b7:4c:a7:7d:12:
a7:14:29:d0:5f:aa:11:07:fe:8f:70:03:3b:56:41:
2a:d4:4e:3b:ad:e0:39:c4:a2:52:8b:c0:1d:06:8e:
3c:5c:78:f2:ca:e2:b9:76:13:75:c5:8f:89:27:be:
b3:c6:23:d3:13:43:a1:3b:7e:07:f9:86:08:4a:68:
b4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A6:ED:54:49:18:1E:72:FD:81:6A:30:4E:A7:B9:D1:55:D4:50:89
X509v3 Authority Key Identifier:
keyid:44:19:E0:2F:04:6E:1B:FB:59:27:FE:73:1F:F7:25:E4:69:59:91:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/j6btVEkYHnL9gWowTqe50VXUUIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.9.168.0/21
45.13.137.0/24
45.81.41.0/24
45.138.184.0/23
185.87.12.0/22
195.210.28.0/23
IPv6:
2a00:4b40::/32
2a0e:bb40::/48
Signature Algorithm: sha256WithRSAEncryption
16:f0:a2:a0:ff:27:cc:a4:3a:96:7a:93:1d:b0:55:22:ea:07:
be:6e:41:ac:c7:91:b5:e8:e8:68:66:a9:28:40:13:93:94:14:
58:77:2b:6a:ad:1b:0e:56:f3:0a:62:be:e8:2f:69:b7:56:fb:
51:76:02:62:e0:1e:1c:3f:af:ff:33:0b:ed:28:8a:73:d4:18:
44:86:e7:b9:aa:d6:8e:af:53:fa:06:e2:50:19:81:97:36:76:
2a:d7:59:8e:03:55:39:e2:cd:e8:b8:86:b0:0e:c4:f4:bd:07:
94:43:85:f7:84:13:1c:ac:42:df:0b:41:39:73:5e:08:48:46:
14:53:de:dd:0b:97:c9:5a:a6:ae:49:55:04:4f:aa:27:5d:40:
0d:b0:df:a7:3f:44:15:73:9a:23:bb:25:a3:21:85:e8:35:4d:
2b:ad:0b:89:68:a7:cc:ba:6e:40:89:5d:c8:01:bc:1c:a9:2e:
da:ab:1e:5c:52:ed:dc:63:df:c9:c2:b8:19:93:1f:bf:69:e8:
ec:91:95:ab:81:e8:f2:5f:7c:f4:7a:89:e6:05:b9:a3:dd:02:
0c:3b:44:72:ab:67:e1:38:56:35:1f:60:87:c4:ee:ef:17:33:
01:86:6c:4c:9a:9b:45:31:1c:59:0b:a8:9b:fb:bd:da:5e:01:
2a:18:9d:d1
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAZQfjDoHi12A2W+7rYSOXgqEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MTllMDJmMDQ2ZTFiZmI1OTI3ZmU3MzFmZjcyNWU0Njk1
OTkxNzEwHhcNMjUwMTAxMDE0NzUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmE2ZWQ1NDQ5MTgxZTcyZmQ4MTZhMzA0ZWE3YjlkMTU1ZDQ1MDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8rmUEai4uUC6PlZMv2Qu1mQNquU
iqxPQCrHM0YesZ5mXhaEk5aHAOHGNKbFLeLgpfwSHdYWOsbU473JA8iXC3J3p8+k
73UQVtFQaoWsiGdIvJOt0Do2UXVnpTlqI5TiI1eRLk0mf9FZRFzEXt87um3yXZhV
NrI2JSvXGuaiepcljtSitJt5GVN6uZ0iFYyTGPl0gCI6WUr/Qv46nQnnuaxG2EsH
FyT8N5NU8t+RmGUzDkQMr7o6EWRzOLuLt0ynfRKnFCnQX6oRB/6PcAM7VkEq1E47
reA5xKJSi8AdBo48XHjyyuK5dhN1xY+JJ76zxiPTE0OhO34H+YYISmi0JwIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFI+m7VRJGB5y/YFqME6nudFV1FCJMB8GA1UdIwQY
MBaAFEQZ4C8Ebhv7WSf+cx/3JeRpWZFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkJuZ0x3UnVHX3RaSl81ekhfY2w1R2xaa1hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80ZGU2NjUtYTdlMy00NDBiLTkzYTct
ZjliNzgzNmYyMzkxLzEvajZidFZFa1lIbkw5Z1dvd1RxZTUwVlhVVUlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC80ZGU2NjUtYTdlMy00NDBiLTkzYTctZjliNzgzNmYyMzkx
LzEvUkJuZ0x3UnVHX3RaSl81ekhfY2w1R2xaa1hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDAqBAIAATAkAwQDJQmoAwQA
LQ2JAwQALVEpAwQBLYq4AwQCuVcMAwQBw9IcMBYEAgACMBADBQAqAEtAAwcAKg67
QAAAMA0GCSqGSIb3DQEBCwUAA4IBAQAW8KKg/yfMpDqWepMdsFUi6ge+bkGsx5G1
6OhoZqkoQBOTlBRYdytqrRsOVvMKYr7oL2m3VvtRdgJi4B4cP6//MwvtKIpz1BhE
hue5qtaOr1P6BuJQGYGXNnYq11mOA1U54s3ouIawDsT0vQeUQ4X3hBMcrELfC0E5
c14ISEYUU97dC5fJWqauSVUET6onXUANsN+nP0QVc5ojuyWjIYXoNU0rrQuJaKfM
um5AiV3IAbwcqS7aqx5cUu3cY9/JwrgZkx+/aejskZWrgejyX3z0eonmBbmj3QIM
O0Ryq2fhOFY1H2CHxO7vFzMBhmxMmptFMRxZC6ib+73aXgEqGJ3R
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:59 2025 by rpki-client on console.sobornost.net