Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/NAPyyzZUEw4Zn65wAuFDux_YC9U.roa
File: NAPyyzZUEw4Zn65wAuFDux_YC9U.roa (raw, json)
Hash identifier: lU32nj8CJcUtMjGhuL2rXmP4Es+fbhl1wJhVBrmgarI=
Subject key identifier: 34:03:F2:CB:36:54:13:0E:19:9F:AE:70:02:E1:43:BB:1F:D8:0B:D5
Certificate issuer: /CN=e0a0106cd2857ef13234867cb7f16a23a93faa93
Certificate serial: 0194258E28736F41C5DB6FDA3293E6BBCC6A
Authority key identifier: E0:A0:10:6C:D2:85:7E:F1:32:34:86:7C:B7:F1:6A:23:A9:3F:AA:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/NAPyyzZUEw4Zn65wAuFDux_YC9U.roa
Signing time: Thu 02 Jan 2025 05:47:40 +0000
ROA not before: Thu 02 Jan 2025 05:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48885
IP address blocks: 37.252.128.0/19 maxlen: 19
37.252.128.0/24 maxlen: 24
217.146.48.0/20 maxlen: 24
217.146.48.0/24 maxlen: 24
217.146.49.0/24 maxlen: 24
217.146.50.0/24 maxlen: 24
217.146.51.0/24 maxlen: 24
217.146.52.0/24 maxlen: 24
217.146.63.0/24 maxlen: 24
2a00:dbc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:28:73:6f:41:c5:db:6f:da:32:93:e6:bb:cc:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a0106cd2857ef13234867cb7f16a23a93faa93
Validity
Not Before: Jan 2 05:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3403f2cb3654130e199fae7002e143bb1fd80bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ab:3b:7e:19:a9:da:2f:08:77:26:fb:a1:e6:
4e:16:df:03:10:57:d3:cd:b3:20:c3:5a:49:1f:ee:
52:c3:06:4c:38:0d:5e:d0:dc:8b:a1:68:fc:35:68:
0b:3b:cc:e8:b5:ba:65:bf:be:52:7c:89:90:48:a7:
0e:ff:cb:3e:b8:ff:ab:cb:08:19:f6:23:10:7b:c6:
0f:98:2c:20:c5:8b:08:d1:61:b8:0b:e6:a6:a8:43:
3a:66:d9:7e:e5:9a:46:fe:23:96:6b:6c:d4:4b:27:
3a:cb:0e:85:29:4c:a5:1d:9a:96:5f:e9:09:d3:a5:
24:b7:59:f3:85:d1:8d:72:21:6a:2f:d7:c0:fe:a7:
c3:df:2c:d9:28:66:06:01:dc:19:74:a6:ca:41:51:
2b:7c:ec:2f:63:60:84:be:bf:73:ce:a9:fa:10:5a:
d4:1f:74:fd:07:2b:19:25:c4:b1:33:c3:b2:ed:3e:
f1:2a:95:d5:bd:cc:f9:63:8b:a1:8b:99:53:93:66:
48:a0:d3:65:12:f0:a3:9d:b6:4f:b6:c0:e4:1c:62:
b3:36:4e:e6:ff:f4:fd:37:02:8f:06:f2:1e:8e:82:
ea:9e:06:49:0c:b3:d2:cc:d0:5b:12:0a:26:a5:04:
dc:17:cc:51:51:8b:c2:c3:9b:72:99:a4:ff:bd:33:
9f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:03:F2:CB:36:54:13:0E:19:9F:AE:70:02:E1:43:BB:1F:D8:0B:D5
X509v3 Authority Key Identifier:
keyid:E0:A0:10:6C:D2:85:7E:F1:32:34:86:7C:B7:F1:6A:23:A9:3F:AA:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/NAPyyzZUEw4Zn65wAuFDux_YC9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.128.0/19
217.146.48.0/20
IPv6:
2a00:dbc0::/32
Signature Algorithm: sha256WithRSAEncryption
9b:c7:1b:22:32:8e:0c:3a:f1:2d:ef:fc:03:2a:a2:85:ba:37:
6e:ec:52:8f:2f:34:fa:49:bf:29:75:26:c2:57:66:05:f8:b0:
f7:4b:55:2a:60:a9:48:1c:6c:30:5c:27:6a:25:76:8b:50:6e:
9c:85:5d:e6:97:05:0b:19:be:f3:2f:ca:d7:cf:08:ba:9c:f1:
6e:7e:cb:32:2c:c4:59:c4:c4:cd:d7:2a:21:7b:28:e7:ac:2a:
fc:aa:ce:89:ac:54:ac:cc:af:ab:6b:8a:88:10:ce:c5:fe:1e:
20:68:90:31:da:f8:ba:ac:80:1a:2f:19:03:56:c5:c3:3b:62:
70:48:45:de:59:d2:aa:02:a2:61:f2:8b:14:2a:66:8b:11:a2:
fb:88:7f:b7:b1:f6:94:2b:f2:3d:23:b7:c2:9e:b4:e6:c5:ab:
ec:c6:ea:9d:9c:18:56:65:73:a1:6b:7b:bf:ef:d8:0d:d6:3a:
f2:56:77:d4:a7:77:5c:b3:ad:2f:10:47:ce:9c:b6:ca:ce:6e:
50:d4:4b:42:5a:10:03:36:0c:ec:f0:64:d1:a5:83:4f:0e:34:
41:db:9e:fa:b9:af:d9:37:79:b0:dd:5c:92:46:5e:94:f7:f7:
1b:e0:32:89:6d:6e:17:64:c2:ad:78:b6:a3:04:35:3b:0b:df:
d2:1b:7a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:00 2025 by rpki-client on console.sobornost.net