Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/61RxelYWbXhNAdJiBPXwTSMRMsg.roa
File: 61RxelYWbXhNAdJiBPXwTSMRMsg.roa (raw, json)
Hash identifier: NtNDlXz8T3XMOxIuE4rdKTZGpZqWppJsCwadI6Xw8rg=
Subject key identifier: EB:54:71:7A:56:16:6D:78:4D:01:D2:62:04:F5:F0:4D:23:11:32:C8
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0194228D22415B5B5338F4267616BB80A064
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/61RxelYWbXhNAdJiBPXwTSMRMsg.roa
Signing time: Wed 01 Jan 2025 15:47:42 +0000
ROA not before: Wed 01 Jan 2025 15:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20632
IP address blocks: 46.47.192.0/18 maxlen: 18
62.182.128.0/21 maxlen: 21
79.171.8.0/21 maxlen: 21
80.247.176.0/20 maxlen: 20
81.3.128.0/18 maxlen: 18
81.24.128.0/20 maxlen: 20
82.140.64.0/18 maxlen: 18
82.140.93.0/24 maxlen: 24
82.196.64.0/19 maxlen: 19
84.204.0.0/17 maxlen: 17
84.204.132.0/22 maxlen: 22
84.204.136.0/24 maxlen: 24
84.204.138.0/24 maxlen: 24
84.204.139.0/24 maxlen: 24
84.204.140.0/22 maxlen: 22
84.204.144.0/20 maxlen: 20
84.204.160.0/20 maxlen: 20
84.204.176.0/21 maxlen: 21
84.204.188.0/22 maxlen: 22
84.204.192.0/18 maxlen: 18
84.204.230.0/24 maxlen: 24
91.193.212.0/22 maxlen: 22
93.153.128.0/17 maxlen: 17
93.153.144.0/21 maxlen: 21
93.153.158.0/24 maxlen: 24
93.153.161.0/24 maxlen: 24
93.153.162.0/24 maxlen: 24
94.25.248.0/21 maxlen: 21
95.137.0.0/17 maxlen: 17
109.74.112.0/20 maxlen: 20
109.124.64.0/18 maxlen: 18
109.124.108.0/22 maxlen: 22
195.5.128.0/19 maxlen: 19
195.144.224.0/19 maxlen: 19
212.14.160.0/19 maxlen: 19
212.44.64.0/19 maxlen: 19
212.119.160.0/19 maxlen: 19
213.154.160.0/21 maxlen: 21
213.154.168.0/21 maxlen: 21
213.154.176.0/21 maxlen: 21
213.154.184.0/21 maxlen: 21
213.168.32.0/19 maxlen: 19
213.172.0.0/19 maxlen: 19
213.182.160.0/19 maxlen: 19
217.195.64.0/19 maxlen: 19
2a03:d000:9008::/46 maxlen: 46
2a03:d000:9008::/48 maxlen: 48
2a03:d000:9009::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:22:41:5b:5b:53:38:f4:26:76:16:bb:80:a0:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 15:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb54717a56166d784d01d26204f5f04d231132c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a2:9d:ff:a7:57:c9:a3:40:1a:a9:d6:18:ee:
7c:16:c4:0d:ef:14:bd:7a:4d:1e:01:57:4e:55:15:
f0:21:49:36:6e:37:58:ff:61:9a:89:8c:10:b5:2a:
a0:8d:d1:35:ae:89:17:4d:38:90:da:fc:34:37:eb:
01:47:14:07:b2:41:c1:a3:41:52:45:1d:10:88:a0:
3a:17:d4:e1:0c:f7:d0:20:5a:b1:0b:c5:5a:f9:8e:
d6:0a:93:13:02:46:5f:a9:00:e6:e4:77:98:75:ea:
ed:cb:d1:c3:f0:3d:f8:04:56:30:fc:a4:c7:ec:9e:
80:76:98:18:c1:26:54:e5:7c:97:b3:7c:64:ea:29:
74:a4:34:4f:35:e6:78:0d:4a:ec:17:26:02:ff:8b:
56:94:86:2c:5d:32:ea:85:f3:9a:28:70:34:d1:26:
d2:31:1e:ab:62:d8:ec:a6:12:d1:ac:dc:53:e2:52:
a0:ca:43:c1:0d:8c:d7:32:97:3d:10:76:ba:5b:c8:
fa:0e:0d:1e:36:2c:f9:d7:cb:88:7b:11:e0:91:63:
70:08:66:26:52:1b:6e:60:18:29:5e:d9:fb:88:a5:
ab:0b:ff:2b:e1:ed:e4:17:01:1b:7c:99:de:85:60:
02:1c:c1:02:7c:05:b5:3b:85:7e:57:b2:28:46:9d:
02:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:54:71:7A:56:16:6D:78:4D:01:D2:62:04:F5:F0:4D:23:11:32:C8
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/61RxelYWbXhNAdJiBPXwTSMRMsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.47.192.0/18
62.182.128.0/21
79.171.8.0/21
80.247.176.0/20
81.3.128.0/18
81.24.128.0/20
82.140.64.0/18
82.196.64.0/19
84.204.0.0/17
84.204.132.0-84.204.136.255
84.204.138.0-84.204.183.255
84.204.188.0-84.204.255.255
91.193.212.0/22
93.153.128.0/17
94.25.248.0/21
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
195.5.128.0/19
195.144.224.0/19
212.14.160.0/19
212.44.64.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.172.0.0/19
213.182.160.0/19
217.195.64.0/19
IPv6:
2a03:d000:9008::/46
Signature Algorithm: sha256WithRSAEncryption
7f:e4:82:d1:11:29:0a:39:ee:8b:20:3d:3f:05:b8:f6:29:16:
55:44:dc:c2:88:47:30:29:06:b0:5a:cb:01:f7:0e:70:9f:80:
b0:25:45:6d:71:ac:d2:2f:a8:bc:a9:e6:5f:75:88:27:e7:f4:
0f:db:08:59:35:36:61:4e:c0:16:32:71:6e:0e:a8:3c:a8:15:
9d:4b:3a:77:20:59:5b:26:36:88:1a:97:96:24:e8:4e:87:7e:
34:bf:64:07:b5:63:37:84:35:39:e3:e0:09:f7:2b:66:eb:d5:
21:9d:45:8b:eb:2a:01:55:d9:08:8b:46:8b:01:ba:39:15:b8:
b0:5d:30:a9:e8:1e:0a:f7:06:98:18:52:e4:98:46:d2:71:dd:
44:4e:a6:e8:18:7b:42:fa:18:cd:ab:96:bb:c8:26:14:03:c1:
c9:07:1f:46:b5:bf:fc:ae:7e:38:7f:3d:7a:be:b1:a9:ea:a2:
6d:30:56:cb:44:6c:a4:e4:5c:11:97:74:c2:32:0a:9a:be:95:
61:c4:89:b9:f9:ab:0c:8d:17:ab:86:7b:ea:fc:a0:82:60:c7:
1f:8e:12:ca:cd:4d:56:e3:9a:db:a1:1d:c7:c0:80:81:16:77:
9d:78:ae:e5:38:ea:28:11:c7:ef:8f:45:c3:5f:86:08:8d:2c:
63:ea:28:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:01 2025 by rpki-client on console.sobornost.net