Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/xJQ1NmTwb5nW6eYYOBg0AJ_CXgs.roa
File: xJQ1NmTwb5nW6eYYOBg0AJ_CXgs.roa (raw, json)
Hash identifier: C1a8fL4ZZOnpjBhpPYRNc5h8U0FJ+aCQwWl1JDgw9S8=
Subject key identifier: C4:94:35:36:64:F0:6F:99:D6:E9:E6:18:38:18:34:00:9F:C2:5E:0B
Certificate issuer: /CN=dde36e98021264f5a8070106780be29d48a16c67
Certificate serial: 019619E17211056DA740D7905A4DBE27987A
Authority key identifier: DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/xJQ1NmTwb5nW6eYYOBg0AJ_CXgs.roa
Signing time: Wed 09 Apr 2025 09:28:47 +0000
ROA not before: Wed 09 Apr 2025 09:28:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200484
IP address blocks: 1.179.120.0/21 maxlen: 24
77.32.128.0/18 maxlen: 24
77.32.192.0/19 maxlen: 24
94.143.16.0/21 maxlen: 24
153.92.224.0/19 maxlen: 24
172.246.0.0/18 maxlen: 24
172.246.240.0/20 maxlen: 24
185.24.144.0/22 maxlen: 24
185.41.28.0/22 maxlen: 24
185.107.232.0/22 maxlen: 24
212.146.192.0/18 maxlen: 24
213.32.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:19:e1:72:11:05:6d:a7:40:d7:90:5a:4d:be:27:98:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dde36e98021264f5a8070106780be29d48a16c67
Validity
Not Before: Apr 9 09:28:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c494353664f06f99d6e9e618381834009fc25e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:59:db:b8:df:e3:84:c4:27:07:62:b4:81:d8:
9d:ef:79:16:f3:86:63:5f:c2:4b:7c:c1:ed:76:5c:
79:a7:4a:42:b5:59:7d:0c:04:c7:ff:83:03:58:d1:
3e:92:5a:5c:4d:e1:39:38:d7:d7:11:be:f0:04:67:
d9:48:f2:3a:ab:cd:51:cb:7a:01:33:ab:d7:42:a9:
5b:42:95:bc:4b:01:eb:9b:1c:1b:1b:fa:09:b0:77:
ef:b1:12:f3:d5:64:5d:72:fd:9a:c6:f3:1e:98:b7:
1c:e9:cc:4a:46:e8:ae:5b:46:32:cd:4d:47:cf:2d:
0b:d8:87:7d:9b:c3:71:d0:44:01:ed:5b:7c:49:3c:
44:e5:7b:9a:ce:aa:01:b4:88:03:87:fb:2e:1c:b7:
cf:b5:a5:e0:b7:a0:48:24:7c:68:ba:ec:7d:45:70:
e7:d7:52:fb:eb:79:2e:83:f3:b1:fe:5c:77:53:fd:
65:bf:88:a7:e2:76:72:42:26:d3:ba:b0:ab:08:e9:
0c:db:83:9f:74:3d:23:35:34:43:8a:35:61:b1:af:
11:8e:f4:a0:de:ae:0f:4f:3b:9a:a2:25:77:21:62:
82:03:be:bf:13:37:a4:9a:bf:06:91:5e:dd:45:c9:
db:e4:65:6e:c2:ce:e4:c8:c3:69:ae:49:b5:87:1c:
4c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:94:35:36:64:F0:6F:99:D6:E9:E6:18:38:18:34:00:9F:C2:5E:0B
X509v3 Authority Key Identifier:
keyid:DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/xJQ1NmTwb5nW6eYYOBg0AJ_CXgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.179.120.0/21
77.32.128.0-77.32.223.255
94.143.16.0/21
153.92.224.0/19
172.246.0.0/18
172.246.240.0/20
185.24.144.0/22
185.41.28.0/22
185.107.232.0/22
212.146.192.0/18
213.32.128.0/18
Signature Algorithm: sha256WithRSAEncryption
3c:7f:58:00:d8:f6:41:0b:28:94:40:f0:c4:2e:a7:b6:7d:2d:
75:37:b8:07:b2:33:c1:5a:a2:a1:4f:45:a1:93:ba:a6:7b:30:
8f:15:d2:f9:b4:13:83:54:39:35:b7:d0:08:ff:40:60:44:64:
f8:3a:c9:fd:8d:cd:03:bd:d1:40:d2:f2:13:82:17:29:83:f9:
f5:4c:90:a2:eb:d1:1c:5a:5f:ac:ef:8e:b2:00:f9:63:17:84:
96:4a:db:0a:49:69:6e:2e:f9:5c:b0:23:08:c0:fc:6d:99:8a:
88:d9:23:b9:b0:04:63:e6:c2:be:26:bc:52:22:8c:03:53:99:
67:5d:d5:63:7a:70:c7:18:4b:ee:6b:8b:21:62:9c:42:ed:b4:
a4:84:f2:c0:18:e0:13:e1:d1:64:6a:24:d3:44:11:fa:bd:2c:
4d:18:7c:24:1d:b3:c2:cb:95:3a:29:09:fe:6a:50:f1:06:1f:
d0:3a:96:97:b2:39:28:e4:4c:95:78:19:11:d8:13:f1:fb:7f:
26:10:1d:a6:53:cf:37:41:bb:3d:48:ff:3b:df:a6:fb:dd:54:
4e:2d:85:b2:b1:b0:fb:b3:0f:27:78:d4:fd:a5:8a:d0:d9:01:
93:4e:02:ca:0c:49:32:e5:60:11:5e:0f:db:68:5b:3a:e6:84:
b7:f3:35:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:04 2025 by rpki-client on console.sobornost.net