Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/XOVzhvscH8N4d6sEgIyp6_30v8Y.roa
File: XOVzhvscH8N4d6sEgIyp6_30v8Y.roa (raw, json)
Hash identifier: Y9OIFaOjYsRi94vlRebSi5qFrwQKDV+B/Tsch3vELIw=
Subject key identifier: 5C:E5:73:86:FB:1C:1F:C3:78:77:AB:04:80:8C:A9:EB:FD:F4:BF:C6
Certificate issuer: /CN=0526b03c717184c3680817e55e2455f85d73a413
Certificate serial: 019427481424E90FF4D5B62D2253370FEECC
Authority key identifier: 05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/XOVzhvscH8N4d6sEgIyp6_30v8Y.roa
Signing time: Thu 02 Jan 2025 13:50:22 +0000
ROA not before: Thu 02 Jan 2025 13:50:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49453
IP address blocks: 37.123.208.0/24 maxlen: 24
37.123.210.0/24 maxlen: 24
45.133.250.0/24 maxlen: 24
109.202.97.0/24 maxlen: 24
109.202.98.0/24 maxlen: 24
109.202.99.0/24 maxlen: 24
109.202.100.0/24 maxlen: 24
109.202.101.0/24 maxlen: 24
109.202.102.0/24 maxlen: 24
109.202.103.0/24 maxlen: 24
109.202.104.0/24 maxlen: 24
109.202.106.0/24 maxlen: 24
109.202.107.0/24 maxlen: 24
109.202.108.0/24 maxlen: 24
109.202.109.0/24 maxlen: 24
109.202.110.0/24 maxlen: 24
109.202.111.0/24 maxlen: 24
109.232.224.0/24 maxlen: 24
109.232.225.0/24 maxlen: 24
109.232.226.0/24 maxlen: 24
109.232.227.0/24 maxlen: 24
109.232.228.0/24 maxlen: 24
109.232.229.0/24 maxlen: 24
109.232.230.0/24 maxlen: 24
109.232.231.0/24 maxlen: 24
134.19.176.0/24 maxlen: 24
134.19.177.0/24 maxlen: 24
134.19.178.0/24 maxlen: 24
134.19.179.0/24 maxlen: 24
134.19.180.0/24 maxlen: 24
134.19.181.0/24 maxlen: 24
134.19.182.0/24 maxlen: 24
134.19.183.0/24 maxlen: 24
134.19.184.0/24 maxlen: 24
134.19.185.0/24 maxlen: 24
134.19.186.0/24 maxlen: 24
134.19.187.0/24 maxlen: 24
134.19.188.0/24 maxlen: 24
134.19.189.0/24 maxlen: 24
134.19.190.0/23 maxlen: 23
185.23.213.0/24 maxlen: 24
185.23.214.0/24 maxlen: 24
185.23.215.0/24 maxlen: 24
188.95.49.0/24 maxlen: 24
188.95.50.0/24 maxlen: 24
188.95.51.0/24 maxlen: 24
188.95.52.0/24 maxlen: 24
188.95.53.0/24 maxlen: 24
213.152.160.0/24 maxlen: 24
213.152.161.0/24 maxlen: 24
213.152.162.0/24 maxlen: 24
213.152.163.0/24 maxlen: 24
213.152.164.0/24 maxlen: 24
213.152.165.0/24 maxlen: 24
213.152.166.0/24 maxlen: 24
213.152.167.0/24 maxlen: 24
213.152.168.0/24 maxlen: 24
213.152.169.0/24 maxlen: 24
213.152.170.0/24 maxlen: 24
213.152.171.0/24 maxlen: 24
213.152.172.0/24 maxlen: 24
213.152.173.0/24 maxlen: 24
213.152.174.0/24 maxlen: 24
213.152.176.0/24 maxlen: 24
213.152.177.0/24 maxlen: 24
213.152.180.0/24 maxlen: 24
213.152.181.0/24 maxlen: 24
213.152.182.0/24 maxlen: 24
213.152.183.0/24 maxlen: 24
213.152.184.0/24 maxlen: 24
213.152.185.0/24 maxlen: 24
213.152.186.0/24 maxlen: 24
213.152.187.0/24 maxlen: 24
213.152.188.0/22 maxlen: 22
213.152.188.0/24 maxlen: 24
213.152.189.0/24 maxlen: 24
2a00:1678:127::/48 maxlen: 48
2a00:1678:a2b::/48 maxlen: 48
2a00:1678:1337::/48 maxlen: 48
2a00:1678:2470::/48 maxlen: 48
2a00:1678:3cc0::/48 maxlen: 48
2a00:1678:5524::/48 maxlen: 48
2a00:1678:5afe::/48 maxlen: 48
2a00:1678:b00b::/48 maxlen: 48
2a00:1678:baba::/48 maxlen: 48
2a00:1678:da7a::/48 maxlen: 48
2a00:1678:dea1::/48 maxlen: 48
2a00:1678:efa5::/48 maxlen: 48
2a00:1678:f113::/48 maxlen: 48
2a00:1678:fa11::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:14:24:e9:0f:f4:d5:b6:2d:22:53:37:0f:ee:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0526b03c717184c3680817e55e2455f85d73a413
Validity
Not Before: Jan 2 13:50:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ce57386fb1c1fc37877ab04808ca9ebfdf4bfc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8d:8d:bd:a7:33:17:a8:9e:e7:4b:28:9e:cb:
1c:4d:14:51:2c:0d:b4:8f:d2:da:20:8a:c0:cb:5c:
a0:5e:02:71:f1:0c:38:52:ff:37:62:a0:d1:2c:a9:
7c:2c:50:e1:01:70:f1:f6:60:4e:d9:60:b4:72:6a:
68:33:2f:af:87:bf:5e:c7:13:78:50:34:68:75:33:
e5:43:46:59:81:1e:0e:23:97:fe:47:43:b9:e0:f4:
b1:64:18:e9:97:25:06:9f:7a:d4:59:22:a1:7b:d3:
98:8c:6a:4d:c9:fe:74:ef:1f:86:f7:82:0b:f4:37:
60:96:6b:63:c3:a9:1b:34:82:e6:ea:3c:06:98:c5:
d1:5f:af:99:12:25:04:f4:f1:dd:c5:a5:26:89:74:
ec:ad:09:11:b3:df:a9:3d:69:a2:94:45:5f:96:2b:
3c:7e:e8:2e:0f:0c:0c:29:c8:4f:30:f9:ef:9d:86:
2d:c4:c7:74:ae:fd:ea:6d:af:74:b8:0c:d3:d3:ba:
b3:11:0f:bb:10:41:7e:c1:c0:4b:23:38:b9:6e:4a:
1f:03:fe:c2:b7:61:fb:04:93:97:9a:a9:56:5f:bd:
16:8a:00:4b:4e:a8:ea:9a:45:3b:f6:b9:be:24:0a:
98:3f:6c:a3:d5:8c:bd:c1:2f:e7:a5:a5:c1:93:cb:
50:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E5:73:86:FB:1C:1F:C3:78:77:AB:04:80:8C:A9:EB:FD:F4:BF:C6
X509v3 Authority Key Identifier:
keyid:05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/XOVzhvscH8N4d6sEgIyp6_30v8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.123.208.0/24
37.123.210.0/24
45.133.250.0/24
109.202.97.0-109.202.104.255
109.202.106.0-109.202.111.255
109.232.224.0/21
134.19.176.0/20
185.23.213.0-185.23.215.255
188.95.49.0-188.95.53.255
213.152.160.0-213.152.174.255
213.152.176.0/23
213.152.180.0-213.152.191.255
IPv6:
2a00:1678:127::/48
2a00:1678:a2b::/48
2a00:1678:1337::/48
2a00:1678:2470::/48
2a00:1678:3cc0::/48
2a00:1678:5524::/48
2a00:1678:5afe::/48
2a00:1678:b00b::/48
2a00:1678:baba::/48
2a00:1678:da7a::/48
2a00:1678:dea1::/48
2a00:1678:efa5::/48
2a00:1678:f113::/48
2a00:1678:fa11::/48
Signature Algorithm: sha256WithRSAEncryption
85:e3:d6:a9:a5:f9:da:70:a8:6d:57:f7:7a:9f:3d:3e:1f:5d:
eb:76:b6:0a:ce:a0:52:5a:e3:90:2b:0c:66:e5:7f:e1:8e:59:
0b:bd:59:cd:dd:ec:b3:c4:08:dd:25:bc:ba:d9:8c:74:41:86:
da:02:83:0b:d9:78:a0:7d:72:ab:ce:2a:20:cb:2a:f6:15:da:
10:88:cd:ca:d8:d5:34:39:99:49:b1:97:f9:92:ee:ca:36:45:
79:c0:04:c7:b0:f9:65:6b:db:8b:a1:62:17:90:a1:5a:30:92:
18:46:3c:2c:b2:ee:c2:75:8f:ec:fd:08:ab:0c:28:51:ae:45:
92:8d:26:7e:bb:08:64:8e:98:6d:e0:79:ef:f0:c4:d5:8b:21:
64:76:18:d0:2a:6a:44:53:88:c1:2b:31:18:28:58:2b:e7:59:
50:41:9a:55:8f:cc:ab:20:ad:83:cf:ca:bd:f8:cd:31:55:1a:
38:af:fc:c9:ed:1e:63:d0:d3:4c:7d:1f:bb:33:e0:6e:94:4d:
41:79:85:40:0b:31:7c:99:60:9e:85:0b:99:f4:ac:36:d7:08:
15:83:d2:b1:56:de:c9:92:ef:25:82:94:27:b9:55:40:61:aa:
b9:9d:e9:7c:bd:d1:01:8d:84:96:e2:45:dc:01:b7:5b:67:ed:
e3:96:e1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:16:40 2025 by rpki-client on console.sobornost.net