Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/pvPeLuuSqvnydIStL4P9DuWVtYA.roa
File: pvPeLuuSqvnydIStL4P9DuWVtYA.roa (raw, json)
Hash identifier: C8ff2Zf9CTA2oeuvJGqFxbDznE8Hz9cgUhSwUH70zDc=
Subject key identifier: A6:F3:DE:2E:EB:92:AA:F9:F2:74:84:AD:2F:83:FD:0E:E5:95:B5:80
Certificate issuer: /CN=0526b03c717184c3680817e55e2455f85d73a413
Certificate serial: 0192288FD9932C4455F4390A25010324F2D0
Authority key identifier: 05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/pvPeLuuSqvnydIStL4P9DuWVtYA.roa
Signing time: Wed 25 Sep 2024 09:42:48 +0000
ROA not before: Wed 25 Sep 2024 09:42:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49453
IP address blocks: 37.123.208.0/24 maxlen: 24
37.123.210.0/24 maxlen: 24
45.133.250.0/24 maxlen: 24
109.202.97.0/24 maxlen: 24
109.202.98.0/24 maxlen: 24
109.202.99.0/24 maxlen: 24
109.202.100.0/24 maxlen: 24
109.202.101.0/24 maxlen: 24
109.202.102.0/24 maxlen: 24
109.202.103.0/24 maxlen: 24
109.202.104.0/24 maxlen: 24
109.202.106.0/24 maxlen: 24
109.202.107.0/24 maxlen: 24
109.202.108.0/24 maxlen: 24
109.202.109.0/24 maxlen: 24
109.202.110.0/24 maxlen: 24
109.202.111.0/24 maxlen: 24
109.232.224.0/24 maxlen: 24
109.232.225.0/24 maxlen: 24
109.232.226.0/24 maxlen: 24
109.232.227.0/24 maxlen: 24
109.232.228.0/24 maxlen: 24
109.232.229.0/24 maxlen: 24
109.232.230.0/24 maxlen: 24
109.232.231.0/24 maxlen: 24
134.19.176.0/24 maxlen: 24
134.19.177.0/24 maxlen: 24
134.19.178.0/24 maxlen: 24
134.19.179.0/24 maxlen: 24
134.19.180.0/24 maxlen: 24
134.19.181.0/24 maxlen: 24
134.19.182.0/24 maxlen: 24
134.19.183.0/24 maxlen: 24
134.19.184.0/24 maxlen: 24
134.19.185.0/24 maxlen: 24
134.19.186.0/24 maxlen: 24
134.19.187.0/24 maxlen: 24
134.19.188.0/24 maxlen: 24
134.19.189.0/24 maxlen: 24
134.19.190.0/23 maxlen: 23
185.23.212.0/22 maxlen: 22
185.23.214.0/24 maxlen: 24
188.95.49.0/24 maxlen: 24
188.95.50.0/24 maxlen: 24
188.95.51.0/24 maxlen: 24
188.95.52.0/24 maxlen: 24
188.95.53.0/24 maxlen: 24
213.152.160.0/24 maxlen: 24
213.152.161.0/24 maxlen: 24
213.152.162.0/24 maxlen: 24
213.152.163.0/24 maxlen: 24
213.152.164.0/24 maxlen: 24
213.152.165.0/24 maxlen: 24
213.152.166.0/24 maxlen: 24
213.152.167.0/24 maxlen: 24
213.152.168.0/24 maxlen: 24
213.152.169.0/24 maxlen: 24
213.152.170.0/24 maxlen: 24
213.152.171.0/24 maxlen: 24
213.152.172.0/24 maxlen: 24
213.152.173.0/24 maxlen: 24
213.152.174.0/24 maxlen: 24
213.152.176.0/24 maxlen: 24
213.152.177.0/24 maxlen: 24
213.152.180.0/24 maxlen: 24
213.152.181.0/24 maxlen: 24
213.152.182.0/24 maxlen: 24
213.152.183.0/24 maxlen: 24
213.152.184.0/24 maxlen: 24
213.152.185.0/24 maxlen: 24
213.152.186.0/24 maxlen: 24
213.152.187.0/24 maxlen: 24
213.152.188.0/22 maxlen: 22
213.152.188.0/24 maxlen: 24
213.152.189.0/24 maxlen: 24
2a00:1678:1337::/48 maxlen: 48
2a00:1678:2470::/48 maxlen: 48
2a00:1678:3cc0::/48 maxlen: 48
2a00:1678:5524::/48 maxlen: 48
2a00:1678:5afe::/48 maxlen: 48
2a00:1678:b00b::/48 maxlen: 48
2a00:1678:baba::/48 maxlen: 48
2a00:1678:da7a::/48 maxlen: 48
2a00:1678:dea1::/48 maxlen: 48
2a00:1678:efa5::/48 maxlen: 48
2a00:1678:fa11::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:28:8f:d9:93:2c:44:55:f4:39:0a:25:01:03:24:f2:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0526b03c717184c3680817e55e2455f85d73a413
Validity
Not Before: Sep 25 09:42:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6f3de2eeb92aaf9f27484ad2f83fd0ee595b580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:04:43:91:79:dd:2e:49:f4:c9:cf:99:44:5e:
9a:36:de:05:1a:7f:01:6e:d7:0b:9a:6c:00:fa:d1:
4b:6e:fb:7b:41:c5:12:88:4e:a0:7c:c1:fd:af:55:
95:97:b5:8d:3b:d2:07:21:a1:b2:61:7f:48:ad:53:
c5:43:55:ec:b3:6c:96:b9:af:9d:ca:40:d5:15:5f:
8d:5b:a8:4e:04:71:d9:1c:ba:fc:56:65:82:d5:3d:
31:71:2d:f9:4a:e7:e9:88:f2:bd:60:30:d2:30:be:
88:01:f0:20:84:50:3d:8b:b8:4e:df:2e:cd:bd:f6:
d7:51:c5:65:e6:3f:90:5d:a5:61:df:35:75:ae:6f:
2e:70:03:9a:fd:a6:2f:a3:1c:30:d0:d9:c1:8f:7e:
61:5a:5c:0a:91:8f:39:91:59:30:5f:94:3f:de:2e:
69:83:89:38:71:af:a7:39:0b:51:de:49:c7:8a:cc:
da:2b:e6:1c:cc:5c:7f:b8:db:62:ce:48:fd:76:ad:
90:dd:b7:04:c8:15:b3:5a:ec:09:40:f2:c5:25:5a:
18:42:35:7d:f0:31:d7:f3:c6:99:25:01:b7:ac:85:
f4:d9:2c:75:5d:dd:ba:a4:53:de:b6:77:8e:97:77:
c2:a6:f9:0e:e7:c7:ad:72:09:7b:34:ac:2a:01:65:
64:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F3:DE:2E:EB:92:AA:F9:F2:74:84:AD:2F:83:FD:0E:E5:95:B5:80
X509v3 Authority Key Identifier:
keyid:05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/pvPeLuuSqvnydIStL4P9DuWVtYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.123.208.0/24
37.123.210.0/24
45.133.250.0/24
109.202.97.0-109.202.104.255
109.202.106.0-109.202.111.255
109.232.224.0/21
134.19.176.0/20
185.23.212.0/22
188.95.49.0-188.95.53.255
213.152.160.0-213.152.174.255
213.152.176.0/23
213.152.180.0-213.152.191.255
IPv6:
2a00:1678:1337::/48
2a00:1678:2470::/48
2a00:1678:3cc0::/48
2a00:1678:5524::/48
2a00:1678:5afe::/48
2a00:1678:b00b::/48
2a00:1678:baba::/48
2a00:1678:da7a::/48
2a00:1678:dea1::/48
2a00:1678:efa5::/48
2a00:1678:fa11::/48
Signature Algorithm: sha256WithRSAEncryption
11:4e:c8:4e:e6:4a:59:91:2b:3d:fb:bd:9d:77:57:52:8a:1a:
22:f3:a4:00:26:04:b6:4a:68:bd:2f:98:61:88:f8:39:b6:bd:
df:52:cd:28:32:52:76:3f:b9:06:72:d7:91:07:3d:f1:99:ba:
25:b2:e5:fc:64:03:69:f0:e9:ed:69:67:13:59:d4:1b:1a:b4:
4d:ed:47:0b:aa:a5:b2:eb:de:74:df:3f:b0:1a:ac:3c:4c:aa:
f6:0c:74:75:1b:8b:47:97:b1:42:5f:70:ac:61:dd:f2:4b:f3:
e4:6b:fe:7c:e4:07:c9:19:72:92:78:9a:f9:bd:d4:76:34:4e:
54:38:49:11:df:4f:c3:54:c1:d5:2b:8e:b1:2e:e5:a9:46:bc:
ac:f3:48:7e:58:23:e9:23:75:da:eb:4d:3f:1b:d2:53:db:39:
aa:d2:52:a2:b3:e3:a5:f7:34:af:58:2d:34:db:f2:fb:26:42:
4d:7b:fc:c4:95:f4:7b:cb:6d:97:1d:ae:ee:f9:84:88:2e:8c:
d6:48:ca:11:11:40:76:3d:ea:fb:03:11:e4:86:54:23:d2:d1:
63:f6:4e:46:1d:4f:47:ba:9b:26:a3:d6:10:cb:f9:6e:29:45:
5b:b9:36:f1:37:ad:68:ef:0b:47:9e:cc:82:44:a0:ba:e5:1b:
48:d5:06:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:22:18 2024 by rpki-client on console.sobornost.net