Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/dTANz_D1FTJZI4fFpjq19Vmdu64.roa
File: dTANz_D1FTJZI4fFpjq19Vmdu64.roa (raw, json)
Hash identifier: cBGTX25XssWMGn8n1XFIaexuafmpcDrnO4Wi9O3T6Nw=
Subject key identifier: 75:30:0D:CF:F0:F5:15:32:59:23:87:C5:A6:3A:B5:F5:59:9D:BB:AE
Certificate issuer: /CN=ec3a633ef2c08251a58603562e56aa6efa93ec25
Certificate serial: 0193CA2F11D71C04152EA550D61E17559D6A
Authority key identifier: EC:3A:63:3E:F2:C0:82:51:A5:86:03:56:2E:56:AA:6E:FA:93:EC:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/dTANz_D1FTJZI4fFpjq19Vmdu64.roa
Signing time: Sun 15 Dec 2024 11:58:22 +0000
ROA not before: Sun 15 Dec 2024 11:58:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12975
IP address blocks: 37.8.0.0/17 maxlen: 20
37.8.0.0/20 maxlen: 20
37.8.16.0/20 maxlen: 20
37.8.32.0/20 maxlen: 20
37.8.48.0/20 maxlen: 20
82.102.192.0/18 maxlen: 24
82.102.192.0/20 maxlen: 20
82.102.208.0/21 maxlen: 21
82.102.218.0/23 maxlen: 23
82.102.220.0/22 maxlen: 22
82.102.224.0/20 maxlen: 20
82.102.240.0/20 maxlen: 20
82.205.0.0/17 maxlen: 21
82.205.0.0/20 maxlen: 20
82.205.16.0/20 maxlen: 20
82.205.27.0/24 maxlen: 24
82.205.96.0/20 maxlen: 20
82.205.104.0/21 maxlen: 21
82.205.120.0/21 maxlen: 21
85.113.96.0/19 maxlen: 24
86.107.16.0/22 maxlen: 22
87.252.108.0/22 maxlen: 22
89.239.32.0/20 maxlen: 20
94.26.112.0/20 maxlen: 20
109.232.162.0/23 maxlen: 23
109.232.162.0/24 maxlen: 24
109.232.163.0/24 maxlen: 24
147.189.176.0/20 maxlen: 20
176.65.12.0/22 maxlen: 22
185.40.192.0/22 maxlen: 22
185.90.242.0/24 maxlen: 24
185.138.132.0/22 maxlen: 22
185.171.132.0/22 maxlen: 22
188.209.208.0/22 maxlen: 22
188.215.100.0/22 maxlen: 22
194.169.121.0/24 maxlen: 24
194.169.122.0/23 maxlen: 23
194.169.122.0/24 maxlen: 24
194.169.123.0/24 maxlen: 24
199.204.215.0/24 maxlen: 24
199.250.128.0/19 maxlen: 21
212.33.96.0/19 maxlen: 20
212.106.64.0/19 maxlen: 20
217.21.0.0/20 maxlen: 20
217.21.2.0/24 maxlen: 24
217.21.3.0/24 maxlen: 24
217.21.4.0/24 maxlen: 24
217.21.5.0/24 maxlen: 24
217.21.6.0/23 maxlen: 23
217.21.8.0/23 maxlen: 23
217.21.10.0/23 maxlen: 23
217.21.12.0/23 maxlen: 23
217.21.14.0/23 maxlen: 23
217.66.224.0/19 maxlen: 24
217.66.233.0/24 maxlen: 24
217.66.234.0/23 maxlen: 23
217.66.237.0/24 maxlen: 24
217.66.240.0/20 maxlen: 20
217.78.48.0/20 maxlen: 20
217.78.48.0/21 maxlen: 21
217.78.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ca:2f:11:d7:1c:04:15:2e:a5:50:d6:1e:17:55:9d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3a633ef2c08251a58603562e56aa6efa93ec25
Validity
Not Before: Dec 15 11:58:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75300dcff0f51532592387c5a63ab5f5599dbbae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b5:90:8b:38:65:21:6e:2c:c3:63:4e:0d:61:
1a:43:ab:7f:75:12:db:83:7a:5c:4a:0e:ba:2a:30:
34:2d:35:fb:39:b0:9b:a1:53:51:62:d1:67:86:eb:
ed:bf:5f:c8:94:19:85:4e:90:16:1d:ca:24:cd:e5:
0d:d5:f0:d7:b7:f9:04:a0:3c:a5:30:74:07:2b:17:
85:69:24:89:1a:a0:4a:16:89:b7:51:67:d8:11:3d:
4c:d8:ab:45:c8:ce:f8:c5:02:50:3a:61:ad:40:5c:
aa:42:55:5b:16:84:f1:81:3a:d0:34:84:25:36:f3:
f1:da:d8:70:8c:ea:a6:3d:77:97:ae:4d:c2:b8:f5:
09:73:eb:6a:aa:a0:4b:6d:60:9f:c4:8a:a4:27:83:
cb:6a:f0:cd:f2:23:79:8c:2e:33:de:4b:ac:7f:34:
c6:b2:ff:9e:47:a1:44:98:b5:b5:25:ad:35:f4:d2:
f0:29:73:69:ad:dc:f0:04:10:46:e7:2b:50:d5:8f:
52:c4:ac:43:d6:e3:96:97:a8:2f:da:42:6f:7d:5f:
04:db:44:58:54:b1:c4:c6:06:40:3e:1d:e0:86:aa:
87:ab:6b:13:95:29:84:25:71:42:c2:70:30:4c:a4:
20:d0:e8:b6:3f:3b:3c:02:78:2d:78:98:5e:e3:46:
54:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:30:0D:CF:F0:F5:15:32:59:23:87:C5:A6:3A:B5:F5:59:9D:BB:AE
X509v3 Authority Key Identifier:
keyid:EC:3A:63:3E:F2:C0:82:51:A5:86:03:56:2E:56:AA:6E:FA:93:EC:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/dTANz_D1FTJZI4fFpjq19Vmdu64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.8.0.0/17
82.102.192.0/18
82.205.0.0/17
85.113.96.0/19
86.107.16.0/22
87.252.108.0/22
89.239.32.0/20
94.26.112.0/20
109.232.162.0/23
147.189.176.0/20
176.65.12.0/22
185.40.192.0/22
185.90.242.0/24
185.138.132.0/22
185.171.132.0/22
188.209.208.0/22
188.215.100.0/22
194.169.121.0-194.169.123.255
199.204.215.0/24
199.250.128.0/19
212.33.96.0/19
212.106.64.0/19
217.21.0.0/20
217.66.224.0/19
217.78.48.0/20
Signature Algorithm: sha256WithRSAEncryption
17:45:ee:dc:e1:84:c5:c1:ef:19:88:6c:61:f4:00:ee:20:81:
fd:94:df:1a:6a:df:1f:9d:78:6c:b8:c0:d6:30:09:f6:07:1f:
e3:0b:96:50:2c:70:58:1f:15:88:e3:91:36:75:65:2f:b6:1d:
cf:3b:8c:09:02:6b:41:fb:a0:a3:65:67:a6:8a:bc:ea:4c:7e:
2c:16:22:4d:2c:16:1f:7a:d7:73:eb:2b:3b:0f:ff:5f:b4:e2:
7a:f4:73:d6:79:81:f9:f4:1c:17:b0:d1:98:b5:b9:64:06:17:
38:f9:f3:12:f0:96:9b:23:32:51:28:04:52:a2:38:9c:5f:a0:
33:d6:ea:0a:63:58:8c:d2:27:f5:db:d4:54:6c:06:4e:63:ed:
9d:70:61:6d:77:b8:7e:e3:5c:14:0f:c0:30:35:54:02:15:f2:
c4:65:2a:2a:30:be:2a:f1:7a:2b:fb:30:45:0a:f4:15:9d:ed:
5e:a0:bc:4c:41:f8:ed:56:f2:41:5d:15:1f:85:7d:50:90:43:
fc:5b:0a:c6:65:5a:54:72:b1:cd:a5:ec:cc:19:91:26:87:41:
b4:b5:0a:f7:d7:e1:e4:95:e4:0f:9d:f6:57:15:7c:f4:52:dc:
63:2d:6b:7e:06:64:db:60:07:04:6d:bb:b9:64:a6:15:07:19:
57:03:47:4a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:57 2024 by rpki-client on console.sobornost.net