
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/w4LW7zHqdRwf5xp9Nxx8wL8FDUg.roa
File: w4LW7zHqdRwf5xp9Nxx8wL8FDUg.roa (raw, json)
Hash identifier: oGfzvQqO8H+H4OeaXmu0Ddzv2AJCmRw62vTi1N91LDk=
Subject key identifier: C3:82:D6:EF:31:EA:75:1C:1F:E7:1A:7D:37:1C:7C:C0:BF:05:0D:48
Certificate issuer: /CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
Certificate serial: 0193AAEC7142A0C4A247C4BEF489CD7C27BF
Authority key identifier: 29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/w4LW7zHqdRwf5xp9Nxx8wL8FDUg.roa
Signing time: Mon 09 Dec 2024 10:17:22 +0000
ROA not before: Mon 09 Dec 2024 10:17:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48573
IP address blocks: 31.185.0.0/21 maxlen: 21
31.185.0.0/22 maxlen: 22
31.185.0.0/24 maxlen: 24
31.185.1.0/24 maxlen: 24
31.185.2.0/24 maxlen: 24
31.185.3.0/24 maxlen: 24
31.185.4.0/22 maxlen: 22
31.185.4.0/24 maxlen: 24
31.185.5.0/24 maxlen: 24
31.185.6.0/24 maxlen: 24
94.143.40.0/21 maxlen: 21
94.143.40.0/22 maxlen: 22
94.143.40.0/24 maxlen: 24
94.143.42.0/23 maxlen: 23
94.143.44.0/22 maxlen: 22
95.215.136.0/22 maxlen: 22
95.215.136.0/23 maxlen: 23
95.215.138.0/23 maxlen: 23
185.43.8.0/22 maxlen: 22
185.43.8.0/23 maxlen: 23
185.43.8.0/24 maxlen: 24
185.43.10.0/23 maxlen: 23
193.29.230.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:aa:ec:71:42:a0:c4:a2:47:c4:be:f4:89:cd:7c:27:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
Validity
Not Before: Dec 9 10:17:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c382d6ef31ea751c1fe71a7d371c7cc0bf050d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a6:c3:19:1c:7d:28:d0:a6:be:ac:96:4a:aa:
79:ee:29:db:52:06:d5:02:49:da:5c:c1:2b:69:ab:
86:01:19:19:d6:19:0b:16:28:2b:b3:71:11:9e:6b:
31:b1:de:27:04:1a:09:68:b9:67:04:e0:8a:4f:13:
75:bb:16:12:2c:c3:70:ef:2b:f1:64:56:1b:60:e6:
37:51:38:82:9a:1c:d5:eb:1d:f4:a8:3a:b3:90:01:
5e:3d:30:d0:38:cb:0a:2d:12:05:27:6d:6c:12:b3:
25:8b:db:f7:ac:35:70:51:4c:44:63:8e:ad:22:33:
e6:34:52:48:fd:ba:72:6c:94:8b:78:b8:78:6f:72:
67:7d:db:05:be:8a:0c:39:ef:93:03:0a:84:34:1f:
89:f4:7f:5f:90:28:06:a5:b6:f3:7b:6a:51:81:5e:
34:c2:f3:1d:6f:c1:5e:a8:99:41:a8:23:48:f6:4a:
ae:0b:09:24:26:14:f0:54:8b:2e:8a:a7:aa:a0:87:
a4:59:7e:6f:97:4d:3a:fc:81:6a:63:e5:de:26:81:
71:30:a1:a0:90:b6:25:d1:ac:75:81:34:cc:7f:2e:
e3:0f:06:61:b9:25:6b:2a:ba:4b:1a:57:a8:7c:6b:
e3:1d:c6:7f:b3:06:a7:1d:2a:c8:d2:45:3a:01:61:
16:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:82:D6:EF:31:EA:75:1C:1F:E7:1A:7D:37:1C:7C:C0:BF:05:0D:48
X509v3 Authority Key Identifier:
keyid:29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/w4LW7zHqdRwf5xp9Nxx8wL8FDUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.0.0/21
94.143.40.0/21
95.215.136.0/22
185.43.8.0/22
193.29.230.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:d5:fc:aa:88:d9:d1:e4:5f:5b:50:f9:96:0f:3a:5f:4a:35:
e6:ba:b3:49:c9:f0:b0:f5:3d:63:b8:2f:94:f8:de:09:cd:1f:
d1:52:c8:b3:af:7b:91:1d:f2:a9:26:68:11:0a:8a:36:b9:ab:
c9:c7:b4:4b:eb:b0:9c:68:99:a4:ff:6c:4d:01:56:fd:b9:21:
a7:6d:8d:28:34:f7:f8:a1:84:a0:d1:19:a4:38:ee:81:27:17:
ea:be:6a:29:c0:aa:90:ff:35:0a:9a:4f:8b:14:cd:0e:76:37:
20:e4:f2:42:17:11:3b:45:b9:26:7e:f8:13:b3:7b:44:2a:1a:
e4:3f:bf:93:a4:41:56:53:90:94:99:94:1c:8b:99:70:34:d1:
d5:d7:61:74:94:a7:c8:20:6e:e7:d9:cd:69:d2:79:09:9e:81:
01:4f:92:e1:3d:45:a9:bd:8f:5d:e4:3c:b8:bb:91:a4:dd:91:
30:d1:17:f0:d0:1a:46:36:fc:31:6b:4a:3a:da:fd:bd:5a:16:
50:26:bc:7a:43:0b:79:b1:5f:22:63:27:95:ff:12:07:0d:b2:
e9:e4:43:f1:10:9d:c7:96:0b:ac:e9:e7:ce:54:d2:88:cc:50:
ba:cc:d4:b6:9f:cb:56:1f:65:40:e2:b4:a4:ad:e0:9d:e0:32:
4a:e1:d3:32
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZOq7HFCoMSiR8S+9InNfCe/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MGJjYzUwYTlhMzNiYTU2NTFlZmQxYWZlNDBiNmZkYjAy
NTU2ZjAwHhcNMjQxMjA5MTAxNzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzgyZDZlZjMxZWE3NTFjMWZlNzFhN2QzNzFjN2NjMGJmMDUwZDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6bDGRx9KNCmvqyWSqp57inbUgbV
AknaXMEraauGARkZ1hkLFigrs3ERnmsxsd4nBBoJaLlnBOCKTxN1uxYSLMNw7yvx
ZFYbYOY3UTiCmhzV6x30qDqzkAFePTDQOMsKLRIFJ21sErMli9v3rDVwUUxEY46t
IjPmNFJI/bpybJSLeLh4b3JnfdsFvooMOe+TAwqENB+J9H9fkCgGpbbze2pRgV40
wvMdb8FeqJlBqCNI9kquCwkkJhTwVIsuiqeqoIekWX5vl006/IFqY+XeJoFxMKGg
kLYl0ax1gTTMfy7jDwZhuSVrKrpLGleofGvjHcZ/swanHSrI0kU6AWEW5QIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFMOC1u8x6nUcH+cafTccfMC/BQ1IMB8GA1UdIwQY
MBaAFCkLzFCpozulZR79Gv5Atv2wJVbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1F2TVVLbWpPNlZsSHYwYV9rQzJfYkFsVnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80YjZlZjQtMzhlZS00YzA2LThjYjYt
NzY5ODI0OTNlYTFhLzEvdzRMVzd6SHFkUndmNXhwOU54eDh3TDhGRFVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi80YjZlZjQtMzhlZS00YzA2LThjYjYtNzY5ODI0OTNlYTFh
LzEvS1F2TVVLbWpPNlZsSHYwYV9rQzJfYkFsVnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQDH7kAAwQD
Xo8oAwQCX9eIAwQCuSsIAwQBwR3mMA0GCSqGSIb3DQEBCwUAA4IBAQCn1fyqiNnR
5F9bUPmWDzpfSjXmurNJyfCw9T1juC+U+N4JzR/RUsizr3uRHfKpJmgRCoo2uavJ
x7RL67CcaJmk/2xNAVb9uSGnbY0oNPf4oYSg0RmkOO6BJxfqvmopwKqQ/zUKmk+L
FM0Odjcg5PJCFxE7RbkmfvgTs3tEKhrkP7+TpEFWU5CUmZQci5lwNNHV12F0lKfI
IG7n2c1p0nkJnoEBT5LhPUWpvY9d5Dy4u5Gk3ZEw0Rfw0BpGNvwxa0o62v29WhZQ
Jrx6Qwt5sV8iYyeV/xIHDbLp5EPxEJ3Hlgus6efOVNKIzFC6zNS2n8tWH2VA4rSk
reCd4DJK4dMy
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:06 2024 by rpki-client on console.sobornost.net