Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/xMAjKtWSy3O3ueG3eLGdxn_I8X0.roa
File: xMAjKtWSy3O3ueG3eLGdxn_I8X0.roa (raw, json)
Hash identifier: MBZ3kdVcs5gRlOV57CA3KUfQyhpTLpZByGRhpmF/Dz8=
Subject key identifier: C4:C0:23:2A:D5:92:CB:73:B7:B9:E1:B7:78:B1:9D:C6:7F:C8:F1:7D
Certificate issuer: /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial: 01925C2BD26E8D9DF11C693F6E2614C8DCA4
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/xMAjKtWSy3O3ueG3eLGdxn_I8X0.roa
Signing time: Sat 05 Oct 2024 10:13:48 +0000
ROA not before: Sat 05 Oct 2024 10:13:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202468
IP address blocks: 37.32.0.0/19 maxlen: 24
37.32.0.0/22 maxlen: 22
37.32.4.0/22 maxlen: 22
37.32.8.0/22 maxlen: 22
37.32.12.0/22 maxlen: 22
37.32.16.0/24 maxlen: 24
37.32.17.0/24 maxlen: 24
37.32.18.0/24 maxlen: 24
37.32.19.0/24 maxlen: 24
37.32.20.0/22 maxlen: 22
37.32.24.0/22 maxlen: 22
37.32.28.0/22 maxlen: 24
37.152.176.0/20 maxlen: 24
37.152.184.0/24 maxlen: 24
94.101.176.0/20 maxlen: 24
94.101.180.0/23 maxlen: 23
94.101.180.0/24 maxlen: 24
94.101.182.0/24 maxlen: 24
94.101.184.0/21 maxlen: 24
185.97.116.0/22 maxlen: 24
185.143.232.0/22 maxlen: 24
185.206.92.0/22 maxlen: 24
185.220.224.0/22 maxlen: 22
185.220.224.0/24 maxlen: 24
185.220.225.0/24 maxlen: 24
185.220.226.0/24 maxlen: 24
185.220.227.0/24 maxlen: 24
185.226.116.0/22 maxlen: 24
185.228.236.0/22 maxlen: 22
185.228.236.0/24 maxlen: 24
185.228.237.0/24 maxlen: 24
185.228.238.0/24 maxlen: 24
185.228.239.0/24 maxlen: 24
185.231.180.0/22 maxlen: 22
185.239.104.0/22 maxlen: 24
185.239.104.0/24 maxlen: 24
185.239.105.0/24 maxlen: 24
185.239.106.0/23 maxlen: 23
188.121.96.0/19 maxlen: 24
188.121.104.0/22 maxlen: 22
188.121.108.0/22 maxlen: 22
188.121.120.0/21 maxlen: 24
188.121.124.0/23 maxlen: 23
188.121.127.0/24 maxlen: 24
193.176.240.0/22 maxlen: 24
193.176.242.0/23 maxlen: 23
2a07:3900::/29 maxlen: 29
2a07:3900::/32 maxlen: 32
2a07:3900::/48 maxlen: 48
2a07:3900:1::/48 maxlen: 48
2a07:3901::/32 maxlen: 32
2a07:3902::/32 maxlen: 32
2a07:3902:100::/40 maxlen: 40
2a07:3902:200::/40 maxlen: 40
2a07:3902:300::/40 maxlen: 40
2a07:3902:400::/40 maxlen: 40
2a07:3902:500::/40 maxlen: 40
2a07:3902:a100::/40 maxlen: 40
2a07:3903::/32 maxlen: 32
2a07:3904::/32 maxlen: 32
2a07:3905::/32 maxlen: 32
2a07:3906::/32 maxlen: 32
2a07:3907::/32 maxlen: 32
2a0c:a7c0::/29 maxlen: 29
2a0c:a7c0::/48 maxlen: 48
2a0c:a7c0:1::/48 maxlen: 48
2a0c:a7c0:2::/48 maxlen: 48
2a0c:a7c0:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:5c:2b:d2:6e:8d:9d:f1:1c:69:3f:6e:26:14:c8:dc:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Validity
Not Before: Oct 5 10:13:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4c0232ad592cb73b7b9e1b778b19dc67fc8f17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4f:cb:ec:88:85:43:50:fe:55:0b:29:09:45:
2f:8f:e1:04:b1:84:00:c2:c0:ae:cf:dc:61:a0:e6:
39:18:9b:2f:fd:80:b8:88:d4:33:78:a5:9c:f9:94:
72:99:0d:c5:d0:34:2f:0e:b9:33:2d:d6:18:3b:04:
db:bb:46:c5:9a:69:ec:e6:c4:5c:32:6f:08:6e:7e:
e9:5c:12:9f:a5:42:9c:40:67:6e:2e:68:09:82:4f:
a1:ff:5d:29:95:d6:cf:60:42:db:a6:89:9a:1c:40:
09:65:dd:4f:da:31:34:3d:dd:f4:0b:1a:30:ac:77:
cf:49:76:ba:26:5e:2f:a3:10:fb:7b:2b:c4:2c:11:
33:86:c3:65:b3:9c:fa:40:ef:9f:38:fc:20:16:a4:
53:dc:7b:a6:be:10:65:24:ed:88:aa:49:c9:f6:08:
d6:97:32:1f:9d:2f:27:a9:a8:7b:78:83:fa:e0:c6:
ef:b4:86:35:ad:d9:03:51:16:2f:89:e0:15:8f:15:
7f:58:04:c4:9a:fc:67:6b:35:34:a3:5b:4b:9f:40:
ed:a6:4b:46:fe:b5:b8:fb:11:35:73:5a:ad:70:6d:
fe:e8:6a:7e:a8:82:82:7e:08:6b:4a:5d:8d:4d:02:
92:9a:5d:14:6a:fc:39:ff:72:7a:bf:e1:0b:49:4d:
74:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C0:23:2A:D5:92:CB:73:B7:B9:E1:B7:78:B1:9D:C6:7F:C8:F1:7D
X509v3 Authority Key Identifier:
keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/xMAjKtWSy3O3ueG3eLGdxn_I8X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.0.0/19
37.152.176.0/20
94.101.176.0/20
185.97.116.0/22
185.143.232.0/22
185.206.92.0/22
185.220.224.0/22
185.226.116.0/22
185.228.236.0/22
185.231.180.0/22
185.239.104.0/22
188.121.96.0/19
193.176.240.0/22
IPv6:
2a07:3900::/29
2a0c:a7c0::/29
Signature Algorithm: sha256WithRSAEncryption
8b:60:d9:f0:e5:17:c8:2f:03:3c:7d:cd:cd:0f:e2:70:5f:f4:
ba:93:5c:ab:0c:15:f1:29:e3:9a:49:8b:73:1c:d7:ac:16:1b:
37:d5:9f:39:fd:db:81:68:6e:0f:aa:a0:6d:f6:b2:eb:62:2e:
0e:46:0a:71:0f:c6:42:78:e2:a1:3b:a2:38:8a:8b:94:8f:8c:
a8:73:53:86:3f:84:3b:85:10:ec:55:49:29:a9:6c:f6:98:31:
e1:38:6f:99:10:34:d7:34:8e:1a:34:9d:52:1b:da:ff:22:fd:
6a:77:2f:22:27:14:57:76:ab:fa:61:97:d8:37:14:9c:a2:5b:
83:1d:45:07:97:1b:0e:2f:fa:ec:05:06:d0:8e:c0:5f:2c:13:
44:68:e7:cd:47:b3:e6:68:d3:5c:8c:06:ac:18:00:4f:09:73:
95:34:a7:47:21:0c:5d:b4:64:07:23:7c:e0:74:66:b3:a9:5a:
47:ed:81:2b:04:0c:69:c3:2f:a9:19:c5:ad:db:b9:2d:ea:13:
83:ae:02:01:81:18:54:a9:89:16:e8:29:b2:e7:03:6a:0a:09:
51:f4:24:99:2a:dc:44:6f:aa:fd:d0:44:ae:65:3f:e9:ad:db:
b6:69:46:be:88:ce:91:a6:32:24:26:5a:e8:5d:a9:cd:a7:d5:
75:6a:0f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:22:42 2024 by rpki-client on console.sobornost.net