Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/2cILvfy_Y8sBWPqBEv-bTSv9h0w.roa
File: 2cILvfy_Y8sBWPqBEv-bTSv9h0w.roa (raw, json)
Hash identifier: 8uhOdIgcxmr8qEAMLIQFDmCHp28kcqGJRy+w98pxNfg=
Subject key identifier: D9:C2:0B:BD:FC:BF:63:CB:01:58:FA:81:12:FF:9B:4D:2B:FD:87:4C
Certificate issuer: /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial: 01952487ECE3831BB9A1EAD0B954694A132E
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/2cILvfy_Y8sBWPqBEv-bTSv9h0w.roa
Signing time: Thu 20 Feb 2025 18:04:02 +0000
ROA not before: Thu 20 Feb 2025 18:04:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200350
IP address blocks: 31.44.8.0/21 maxlen: 24
37.230.172.0/22 maxlen: 24
37.230.188.0/22 maxlen: 24
45.133.96.0/22 maxlen: 24
46.21.244.0/22 maxlen: 24
51.250.0.0/17 maxlen: 24
62.84.112.0/20 maxlen: 24
84.201.128.0/18 maxlen: 24
84.252.128.0/20 maxlen: 24
89.169.128.0/18 maxlen: 24
89.232.188.0/22 maxlen: 24
93.77.160.0/19 maxlen: 24
130.193.32.0/19 maxlen: 24
158.160.0.0/16 maxlen: 24
178.154.192.0/18 maxlen: 24
185.206.164.0/22 maxlen: 24
185.216.194.0/23 maxlen: 24
193.32.216.0/22 maxlen: 24
213.165.192.0/19 maxlen: 24
217.28.224.0/20 maxlen: 24
217.198.168.0/21 maxlen: 24
2a0d:d6c0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:24:87:ec:e3:83:1b:b9:a1:ea:d0:b9:54:69:4a:13:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Validity
Not Before: Feb 20 18:04:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9c20bbdfcbf63cb0158fa8112ff9b4d2bfd874c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:03:36:82:6d:6c:5c:9c:86:5b:8c:b5:7d:5a:
22:57:ac:65:ee:15:a2:8a:9a:95:26:df:1f:5e:67:
c9:a0:f8:c1:86:5d:16:fd:28:94:09:80:61:33:b1:
a0:9a:9a:7e:87:e0:ed:73:75:2d:8d:70:37:59:ff:
93:d3:aa:43:27:9b:88:61:d2:f9:78:c3:3c:66:dd:
29:4a:e3:c6:fe:c5:16:ad:7e:36:fa:e5:71:14:68:
c6:a7:39:c7:e9:cf:10:df:20:3c:37:01:ab:1d:8d:
e4:75:c6:d2:67:f1:ff:6e:69:12:f4:b7:e6:c0:c9:
3c:4b:dc:e0:52:86:c3:3f:8c:ed:14:df:c2:2d:d5:
36:42:18:cd:72:03:1c:ba:8b:0f:80:bb:97:a1:90:
76:c7:98:23:74:14:72:d5:21:3d:4f:51:d8:d3:4f:
dc:ed:d4:15:3e:33:ea:a8:ba:41:7d:78:1a:a9:d5:
e2:56:e7:43:35:1e:4c:bd:00:8a:97:46:0b:97:32:
56:b9:06:5a:c7:e6:9e:20:20:bc:99:25:39:ab:87:
b3:f4:8e:c2:87:54:05:6b:74:13:5f:23:f7:20:21:
e6:8f:5c:93:db:59:df:a9:2d:58:83:cd:56:2a:58:
4f:26:7e:ab:8a:93:2f:81:33:1f:35:c9:8f:58:bb:
7a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C2:0B:BD:FC:BF:63:CB:01:58:FA:81:12:FF:9B:4D:2B:FD:87:4C
X509v3 Authority Key Identifier:
keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/2cILvfy_Y8sBWPqBEv-bTSv9h0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.8.0/21
37.230.172.0/22
37.230.188.0/22
45.133.96.0/22
46.21.244.0/22
51.250.0.0/17
62.84.112.0/20
84.201.128.0/18
84.252.128.0/20
89.169.128.0/18
89.232.188.0/22
93.77.160.0/19
130.193.32.0/19
158.160.0.0/16
178.154.192.0/18
185.206.164.0/22
185.216.194.0/23
193.32.216.0/22
213.165.192.0/19
217.28.224.0/20
217.198.168.0/21
IPv6:
2a0d:d6c0::/29
Signature Algorithm: sha256WithRSAEncryption
50:6b:f1:8a:06:98:0e:f9:cb:24:45:bb:d2:a3:e0:3e:c4:9b:
a9:1f:62:06:df:bb:8f:3e:22:be:7e:71:92:98:8f:2d:85:1e:
15:2d:79:09:15:ad:62:7a:9d:11:a0:59:d2:de:fe:6e:90:fd:
7c:9b:51:7a:78:01:54:78:0d:f2:bb:b3:04:a3:df:01:fb:1f:
e6:15:2f:78:88:9f:2c:6c:ac:aa:cb:13:da:31:b5:4c:36:39:
c5:80:c1:a7:7f:81:03:fc:82:7b:2d:7e:59:19:3d:e7:0f:d8:
d7:d2:a7:22:69:83:fc:0d:92:ae:ba:e4:d2:ba:33:69:c8:36:
e3:2d:59:6e:f1:ca:e9:18:8e:40:bb:f2:26:53:53:75:00:46:
ad:13:ed:f0:a4:5f:09:b1:67:3d:e2:79:e4:aa:c1:2a:5e:8c:
5b:d2:86:c6:0e:5a:72:20:34:7e:1b:f6:74:7d:a1:23:93:06:
ef:e3:cd:69:24:15:2c:67:7e:f4:38:c7:87:8c:fb:63:e7:4b:
a9:7e:43:99:86:89:1a:d9:cb:2a:db:5a:79:01:03:7b:51:09:
98:d9:0d:c4:dc:85:cd:bf:e3:8e:23:ec:19:1a:63:c4:ca:e1:
b2:c9:f9:36:23:71:02:4f:af:f4:7e:2b:c6:9f:3c:04:b8:fc:
c5:cd:e1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:33 2025 by rpki-client on console.sobornost.net