Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/Nh04CLMcck1XHS9AATe9hyD29NE.roa
File: Nh04CLMcck1XHS9AATe9hyD29NE.roa (raw, json)
Hash identifier: KRd9oxirDVyH2M186/c3VQHXMTtIMq/vRs5kMb4jBs0=
Subject key identifier: 36:1D:38:08:B3:1C:72:4D:57:1D:2F:40:01:37:BD:87:20:F6:F4:D1
Certificate issuer: /CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Certificate serial: 0194228E1A4BBAE8503E21F96B94A40DEA44
Authority key identifier: F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/Nh04CLMcck1XHS9AATe9hyD29NE.roa
Signing time: Wed 01 Jan 2025 15:48:45 +0000
ROA not before: Wed 01 Jan 2025 15:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41096
IP address blocks: 176.98.64.0/19 maxlen: 19
176.98.64.0/24 maxlen: 24
176.98.65.0/24 maxlen: 24
176.98.66.0/24 maxlen: 24
176.98.67.0/24 maxlen: 24
176.98.68.0/24 maxlen: 24
176.98.69.0/24 maxlen: 24
176.98.70.0/24 maxlen: 24
176.98.71.0/24 maxlen: 24
176.98.72.0/24 maxlen: 24
176.98.73.0/24 maxlen: 24
176.98.74.0/24 maxlen: 24
176.98.75.0/24 maxlen: 24
176.98.76.0/24 maxlen: 24
176.98.77.0/24 maxlen: 24
176.98.78.0/24 maxlen: 24
176.98.79.0/24 maxlen: 24
176.98.80.0/24 maxlen: 24
176.98.81.0/24 maxlen: 24
176.98.82.0/24 maxlen: 24
176.98.83.0/24 maxlen: 24
176.98.84.0/24 maxlen: 24
176.98.85.0/24 maxlen: 24
176.98.86.0/24 maxlen: 24
176.98.87.0/24 maxlen: 24
176.98.88.0/24 maxlen: 24
176.98.89.0/24 maxlen: 24
176.98.90.0/24 maxlen: 24
176.98.91.0/24 maxlen: 24
176.98.92.0/24 maxlen: 24
176.98.93.0/24 maxlen: 24
176.98.94.0/24 maxlen: 24
176.98.95.0/24 maxlen: 24
195.189.104.0/22 maxlen: 22
195.189.104.0/24 maxlen: 24
195.189.105.0/24 maxlen: 24
195.189.106.0/24 maxlen: 24
195.189.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:1a:4b:ba:e8:50:3e:21:f9:6b:94:a4:0d:ea:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Validity
Not Before: Jan 1 15:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=361d3808b31c724d571d2f400137bd8720f6f4d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ba:4c:b3:e2:d4:43:24:1b:e4:6b:b1:b6:ab:
26:5e:b5:95:dd:ed:1b:4d:ed:76:c7:fe:b4:8f:26:
09:4a:eb:f2:75:14:1b:9e:17:92:c5:1c:53:fb:c8:
bf:3a:f2:ba:19:99:4d:a9:5f:93:30:35:ba:58:8c:
14:88:25:c7:e1:3f:0d:0c:23:5f:1f:e5:8d:bb:88:
4b:00:c6:a6:50:d5:52:8d:f6:36:12:d8:20:6c:cf:
a1:1b:2b:5f:bb:34:f3:c7:61:04:60:e1:b2:27:a9:
67:41:70:9c:f4:ec:ac:a1:90:c9:27:b6:d6:21:81:
15:f1:98:f9:20:2e:45:4d:bb:1c:8d:bd:86:03:68:
2f:39:a1:ce:ba:b3:e1:bf:f2:ca:ac:55:6a:84:1e:
39:c0:9a:2d:a9:83:d4:60:ee:e2:ec:2d:00:50:25:
52:0f:c3:f6:37:36:ed:49:90:9b:5f:e5:79:fa:d5:
75:8d:e7:58:71:f8:f6:1e:ec:62:a9:dd:1c:84:7c:
a5:0f:67:55:b6:d3:d0:f2:53:4c:11:e9:5a:91:c6:
16:c9:e2:c5:4a:15:04:cc:08:74:ee:30:5d:cf:af:
56:2b:2c:85:ab:ce:1a:d0:d6:d5:28:47:ca:c7:13:
42:19:e7:f7:ec:1f:88:a8:0c:1f:36:c7:22:2c:95:
ff:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1D:38:08:B3:1C:72:4D:57:1D:2F:40:01:37:BD:87:20:F6:F4:D1
X509v3 Authority Key Identifier:
keyid:F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/Nh04CLMcck1XHS9AATe9hyD29NE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.98.64.0/19
195.189.104.0/22
Signature Algorithm: sha256WithRSAEncryption
08:07:6c:cd:4c:91:3f:67:71:6c:c3:78:a9:98:40:fd:43:68:
e9:38:96:d4:c9:e2:b2:76:ca:ec:f0:9f:f8:99:f3:ae:21:56:
0b:26:81:a9:82:8a:95:d5:d8:eb:10:10:15:23:9b:5e:d5:6a:
6a:dc:72:fd:30:9a:4e:5a:c4:da:c6:a2:9a:0c:63:d5:20:ea:
6f:d7:b1:d4:ad:d7:62:9a:22:a8:51:ca:c2:c0:1d:94:c9:f6:
7a:d4:6f:94:b7:d8:58:a7:60:df:07:85:ec:25:a1:27:7e:fb:
8d:b2:da:15:f1:bf:b6:90:ff:29:5f:90:7c:d0:4d:5a:1b:0d:
cc:02:37:05:f7:2d:26:73:b6:00:35:08:5e:45:b7:c7:84:8f:
0f:cf:d6:f8:93:ab:e4:c6:dc:13:f8:39:03:0a:e0:be:60:4f:
4c:e3:2f:7f:43:62:23:70:96:fe:29:c7:03:82:4e:8d:17:08:
a5:21:08:65:85:b2:de:6d:cd:80:b4:18:f2:d7:2d:a3:48:47:
f7:66:1e:2e:ad:8d:44:f4:24:56:5e:81:7a:09:ad:11:6d:84:
51:85:44:5f:14:bf:52:e9:38:90:88:63:a7:b1:3f:bb:e2:43:
e9:20:a9:42:e9:67:8b:67:7b:ed:68:1c:87:a0:51:b5:2f:b8:
78:45:1c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:34 2025 by rpki-client on console.sobornost.net