Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/xgmy0sqwA2aGVF5twml3PF6jHVs.roa
File: xgmy0sqwA2aGVF5twml3PF6jHVs.roa (raw, json)
Hash identifier: TiGnF5pl1wlg4dnvVcdyr5lG9rpTWjsJi0mQ3O+Hoq8=
Subject key identifier: C6:09:B2:D2:CA:B0:03:66:86:54:5E:6D:C2:69:77:3C:5E:A3:1D:5B
Certificate issuer: /CN=7d43b0ec79951d5d5580133e5329a90f2fee1c5b
Certificate serial: 01942521FEC7A6D085E01C6AA7037F38193B
Authority key identifier: 7D:43:B0:EC:79:95:1D:5D:55:80:13:3E:53:29:A9:0F:2F:EE:1C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUOw7HmVHV1VgBM-UympDy_uHFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/xgmy0sqwA2aGVF5twml3PF6jHVs.roa
Signing time: Thu 02 Jan 2025 03:49:32 +0000
ROA not before: Thu 02 Jan 2025 03:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34545
IP address blocks: 37.130.192.0/24 maxlen: 24
37.130.193.0/24 maxlen: 24
37.130.194.0/24 maxlen: 24
37.130.195.0/24 maxlen: 24
185.45.80.0/24 maxlen: 24
185.45.81.0/24 maxlen: 24
185.45.82.0/24 maxlen: 24
185.45.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:fe:c7:a6:d0:85:e0:1c:6a:a7:03:7f:38:19:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d43b0ec79951d5d5580133e5329a90f2fee1c5b
Validity
Not Before: Jan 2 03:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c609b2d2cab0036686545e6dc269773c5ea31d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:74:dd:fe:8e:23:55:3b:d6:29:ea:e6:29:70:
eb:3d:e1:23:89:06:a7:c8:86:83:1a:6b:c7:b9:be:
35:cd:62:f1:b4:02:c0:2a:a9:c3:dd:e0:6d:68:ea:
5a:9a:a1:92:61:60:9f:de:9d:26:42:10:22:ba:f7:
26:6d:06:70:6b:2d:31:85:d7:24:6f:aa:5f:5f:9f:
cb:bc:59:77:cf:67:12:44:0d:7c:76:1d:a3:6f:de:
1c:fb:b1:36:6e:1e:03:9d:d0:de:b0:c3:e5:66:ab:
91:9a:ad:04:fb:92:ee:f1:13:1b:d6:a4:05:89:44:
b7:d6:54:d0:be:18:61:2c:21:ea:ec:49:64:c6:3a:
00:7f:87:0d:97:ea:3e:d4:3f:55:c5:28:e3:54:ba:
5f:a4:12:62:54:27:d1:60:3a:12:34:ef:60:38:b8:
6f:76:76:cb:76:56:ad:af:f0:f4:b1:a6:6c:83:72:
53:96:5c:19:d4:ef:ad:62:bd:ce:2d:43:35:18:01:
e1:c7:12:5d:46:2c:bb:a5:7f:65:de:61:b7:1d:d1:
0a:0b:47:be:86:c2:32:ea:4f:8e:0e:d6:dd:20:06:
de:4b:d9:6f:14:37:c9:26:e8:41:f4:b2:ee:d4:2d:
21:59:29:8c:db:1f:86:d2:81:e0:d0:51:3c:8d:a7:
cd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:09:B2:D2:CA:B0:03:66:86:54:5E:6D:C2:69:77:3C:5E:A3:1D:5B
X509v3 Authority Key Identifier:
keyid:7D:43:B0:EC:79:95:1D:5D:55:80:13:3E:53:29:A9:0F:2F:EE:1C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUOw7HmVHV1VgBM-UympDy_uHFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/xgmy0sqwA2aGVF5twml3PF6jHVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/fUOw7HmVHV1VgBM-UympDy_uHFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.130.192.0/22
185.45.80.0/22
Signature Algorithm: sha256WithRSAEncryption
26:3f:ea:51:92:7c:5e:14:3d:45:d9:df:22:1b:04:47:df:88:
3c:99:e4:a5:a2:07:4d:fe:03:26:22:45:24:fa:d3:dd:52:a6:
6c:9c:0b:6b:05:59:e7:f2:b0:e1:7d:f8:5e:97:04:df:2d:44:
7d:1c:68:7e:ab:88:cd:46:4a:ce:a2:05:bf:ba:f0:87:59:4a:
46:da:88:ab:2e:44:62:25:0f:a5:36:6f:de:0f:4c:55:9b:f8:
3d:c8:cb:62:56:d5:84:2b:65:7e:4a:c2:9d:ab:24:7e:e6:28:
6c:d8:f5:5d:7a:93:e1:81:1d:fb:12:49:58:07:a9:ba:c5:be:
4f:75:4f:dd:ff:67:4f:5e:68:16:6f:7e:51:77:c3:0f:6f:cb:
b6:97:22:82:58:ac:fb:e1:3b:31:b7:62:0f:d7:ab:7f:e2:d9:
ce:c3:4e:51:3c:5e:e5:1e:36:17:6d:8b:6d:cd:7a:a9:de:50:
7c:a8:51:72:29:49:82:5c:36:a2:de:0d:86:85:4c:18:03:d9:
b3:58:36:b3:e1:04:2c:7b:f0:51:c7:38:e4:98:a2:cc:32:64:
af:e6:64:f4:04:1d:2b:83:23:37:d7:93:cd:d1:f2:2f:58:94:
eb:f5:9f:08:6c:1a:8c:e7:5d:0a:ae:02:d6:53:af:aa:2b:88:
49:26:d3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:45 2025 by rpki-client on console.sobornost.net